Take advantage of Firepower’s most powerful, and well documented context-rich APIs to allow the exchange of network and endpoint security events, data, and host information. With these APIs, you can automate repetitive tasks for consistency and to avoid user errors, do configuration management automation, and automate mass deployments that need faster rollout of changes with a higher degree of consistency.
The DevNet Firepower page contains all the resources such as videos, documentation, and learnings labs to get you started with programming and to get the most out of your Firepower environment. The DevNet Firepower page is categorized as follows:
The Firepower Management Center (FMC) APIs allow the exchange of network and endpoint security events, data, and host information. The FMC APIs include:
The Cisco Event Streamer (also known as eStreamer) allows you to stream Firepower System events to external client applications. You can stream host, discovery, correlation, compliance allow list, intrusion, user activity, file, malware, and connection data from a Management Center. For more information, see the eStreamer Integration Guide for 6.3.0.
The Firepower System database access feature allows you to query intrusion, discovery, user activity, correlation, connection, vulnerability, and application and URL statistics database tables on a Cisco Firepower Management Center, using a third-party client that supports JDBC SSL connections. For more information, see the Database Access Guide for 6.3.0.
The Firepower Management Center Host Input API provides a tool for importing data from other sources on your network to augment the monitored host information. For more information, see the Host Input API Guide for 6.0.
The Firepower System Remediation API allows you to create remediations that your Firepower Management Center can automatically launch when conditions on your network violate the associated correlation policy. For more information, see the Firepower System Remediation API Guide for 6.0.
The FXOS Firepower Chassis Manager REST APIs includes both Platform and Firepower Chassis Services RESTful APIs. With these APIs, you can configure and monitor the platform and Firepower Chassis Services. These APIs are solely for Platform services provided by Firepower eXtensible OS. For more information, see the Cisco Firepower Chassis Manager REST API Reference.
Cisco Defense Orchestrator (CDO) is a cloud-based, multi-device manager that provides a simple, consistent, and highly secure way of managing security policies on all your ASA devices.
Dear community, I connected the Printer to the switch port, ISE reads its MAC via Probing. I assigned a static group that I created named "Printers" to that MAC, and created a rule with AuthC(if MAB) and AuthZ(if MAB and if part of the Printers...
Dear community, I have a switch, and in that switch port, is a HUB connected. The hub then has three computers and one Printers connected to it. The computers need to authenticate via PEAP whilst the Printer via MAB. I applied the gen...
Hi Guys,We've installed ISE 3, and we are seeing that we have massive invalid/failed logging attempts to Async ports on few Terminal Servers. See attached screenshots. more than 1 Million attempts !! [We had similar issue with our old ISE, and we forgot a...
Hello, I am facing a problem to have RDP port forward to a PC inside the firewall on ASA-5506-X. ASA version 9.8.Ethernet port 1 configured as ouside, ethernet port 2 configure as inside_1, ethernet port 3 as inside_2. other enthernet ports are disab...
How to fix email dropped by CASE, please find the message tracking as below ?I have safelisted the sender email address in recipients' spam safelist. But, still email blocking due to CASE. Any advice ? Thanks in advance. Message 123456 scanned by Ant...