topic Re: FMC API Maximum Objects - 1000? in Network Security

FMC API Maximum Objects - 1000?

cyodesigns — Fri, 21 Feb 2020 16:32:35 GMT

Hi,

I have an FMC with 1260 TCP/UDP protocol objects configured in it. However when I try to pull down all the objects via a python script using a GET request using this URL:

https://10.0.0.1/api/fmc_config/v1/domain/12345678-12345678/object/protocolportobjects?limit=2000 (<<notice the 2000 here)

Only 1000 objects are extracted.

The script writes the GET data to a file, and in the file is the "links" section:

"links": {
"self": "https://10.232.6.65/api/fmc_config/v1/domain/12345678-12345678/object/protocolportobjects?offset=0&limit=1000" (<<notice the 1000 here)
}

It looks like the FMC changes the 2000 to 1000 and starts using an offset of 0.

I assume I can create a loop in python and get all the objects by changing the offset value and making multiple GET requests, but is it the case the FMC will only allow 1000 objects per GET request. Does anyone know if this is a hardcoded maximum?

Regards

Mark

Re: FMC API Maximum Objects - 1000?

Marvin Rhoads — Fri, 07 Dec 2018 09:25:25 GMT

1000 is the limit in Firepower 6.2.x.

https://www.cisco.com/c/en/us/td/docs/security/firepower/622/api/REST/Firepower_Management_Center_REST_API_Quick_Start_Guide_622/objects_in_the_rest_api.html#reference_zmj_lny_1cb

They haven't updated that guide for 6.3 yet - it may have changed as they have been working on increasing API functionality a lot.

Re: FMC API Maximum Objects - 1000?

cyodesigns — Fri, 07 Dec 2018 10:06:00 GMT

Thanks Marvin!!

Re: FMC API Maximum Objects - 1000?

Greg Terkanian — Fri, 19 Jul 2019 18:34:56 GMT

Looks like the limit is still there in 6.3. Is there a workaround? Is the pagination support in the API? If so, how?

Thanks.

Re: FMC API Maximum Objects - 1000?

Alexander Hartmaier — Wed, 24 Jul 2019 09:25:24 GMT

Of course there is.

So an implementation in Perl 5 from me at https://metacpan.org/release/Net-Cisco-FMC-v1/source/lib/Net/Cisco/FMC/v1.pm#L46

Re: FMC API Maximum Objects - 1000?

tyoung008 — Mon, 27 Sep 2021 18:22:34 GMT

This document -> https://www.cisco.com/c/en/us/td/docs/security/firepower/ftd-api/guide/ftd-rest-api.pdf up to 7.0 2021 stills says the limit is 1000 on the bottom of p. 29. Multiple queries is still the answer.