Security Operations Integration - Block Request Flow

The Security Operations Integration - Block Request flow is a high-level flow independent of integrations. It blocks observables associated with a security incident. Use it to fulfill an integration such as Palo Alto Networks - Firewall.

The Security Operations Integration - Block Request flow can be triggered on an observable form, or from the Security Incident Observables related list on a security incident. On a list, it is in the drop-down action menu. On a form, it is a related link. Blocking a request is available only when you have an implementation installed for the block request capability.

[Omitted image “block-request-flow-V1.png”] Alt text: Flow designer for Security Operations Integration- Block Request Flow

Actions specific to this flow are described here. For more information on other actions, see Common Security Operations integration flows and orchestration activities.

Parent Topic:Security Operations Integration- Block Request capability