topic Re: Firewall Policy in Network Security

Firewall Policy

benolyndav — Fri, 20 Jan 2023 11:06:21 GMT

Is it possible to generate a report which shows our full FTD policy (Firewall Policy). ??

Thanks

Re: Firewall Policy

Marius Gunnerud — Fri, 20 Jan 2023 12:03:04 GMT

This is unfortunately not possible. You would need a third party software to do this for you or create a script that dumps the rules into a csv file or similar.

We use AlgoSec Firewall Analyzer for firewall policy reports and compliance checks. Worth looking into in my opinion.

Re: Firewall Policy

balaji.bandi — Fri, 20 Jan 2023 12:19:43 GMT

Not on box, you can do some orchestration tools likeTuffin.

i was doing some research some time back found below usefull :

https://github.com/TheAlanNix/cisco-security-tools#

check some devnet API :

https://community.cisco.com/t5/network-security/api-based-tool-to-save-the-access-control-policy-from-fmc-as-csv/td-p/3943079

Re: Firewall Policy

Marvin Rhoads — Fri, 20 Jan 2023 18:33:31 GMT

In FMC, click the "generate Report" icon next to the Access Control Policy in the ACP listing. That gives you all of the security-related settings in a PDF.

Things like device settings (interface, routing etc), VPN and NAT aren't included but most everything else is there.