Thank you for your feedback.
Form temporarily unavailable. Please try again or contact docfeedback@servicenow.com to submit your comments.

Security Operations Integration - Block Request workflow

Log in to subscribe to topics and get notified when content changes.

Security Operations Integration - Block Request workflow

The Security Operations Integration - Block Request workflow is a high-level workflow independent of integrations. It blocks observables associated with a security incident. Use it to fulfill an integration such as Palo Alto Networks - Firewall.

Before you begin

Role required: sn_si.analyst

About this task

The Security Operations Integration - Block Request workflow can be triggered on an observable form, or from the Security Incident Observables related list on a security incident. On a list, it is in the drop-down action menu. On a form, it is a related link. Blocking a request is available only when you have an implementation installed for the block request capability.

Security Operations Integrations - Block Request workflow diagram

Activities specific to this workflow are described here. For more information on other activities, see Common integration workflow activities.

Feedback