FMC API Maximum Objects - 1000?

[cyodesigns]

Hi,

I have an FMC with 1260 TCP/UDP protocol objects configured in it. However when I try to pull down all the objects via a python script using a GET request using this URL:

https://10.0.0.1/api/fmc_config/v1/domain/12345678-12345678/object/protocolportobjects?limit=2000 (<<notice the 2000 here)

Only 1000 objects are extracted.

The script writes the GET data to a file, and in the file is the "links" section:

"links": {
        "self": "https://10.232.6.65/api/fmc_config/v1/domain/12345678-12345678/object/protocolportobjects?offset=0&limit=1000" (<<notice the 1000 here)
    }

It looks like the FMC changes the 2000 to 1000 and starts using an offset of 0.

I assume I can create a loop in python and get all the objects by changing the offset value and making multiple GET requests, but is it the case the FMC will only allow 1000 objects per GET request. Does anyone know if this is a hardcoded maximum?

Regards

Mark

[Marvin Rhoads · Accepted solution]

1000 is the limit in Firepower 6.2.x.

https://www.cisco.com/c/en/us/td/docs/security/firepower/622/api/REST/Firepower_Management_Center_REST_API_Quick_Start_Guide_622/objects_in_the_rest_api.html#reference_zmj_lny_1cb

They haven't updated that guide for 6.3 yet - it may have changed as they have been working on increasing API functionality a lot.

[cyodesigns]

Thanks Marvin!!

[Greg Terkanian]

Looks like the limit is still there in 6.3.  Is there a workaround?  Is the pagination support in the API?  If so, how?

Thanks.

[Alexander Hartmaier]

Of course there is.

So an implementation in Perl 5 from me at https://metacpan.org/release/Net-Cisco-FMC-v1/source/lib/Net/Cisco/FMC/v1.pm#L46

[tyoung008]

This document -> https://www.cisco.com/c/en/us/td/docs/security/firepower/ftd-api/guide/ftd-rest-api.pdf up to 7.0 2021 stills says the limit is 1000 on the bottom of p. 29.  Multiple queries is still the answer.