Network Security

Resolved! reset logoff s2s vpn on fmc/ftd

Hello, I'm trying to find a way to programmatically reset/logoff a L2L VPN.- I've checked FMC/FTD API and I could find any useful endpoint.- I've checked Ansible modules, same result.So I switched to SSH:- I'm thinking of trying Netmiko, but it's not...

Resolved! FTD - Rest API to find usages of object

I am trying to delete certain objects using FTD Rest API such as network objects or url objects.Whenever one of them is being used by a rule or a group, the deletion is being prevented. I was trying to find a way to get all usages of an object so I c...

Resolved! Automating Security Assessments, and Concerns with PSIRT API

Hello! The company I work for has tasked me with checking the security advisories that Cisco publishes. This task seemed ripe for automation, especially since Cisco provides a restful API where you can access all of the advisories they publish. They ...

Resolved! Firepower REST API Certificate question..

I'm trying to use REST API to GET details of external ca certificates I've uploaded via FDM gui, I've noticed the external ca certificates that come with the device show up with details but not the one I've uploaded... Does anyone know why? I ask be...

Cisco FMC access control policy POST a 'BLOCK' action

I am trying to post a rule using {'action': 'BLOCK'} but this is failing. If I change the action to {'action': 'ALLOW'} the POST is successful. I have configured a rule with the block action in GUI and then checked the output in api-explorer and th...

Integrate Firepower in Cisco DNA

Hi all, would it be possible to integrate via REST API the Cisco Firepower to Cisco DNA to get an basing overview of the availability(up, down,...) of the FW? Goal is to have one GUI interface to monitor the network? Thank you Milan

FMC REST method for FTD Platform Settings

Looking for the method that exposes the FTD Platform settings. Devices--->Platform Settings. I want to get at the Banner, External Authentication, SNMP, Syslog, etc options

CSM REST API that returns in what "CSM Server Mode" we are on

Hello,I haven't been able to find an API that will return the CSM Server Mode the manager is currently on.from the API guide: Beginning with Version 2.0, write API-related methods are introduced; they support the write APIs in all the CSMserver modes...

Resolved! Custom SSH Port cisco Nexus 3548

Please how can I configure custom ssh port on this device " cisco Nexus 3548"

FMC create bulk rules containing Realm user group via API

Hi, I need to add around 100 rules and I used the API to do this and all worked fine except 1 thing. I had to remove some code that added the user group to each rule in the body for the post. Whenever it is added i get the Error in connection --> 4...

Problem: Updating custom attributes of endpoints in pxGrid context-in

Hi,We would like to update existing endpoints in ISE with custom attributes through pxGrid context-in. We tried sending endpoints data to com.cisco.endpoint.asset expecting all attributes to be updated for those endpoints. There seems to be an issue ...

Resolved! FMC and audit via API

Hello, I'm auditing access control policies changes by clicking on System > Monitoring - Audit > Audit and searching for the last 30 days with changes on the following subsystem: Policies > Access Control > Access Control > Firewall Policy Editor Wit...

Resolved! Question: Is there a way to update Endpoints in pxGrid without creating new ones?

I would like to only update endpoints in pxGrid if they already exist. Following Endpoint Asset documentation, there's an opType UPDATE for achieving this when publishing to /topic/com.cisco.endpoint.asset. It seems that it operates as an upsert (It ...

Is it possible to read devices macs that are behind vpn through PxGrid sessions?

We would like to satisfy a use case of devices that are connected through vpn and identify those devices by their MAC Addresses:1. The newer Cisco VPN has an ACIDex feature (AnyConnect Identity Extensions feature) that helps relay hardware/software a...

Problem restricting time range on queries to /security-events endpoint

Hello, I am trying to pull Stealthwatch Enterprise events for the last minute from Stealthwatch server v7.1.2 Here is the relevant Python code:***********************************************************************************************************...

Network Security

Forum Posts

Resolved! reset logoff s2s vpn on fmc/ftd

Resolved! FTD - Rest API to find usages of object

Resolved! Automating Security Assessments, and Concerns with PSIRT API

Resolved! Firepower REST API Certificate question..

Cisco FMC access control policy POST a 'BLOCK' action

Integrate Firepower in Cisco DNA

FMC REST method for FTD Platform Settings

CSM REST API that returns in what "CSM Server Mode" we are on

Resolved! Custom SSH Port cisco Nexus 3548

FMC create bulk rules containing Realm user group via API

Problem: Updating custom attributes of endpoints in pxGrid context-in

Resolved! FMC and audit via API

Resolved! Question: Is there a way to update Endpoints in pxGrid without creating new ones?

Is it possible to read devices macs that are behind vpn through PxGrid sessions?

Problem restricting time range on queries to /security-events endpoint

Cisco ISE ERS API does not give a list of sgmappinggroup

FTDv Promiscuous Mode causes tcp-not-syn drops on same ESXi host

Inquiry Regarding Cisco Umbrella API

ISE Guest API

ISE Opean API /api/v1/endpoint-custom-attribute gets 404

Stealtwatch SMC: REST API Invalid JSON error

API access to cdFMC audit log configuration changes

API endpoint for the shunned IP from the FMC

FMC CURL generatetoken error

Deploy Via Ansible on FMC