Cisco ASA API

[sdasgupta]

Hi,

We want to integrate Cisco ASA with automation tool. Suppose if I want to add a acl in FW it will create rule through automated way without any human intervention. Is it possible to get API to integrate the automation tool.

[Flavio Miranda]

Hello,

Yeah, it is possible. Cisco allows for using RESTful API on ASA. 

 For physical appliances you need to download and install the client on flash. For virtual appliances it comes installed and it is necessary activate.

 After prepared the environment, you can control your ASA programatibily via API.

 You can read,write and delete configuration via HTTPS requests.

Here an example:

https://< asa management ipaddress >/api/objects/networkobjects

Body content type: application/json

Raw body of the operation:

{

"kind": "object#NetworkObj",

"name": "TestNetworkRangeObj",

"host": {

"kind": "IPv4Network",

"value": "12.12.12.0/24"

}

}

-If I helped you somehow, please, rate it as useful.-

[Karsten Iwen]

You can use the ASA REST-API for that:

https://www.networkworld.com/article/2921386/security0/digging-deeper-into-the-cisco-asa-firewall-rest-api.html

https://www.cisco.com/c/en/us/td/docs/security/asa/api/qsg-asa-api.html

https://www.cisco.com/c/dam/en/us/td/docs/security/asa/api/asapedia_rest_api_122.pdf