topic Re: Bulk import objects FMC 6.4 in Network Security

Bulk import objects FMC 6.4

ISEduo — Sun, 07 Jun 2020 20:07:07 GMT

HI, I have about few hundred FQDN objects. Which I have create on FMC. Is there any public script which can be used against FMC API to create them automatically?

Re: Bulk import objects FMC 6.4

Marvin Rhoads — Mon, 08 Jun 2020 06:20:25 GMT

Use the Cisco Firepower Migration Tool and only select objects (vs. objects, ACLs and NAT rules) when you get to the import step.

Re: Bulk import objects FMC 6.4

ISEduo — Mon, 08 Jun 2020 08:51:40 GMT

thanks. I presume the migration tool requires ASA object syntax in order to import the config. Can this also be done if have 100 lines of IP address or FQDN´s which I want to import into FMC?

Re: Bulk import objects FMC 6.4

Marvin Rhoads — Mon, 08 Jun 2020 09:26:28 GMT

Yes, the FMT requires ASA syntax. It's not hard to create that out of a raw text file though.

What's your reason for wanting the FQDNs to be imported into FMC? Depending on what it is, there might be easier ways.

Re: Bulk import objects FMC 6.4

ISEduo — Mon, 08 Jun 2020 13:52:43 GMT

Its a new servers which has not exists on the firewall before. So I have 100 FQDN´s which should be created as objects and then object group. I want use this group in my ACP.

Re: Bulk import objects FMC 6.4

ISEduo — Sat, 13 Jun 2020 18:42:23 GMT

Do you have any hints on this one?

"Yes, the FMT requires ASA syntax. It's not hard to create that out of a raw text file though."

Re: Bulk import objects FMC 6.4

Marvin Rhoads — Sun, 14 Jun 2020 14:09:29 GMT

You have a list of FQDNs. An ASA FQDN object looks like this (using www.cisco.com as an example FQDN):

object network www.cisco.com
  fqdn www.cisco.com

Take your list and process it though a script that wraps your FQDNs with the "object network obj-<fqdn>" and "fqdn <fqdn>" elements. You could probably even do it with an Excel macro or Notepad++ advanced search and replace.

Re: Bulk import objects FMC 6.4

ISEduo — Sun, 14 Jun 2020 14:06:44 GMT

Yes, but I though you already had a script to do that. I am not a programmer.

Re: Bulk import objects FMC 6.4

Shubham Bharti — Mon, 17 Aug 2020 17:15:59 GMT

Old Post but wanted to provide the solution if anyone else is looking for it. You can use the script provided in the link below :

https://github.com/shubhambharti89/FMCAPI/tree/master/URL-Obj

It has a CSV file with the format in which it needs the FQDN to be in. Once you have moved your FQDN to the CSV file - run the script with "python url-bulkpush.py"