Allow IP - Okta Zone

Supported versions

Supported Cortex XSOAR versions: 5.5.0 and later.

Sync a list of IP addresses to the Okta Network Zone with the given ID. Existing IPs in the Okta Zone which are not in the input list will be removed and the indicator will be untagged in Cortex XSOAR. IDs can be retrieved using !okta-list-zones. This playbook supports CIDR notation only (1.1.1.1/32) and not range notation (1.1.1.1-1.1.1.1)

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

  • Okta_v2

Scripts#

  • CompareLists
  • Set

Commands#

  • okta-get-zone
  • okta-update-zone
  • setIndicator
  • removeIndicatorField

Playbook Inputs#


NameDescriptionDefault ValueRequired
Indicator QueryIndicators matching the indicator query will be used as playbook inputOptional
IPIP addresses to set in the allow listRequired
ZoneIDID of the Okta Zone to update. Use !okta-list-zones to obtainRequired
IndicatorTagNameName of the Indicator Tag to apply to any IPs allow listed by this playbook.Okta_ZoneRequired

Playbook Outputs#


There are no outputs for this playbook.

Playbook Image#


Allow IP - Okta Zone