Threat Feeds in Cisco Fire Power Management Center (FMC)

[Hassan Shozeb20]

Hi to all,

How may I visualize the list of Feeds on Cisco FMC in Objects -->Security Intelligence-->Network List and Feeds? I am calling the list of Feeds on FMC by third-party Software and I am unable to view the list of feeds anywhere however I am able to visualize the list of feeds by uploading manually. Secondly, the View all objects option is disabled at my end.

[Marvin Rhoads]

I'm not clear on what you are asking. Do you want to see the content of the feeds from Cisco? If so, it is stored in several files within the underlying Linux OS and the contents are not exposed via the GUI. There's no supported way to query their content externally.

[Hassan Shozeb20]

Thanks, Martin for your kind response. Yes, my question is exactly to view the content of the feeds regardless of Cisco can I see the other third-party vendor content list?

Likewise here I am calling feeds from a URL of vendor SOAR solution  but I am unable to view the list of content here.

[Marvin Rhoads · Accepted solution]

To see the content of any given feed, you have to dive into the cli expert mode. Here are a couple of articles to help:

https://www.lammle.com/post/how-to-find-the-list-of-ip-url-and-dns-entries-in-the-cisco-firepower-feed/

https://archive.dependencyhell.net/2017-02-26-firepower-si/ (never mind the certificate issue - the page is legitimate)