Enable RESTCONF on Cisco ASA

[mervinh16]

Hello,

Is there a way to enable / use RESTCONF on a Cisco Asa ?

Please let me know.

Thank you

[Marvin Rhoads]

Yes. Follow this guide:

https://www.cisco.com/c/en/us/td/docs/security/asa/api/qsg-asa-api.html#pgfId-61953

[mervinh16]

Hello,

Thank you for replying

This solution makes use of the rest api client image but my company won't
pay for it.

I wanted to go for a "non-paying" option like restconf. In ios xe we just
use restconf without any additional images. I wanted to know if this was
possible with Cisco Asa too

[Marvin Rhoads · Accepted solution]

There's not a separate purchase required.

All you need is any ASA with a support contract associated with your cisco.com ID. You are then entitled to download the REST API package and plug-in.

https://software.cisco.com/download/home/284143129/type/286284108/release/1.3.2

If you don't have any ASA with support then you cannot use the REST API.

You may be able to use a Devnet sandbox to learn Cisco security APIs in general but they don't feature an ASA as they focus on the more current products such as Firepower.

https://developer.cisco.com/site/security/

[mervinh16]

Ohh okay, thank you so much for this clear answer

[Miroslaw B]

Will the REST API package work with old ASA 5505 or not?

[mervinh16]

Hi, i enabled the rest api on my asa and when i go to /doc it gives the documentation perfectly fine. However, when i try other GET requests such as /api/objects/networkobjects, i get the following error message:

"messages": [{"level": "Error","code": "INVALID-CONTENT-TYPE","details": "Invalid request content-type:application/x-www-form-urlencoded for req:http://172.30.43.130/api/objects/networkobjects"}]

Can someone help ?

[Marvin Rhoads]

You may find more shared experiences on the Cisco developer community forum for security:

https://community.cisco.com/t5/security-discussions/bd-p/j-disc-dev-security