topic Re: Generate report for existing firewall rules in Network Security

Generate report for existing firewall rules

AkshayaArunan1346 — Fri, 21 Feb 2020 17:23:14 GMT

I need to extract the rules which can be disabled on my firewall.

Additionally number of rules which has been put to regulate traffic flow between each existing region from last one year.

Can anyone help me with the information or any link with which I can generate the same from the Firepower management center.

Re: Generate report for existing firewall rules

Francesco Molino — Sat, 10 Aug 2019 03:12:09 GMT

Hi

What version of FMC are you running?
If you go into your ACP menu, you'll have a button"Analyze Hit counts".
Then a popup window open up at the bottom of the page, you select AC (Access Control), and you'll be able to generate a PDF of the results.
If you want to export rules themselves, you'll need to use API calls because there isn't any other export methods.

Is that what you're looking for?

Re: Generate report for existing firewall rules

AkshayaArunan1346 — Sat, 10 Aug 2019 13:06:09 GMT

Its 4500. I cannot find the mentioned tabs.

Re: Generate report for existing firewall rules

Marvin Rhoads — Sat, 10 Aug 2019 13:26:59 GMT

The "Hit counts" feature for access control and prefilter rules was only added in Firepower Management Center release 6.4.

https://www.cisco.com/c/en/us/td/docs/security/firepower/640/relnotes/firepower-release-notes-640/features.html

Re: Generate report for existing firewall rules

Francesco Molino — Mon, 12 Aug 2019 21:42:52 GMT

Which version are you running because as mentionned by @Marvin Rhoads, only available on version 6.4 and +
That's why I asked what version of FMC you're running as 1st question 🙂

Re: Generate report for existing firewall rules

AkshayaArunan1346 — Sun, 10 May 2020 13:04:09 GMT

Its 6.4 v