CIsco ASA 5545x API

[pratik_193]

hey guys, 

Is there any way to create a API wherein i can integrate the firewall with any other IPS device

for e.g. an IP is detected as a high alert in IPS device, this IPS device will call an API , which will in turn block the IP on perimeter firewall...

Thanks in advance..

Pratik 

[Marvin Rhoads]

I have seen this done using some scriting on a Unix server. It can be made to take action (log into firewall via ssh, add an ACL or ACE and shun / no shun the address to delete any existing connections) based on some logs or events triggered from your IPS.