topic I have seen this done using in Network Security

CIsco ASA 5545x API

pratik_193 — Tue, 12 Mar 2019 04:36:01 GMT

hey guys,

Is there any way to create a API wherein i can integrate the firewall with any other IPS device

for e.g. an IP is detected as a high alert in IPS device, this IPS device will call an API , which will in turn block the IP on perimeter firewall...

Thanks in advance..

Pratik

I have seen this done using

Marvin Rhoads — Sat, 09 Aug 2014 02:01:22 GMT

I have seen this done using some scriting on a Unix server. It can be made to take action (log into firewall via ssh, add an ACL or ACE and shun / no shun the address to delete any existing connections) based on some logs or events triggered from your IPS.