topic Re: Firepower API Object Usage in Network Security

Firepower API Object Usage

Scott_22 — Mon, 01 Mar 2021 15:18:55 GMT

Is it possible to pull a list of objects that are actively being used in an ACL (with hit counts)? The only mechanism I've found is the "find usage" icon beside the object. This obviously is a tedious process through the GUI with a large number of objects.

Re: Firepower API Object Usage

balaji.bandi — Mon, 01 Mar 2021 15:36:32 GMT

I believe you can do - look at the guide (install postman on your PC and just explore API options)

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/api/REST/Firepower_Management_Center_REST_API_Quick_Start_Guide_620/Objects_in_the_REST_API.html#concept_azj_d3c_bcb

Re: Firepower API Object Usage

Madhuri Dewangan — Fri, 05 Mar 2021 17:52:13 GMT

Hi Scott,

With current GET API for access rule, you wont be getting the hitcouts for each access-rules, wrt respect to direct mapping of objects to access rule, this can be still achieved via scripts.