S I E M

Using Dynamic Block Lists

Perch offers the ability to generate text files of blacklisted IP, Domain and URL lists to consume as dynamic block lists into a customer firewall.

Enable Dynamic Block Lists in Perch

Note:

In order to turn this functionality on, you must have Admin or Owner permissions over the Company you are turning it on for.
  1. Open Organization Settings by clicking the gear icon in the upper right hand corner of the navigation.
  2. Select the organization you would like to turn dynamic blocking on, scroll to the Network section and click Enable.

This enables dynamic block lists to be serves from the sensor (this can take up to 24 hours to become fully functional)

Dynamic Block List locations

There are options to consume 3 different URL’s into the dynamic block list configuration of the firewall.

http://sensorip/palo/ips.txt contains IP addresses that are added to the list.

http://sensorip/palo/domains.txt contains domains that are added to the list.

http://sensorip/palo/urls.txt contains URLs that are added to the list.