Customer can Block an IOC?

[Santiago Fernández]

Hello everyone, I hope you're all doing well. I hope you can help me with this issue: From the SOC where I work, we would like a client to be able to block an IOC from their portal once the issue is published and visible. Is this possible?

I'll share the progress I've made so far, as it's where I got stuck. First, I created a transition from 'Open' to 'Blocked'. This transition has a 'Post Function' where I activate a webhook, but I got stuck there because the webhook only allows me to perform actions within Jira, and to block it, I would need to do so within our firewalls. If you could give me a hand or some guidance, I would appreciate it.

My main objective is for the client to be able to take action on their assets and decide whether to block them or not from their own portal, making it more dynamic. Is this really possible?