You can configure the firewall to place IP addresses
on the block list in several ways, including the following:
Configure a DoS Protection policy rule with the Action
to Protect and apply a Classified DoS Protection
profile to the rule. The profile includes the Block Duration.
Configure a Security policy rule with a Vulnerability Protection
profile that uses a rule with the Action to Block IP and apply
the rule to a zone.
The Block IP List is supported on PA-3200 Series, PA-5200 Series,
and PA-7000 Series firewalls.