> ## Documentation Index
> Fetch the complete documentation index at: https://levelblue-final.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# BlueApp for Akamai Enterprise Threat Protector Actions

The BlueApp for Akamai Enterprise Threat Protector (ETP) provides a set of orchestration actions that you can use to identify vulnerabilities and manage assets in your USM Anywhere environment. The following table lists the available actions from the BlueApp.

**Actions for the BlueApp for Akamai Enterprise Threat Protector**

<table>
  <thead>
    <tr>
      <th>Action</th>
      <th>Description</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>Add Items to Block List</td>
      <td>Run this action to add items to a block list from an event or alarm to restrict their access</td>
    </tr>

    <tr>
      <td>Add Items to Allowlist</td>

      <td>
        Run this action to add items to an allowlist to grant authorized access
      </td>
    </tr>

    <tr>
      <td>Remove Items from Block List</td>

      <td>
        Run this action to remove items from the Akamai ETP block list
      </td>
    </tr>

    <tr>
      <td>Remove Items from Allowlist</td>

      <td>
        Run this action to remove items from an allowlist via an event or alarm
      </td>
    </tr>

    <tr>
      <td>Add Items to Block List from Rule</td>
      <td>Run this action to add items to a block list from a rule to restrict their access</td>
    </tr>

    <tr>
      <td>Add Items to Allowlist from Rule</td>
      <td>Run this action to add items to an allowlist from a rule to grant authorized access</td>
    </tr>

    <tr>
      <td>Remove Items in Block List from Rule</td>
      <td>Run this action to remove items from a block list based on a predefined rule to restrict their access</td>
    </tr>

    <tr>
      <td>Remove Items in Allowlist from Rule</td>
      <td>Run this action to remove items from an allowlist based on a predefined rule to restrict or revoke access</td>
    </tr>

    <tr>
      <td>Create Custom List</td>
      <td>Run this action to create a custom Akamai ETP flist</td>
    </tr>
  </tbody>
</table>

**To view information about these actions in USM Anywhere**

1. In USM Anywhere, go to **Data Sources > BlueApps**.
2. Click the **Available Apps** tab.
3. Search for the BlueApp, and then click the tile.
4. Click the **Actions** tab to display information for the supported actions.
5. Click the **History** tab to display information about the executed orchestration actions.

## Launch Action from Alarms or Events

When you review the information in the [Alarm Details](https://levelblue-final.mintlify.site/documentation/usm-anywhere/user-guide/alarms/viewing-alarms-details.md) or [Event Details](https://levelblue-final.mintlify.site/documentation/usm-anywhere/user-guide/events/viewing-events-details.md) page, you can easily launch an action to have USM Anywhere respond to threats or suspicious activity generated from Akamai ETP.

**To launch an Akamai ETP response action for an alarm or event**

1. Go to **Activity > Alarms or Activity > Events**.

2. Click the alarm or event to open the details.

3. Click **Select Action**.

4. In the Select Action dialog box, select **Run Akamai ETP Action**.

5. Select the app action.

   Additional fields will be populated based on the action you've selected. Fill out the necessary fields for the app action.

6. Click **Run**.

   After USM Anywhere initiates the action for an alarm or event, it displays a confirmation dialog box.

   If you want to create a rule to apply the action to similar items that occur in the future, click **Create rule for similar alarms** or **Create rule for similar events** and [define the new rule](https://levelblue-final.mintlify.site/documentation/usm-anywhere/alienapps-guide/akami-etp/rules-alienapp-akamai-etp.md). If not, click **OK**.