topic Re: Cisco ASA API in Network Security

Cisco ASA API

sdasgupta — Fri, 21 Feb 2020 14:26:50 GMT

Hi,

We want to integrate Cisco ASA with automation tool. Suppose if I want to add a acl in FW it will create rule through automated way without any human intervention. Is it possible to get API to integrate the automation tool.

Re: Cisco ASA API

Flavio Miranda — Fri, 06 Oct 2017 11:06:34 GMT

Hello,

Yeah, it is possible. Cisco allows for using RESTful API on ASA.

For physical appliances you need to download and install the client on flash. For virtual appliances it comes installed and it is necessary activate.

After prepared the environment, you can control your ASA programatibily via API.

You can read,write and delete configuration via HTTPS requests.

Here an example:

https://< asa management ipaddress >/api/objects/networkobjects

Body content type: application/json

Raw body of the operation:

{

"kind": "object#NetworkObj",

"name": "TestNetworkRangeObj",

"host": {

"kind": "IPv4Network",

"value": "12.12.12.0/24"

}

-If I helped you somehow, please, rate it as useful.-

Re: Cisco ASA API

Karsten Iwen — Fri, 06 Oct 2017 11:05:02 GMT

You can use the ASA REST-API for that:

https://www.networkworld.com/article/2921386/security0/digging-deeper-into-the-cisco-asa-firewall-rest-api.html

https://www.cisco.com/c/en/us/td/docs/security/asa/api/qsg-asa-api.html

https://www.cisco.com/c/dam/en/us/td/docs/security/asa/api/asapedia_rest_api_122.pdf