(FMC)how to add an block ip into an network object and don't need to deploy (use API)?

shihchingWang75105 — Wed, 31 Mar 2021 07:51:16 GMT

[urgent problem.]
Hi!

I have fresh started Firepower. I'm connected to Cisco Smart License service.

I'm trying to add an ip into a network object and don't need to deploy that can still block IP.

We gonna add an block ip that use API,that can skip to deploy,still successful block ip.

Firest question is :

How can I add an block ip (use API), that can skip to deploy,still successful block ip?

Second question is :

How to use API to put ip into global-Block or global-White?

( FMC GUI : Security Intelligence > network Lists and Feeds )

Because I use /object/networkgroup/ can't find the global-Block or global-White id,that I need to use other API can find it ?

I need to put some ips into global-Block use API.

Re: (FMC)how to add an block ip into an network object and don't need to deploy (use API)?

Francesco Molino — Fri, 02 Apr 2021 03:55:56 GMT

Hi,

In the actual releases, you will need to deploy the config once modified the object.

You can use API to insert IPs into this blacklist group. The only API available for this group is a get.

Next release should bring a look like feature.