topic Re: ACL import/export from FMC in Network Security

ACL import/export from FMC

KayaaKashyap — Fri, 05 Jan 2024 17:48:29 GMT

Hello,

What are the steps to import and export ACL policy from FMC?

For import - what will be the format?For export- what will be the file type (e.g. pdf or excel) ?

If I am importing the ACL, will it override the existing ACL?

Re: ACL import/export from FMC

Rob Ingram — Fri, 05 Jan 2024 17:53:07 GMT

@KayaaKashyap yes you can import/export policies, full list here - https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/720/management-center-admin-72/tools-import-export.html?bookSearch=true

Re: ACL import/export from FMC

M02@rt37 — Fri, 05 Jan 2024 17:57:52 GMT

Hello @KayaaKashyap

You could export your configuration using FMC API, modify the JSON files to match your FTD ; also you could apply your config FTD using FDM API.

- Export/import on FMC: https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/configuration_import_and_export.html

JSON is a common format for exporting and importing configurations in network devices, including Cisco FMC.

Re: ACL import/export from FMC

MHM Cisco World — Fri, 05 Jan 2024 17:59:45 GMT

you import the ACL under device so I think there is no conflict.
MHM

Re: ACL import/export from FMC

KayaaKashyap — Fri, 05 Jan 2024 18:21:04 GMT

Let’s assume I am implementing new FTD in my network, Is it possible to make new list of ACLs and export in one go?

yes please let me know how and in which format?

Re: ACL import/export from FMC

Rob Ingram — Fri, 05 Jan 2024 18:24:44 GMT

@KayaaKashyap well if you have an FMC you can apply the same policies to the new FTD or just duplicate an existing Access Control Policy to assign to the new FTD. https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/720/management-center-device-config-72/access-policies.html

Re: ACL import/export from FMC

MHM Cisco World — Fri, 05 Jan 2024 18:25:28 GMT

when we use import export ? when we update or backup config
what about new FTD, only under new FTD device apply the ACL not need export/import
MHM

Re: ACL import/export from FMC

KayaaKashyap — Fri, 05 Jan 2024 18:26:10 GMT

What if We will configure new FMC and FTD and we have 1000 of ACLs to configure in this?

what can be the best possible way?

Re: ACL import/export from FMC

Rob Ingram — Fri, 05 Jan 2024 18:29:34 GMT

@KayaaKashyap ok so you have a new FMC and an old FMC? You could take a backup from the old FMC and restore the configuration to the new FMC. Or export and import the policies to the new FMC.