Network Security

Cisco ISE ERS API does not give a list of sgmappinggroup

Hi,we need to fetch a list of all sgmappinggroup present in ISE (Cisco ISE 3.2 Patch 9). According to the documentation (https://developer.cisco.com/docs/identity-services-engine/v1/ers-open-api-ers-open-api/), the following request should return a l...

FTDv Promiscuous Mode causes tcp-not-syn drops on same ESXi host

We run FTDv HA pair managed by FMC on a 4-node vSAN cluster. Started noticing that VMs on the node where active FTD resides cannot establish TCP sessions (HTTPS, RDP) to resources in the same VLAN, while ICMP works fine. Moving VM to another node fix...

Inquiry Regarding Cisco Umbrella API

Could you please provide information on the Umbrella API?I have reviewed the site below, and my understanding is that it is possible to add identities to existing policies and to create the Destination Lists and Application Lists used by policies.Is ...

Resolved! Stealtwatch SMC: REST API Invalid JSON error

Hello TeamWhen I doing POST(PowerShell), SMC returns an error:{ "errors" : [ { "code" : 5060, "message" : "The Request received is invalid" }, "Invalid JSON." ] }This is a part of PowerShell script I use: # JSON query body $body = '{ "startDateTime":...

Resolved! API access to cdFMC audit log configuration changes

Hi there,I tried posting this in the Technology and Support forums and it was marked as spam within minutes. It's been an absolute nightmare to get any clear information on the API endpoints that we're trying to access, and this community is my only ...

Cert Enrollment FMC Rest API

Hi everyone, I've been exploring the Firepower Management Center (FMC) REST API, and I'm having trouble finding a method to add certificate enrollments to devices. I've successfully created certificate enrollments using the /api/fmc_config/v1/domain/...

ASA rest-api install

Hello,ASA 5516x, v 9.16(4)82 HA pairI'm unfamiliar with rest-api so I'm a little nervous about the unknown...I need to install rest-api to start monitoring and collecting logs (for now) for a new siem we are going to start using.Can't find anywhere t...

Resolved! API endpoint for the shunned IP from the FMC

Hi,I would like to know if there is specific api endpoint on the fmc that I can grab a list of all the shunned IP. Thanks in advance.

Resolved! CISCO ISE + NETCONF

Hi guys,i have a question: is it possible to configure cisco ISE (2.6) using NETCONF? thanks

Resolved! Deploy Via Ansible on FMC

Hello Team, Been trying to use ansible on FMC 7.4.5, to update host objects and manual NATs.1. Been able to update the host objects, but having challenges on the deployment of the same.This is because, from the GUI, when I want to deploy, there is a...

Resolved! Cisco ISE and ServiceNow automation!!!

Hi All,i tried to find Cisco Documentation where i can get Cisco ISE and Servicenow automation.i am trying to automate the Networkdevice addition/Deletion using servicenow, any documentation or link which help me to understand the process that would ...

Resolved! FMC CURL generatetoken error

Hi everybody, I'm trying to generate a token and I'm getting the following error message. curl -k -X POST --header 'Content-Type: application/json' --header 'Accept: application/json' -d '{"grant_type": "password","username": "api", "password": "pass...

CISCO ASA AUTOMATION

Hello Team,Am grateful this platform has really helped automate some critical manual tasks for FMC and cisco IOS devices.On the same , I have some cisco ASAs on my ecosystem, been trying to find guides on the same for automation, not sure if am looki...

ISE Guest API

Hi,we have a Cisco ISE deployment of two node where three separate interfaces are configured: one for management, one for the Sponsor Portal, and one for the Guest Portal. We are developing an external web portal that will use the ERS API (ISE versio...

ISE Opean API /api/v1/endpoint-custom-attribute gets 404

Hi,I'm trying to make an API Call to Cisco ISE Open API for Custom Attributes:GET /api/v1/endpoint-custom-attribute- But I get a 404 Not Found in ResponseAs described in this article, it should work:https://developer.cisco.com/docs/identity-services-...