title: Block an adresse IP on firewall after detectinf port scan in ELK SIEM
body: <p>I am using elastic stack SIEM and I wanna know if there is a solution to interact with my firewall.
  SO after that the SIEM detect a port scanner I wanna that it adds a rule automatically in my firewall and block that IP addresse.</p>
  <p>Thanks for your answers.</p>