SGT groups in FMC

[Antonio Macia]

Hi,

Is it possible to create groups of SGTs to facilitate the creation of firewall rules when multiple SGTs need to be added?

Regards

[marce1000]

     - FYI : https://www.cisco.com/c/en/us/td/docs/security/cdo/managing-ftd-with-cdo/managing-ftd-with-cisco-defense-orchestrator/configuring-ftd-devices.html#Create_an_FTD_SGT_Group

 M.

[Antonio Macia]

Hi @marce1000 

The link is for Defense Orchestrator. I'm using FMC as manager.

[balaji.bandi]

SGT is possible - but to be clear to address correctly can you provide more use case example ?

 SGT/ISE Attributes tab can match traffic based on the users Security Group Tag (SGT)

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/rule_management_common_characteristics.html?bookSearch=true#id_16963

[Antonio Macia]

Hi @balaji.bandi 

Basically I just want to add a bunch of SGT in one shot having them in a group, instead of picking one by one. 

[balaji.bandi]

Never tried adding Group of SGT (technically should work as it matches the Rule) - but check any Limitation on the guide.

FMC (cloud based defence orches) - so most of the things should be same, that give you direction where to look next.