topic Re: need detailed format about importing a CSV object group in FMC 7.x in Network Security

need detailed format about importing a CSV object group in FMC 7.x

tryingtofixit — Thu, 21 Mar 2024 21:36:23 GMT

Yes, i have seen

it does not give the actual CSV format.

what is the csv format importing objects into an existing group in FMC?

If I were creating object via csv then i would need

Name, description, Type, Value, lookup

where my "type" could be host or range.

The below gives Zero info about what the headers are, etc:

From a post last year:

The required .csv structure is defined as follows:
- The first line should be the column header.
- If you are importing distinguished name objects, the column header should be "dn".
- If you are importing network objects, the column header should be "value".
Here is an example of how to create a .csv file for importing a network object group:
1. Open a new .csv file in a text editor.
2. Write "value" in the first line.
3. In the following lines, write the IP addresses or subnets that are part of your network object group, each on a separate line.

Ok great what is the value that goes in 1st line, my group name?
How are we delimiting the file. a csv needs comma's
If its only a singe line with no CSV and other headers, how can these values be import into the existing group.

Thanks!

tryingtofixit — Mon, 25 Mar 2024 17:27:42 GMT

bump, zero answers wow! am I posting in wrong group for FTD/FMC?

Rob Ingram — Mon, 25 Mar 2024 17:39:00 GMT

Once imported:-

tryingtofixit — Mon, 25 Mar 2024 18:05:53 GMT

thanks, yes, that is for creating objects from a CSV, 100% get that csv format. host, network, network range and fqdn.

So now you have created 20 vpn-ranges objects. how to I get these into an object group?

What is the format in CSV to import these individual objects into an object_group?

The object group has to be created in the GUI beforehand, but after that all is a mystery, much like Bigfoot or the Lochness Monster. 🙂

Thanks!

Rob Ingram — Mon, 25 Mar 2024 18:15:13 GMT

@tryingtofixit it doesn't look like you can do that natively from the FMC GUI. You modify groups using the API.

tryingtofixit — Mon, 25 Mar 2024 18:39:46 GMT

Thanks Rob. Rather than improve the GUI, cisco tosses it back to users, because everyone knows how to write code. 🙂

i am sure this has been mentioned many times here, the FMC GUI is horrible and need a huge update or overhaul.

Even Fortinet's antique GUI is better than the FMC. And the Palo Alto GUI blows the FMC GUI out of the water.

Hey it can't be that hard all they have to do is use the REST_API, right! 🙂