Security Operations Integration - Block Request Flow
The Security Operations Integration - Block Request flow is a high-level flow independent of integrations. It blocks observables associated with a security incident. Use it to fulfill an integration such as Palo Alto Networks - Firewall.
The Security Operations Integration - Block Request flow can be triggered on an observable form, or from the Security Incident Observables related list on a security incident. On a list, it is in the drop-down action menu. On a form, it is a related link. Blocking a request is available only when you have an implementation installed for the block request capability.
[Omitted image "block-request-flow-V1.png"] Alt text: Flow designer for Security Operations Integration- Block Request Flow
Actions specific to this flow are described here. For more information on other actions, see Common Security Operations integration flows and orchestration activities.
Parent Topic:Security Operations Integration- Block Request capability
--- title: Security Operations Integration - Block Request Flow description: The Security Operations Integration - Block Request flow is a high-level flow independent of integrations. It blocks observables associated with a security incident. Use it to fulfill an integration such as Palo Alto Networks - Firewall. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/secops-integration-block-request-workflow.html release: australia topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [Security Operations Integration- Block Request capability, Integration capabilities, Security Operations Integration Reference, Security Operations common functionality, Security Operations] --- # Security Operations Integration - Block Request Flow The Security Operations Integration - Block Request flow is a high-level flow independent of integrations. It blocks observables associated with a security incident. Use it to fulfill an integration such as Palo Alto Networks - Firewall. The **Security Operations Integration - Block Request** flow can be triggered on an observable form, or from the **Security Incident Observables** related list on a security incident. On a list, it is in the drop-down action menu. On a form, it is a related link. Blocking a request is available only when you have an implementation installed for the block request capability. \[Omitted image "block-request-flow-V1.png"\] Alt text: Flow designer for Security Operations Integration- Block Request Flow Actions specific to this flow are described here. For more information on other actions, see [Common Security Operations integration flows and orchestration activities](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/common-wf-activities.md). **Parent Topic:**[Security Operations Integration- Block Request capability](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/block-request-capability.md)
| title | Security Operations Integration - Block Request Flow |
| description | The Security Operations Integration - Block Request flow is a high-level flow independent of integrations. It blocks observables associated with a security incident. Use it to fulfill an integration such as Palo Alto Networks - Firewall. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/security-management/secops-integration-block-request-workflow.html |
| release | australia |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | Security Operations Integration- Block Request capabilityIntegration capabilitiesSecurity Operations Integration ReferenceSecurity Operations common functionalitySecurity Operations |