Activity in DevNet Security
FTDv Promiscuous Mode causes tcp-not-syn drops on same ESXi host
We run FTDv HA pair managed by FMC on a 4-node vSAN cluster. Started noticing that VMs on the node where active FTD resides cannot establish TCP sessions (HTTPS, RDP) to resources in the same VLAN, while ICMP works fine. Moving VM to another node fix...
relationship event in SNA
“Is it possible to export all default Relationship and Event policies from Cisco Secure Network Analytics into an Excel format?”
Inquiry Regarding Cisco Umbrella API
Could you please provide information on the Umbrella API?I have reviewed the site below, and my understanding is that it is possible to add identities to existing policies and to create the Destination Lists and Application Lists used by policies.Is ...
How to Configure Certificate-Based Authentication for Cisco ISE API
Overview Certificate-based authentication provides a more secure method for API clients to authenticate without transmitting passwords. Certificate-based authentication for API calls was introduced in Cisco ISE Release 3.3 as a new feature. This guid...
Resolved! Stealtwatch SMC: REST API Invalid JSON error
Hello TeamWhen I doing POST(PowerShell), SMC returns an error:{ "errors" : [ { "code" : 5060, "message" : "The Request received is invalid" }, "Invalid JSON." ] }This is a part of PowerShell script I use: # JSON query body $body = '{ "startDateTime":...
XDR - Requirement Gathering Sheet CRDQ and LLD sample
Hi, Anyone can help to get the sample CRDQ and LLD for Cisco XDR for the Green Field Deployment.
ISE OpenAPI Trusted Certificate upload fails due to malicious content
Hi I've been testing some script againts ISE 3.2.0 OpenAPI to test the functionality and i found an issue in uploading a trusted certificate for Letsencrypt via the openapi. If i download the intermediate certificate from https://letsencrypt.org/cert...
SNA API: retrieving custom events
Hi all, I used Gemini to help me write the following PowerShell script to pull custom events down from Secure Network Analytics, but when I run the script, I get the "The script connected and authenticated successfully, but the API returned 0 events....
for ASAv50 version 9.16.4 how to identify DDOS attatck?
any solution? daily @7PM IST we are observing this issue (peak hours) /act/sec# show memoryFree memory: 12901343152 bytes (82%)Used memory: 2819579984 bytes (18%) /act/sec# show cpu detailedBreak down of per-core data path versus control point cpu ...
How to use get access token for using xdr apis
Hello I am new to Cisco Xdr. We need to use xdr api for judgment https://developer.cisco.com/docs/cisco-xdr/global-intel-api-guide/#sample-code . We are not sure how to get access token ( or api client/secret) for authentication. https://developer.ci...
Resolved! API access to cdFMC audit log configuration changes
Hi there,I tried posting this in the Technology and Support forums and it was marked as spam within minutes. It's been an absolute nightmare to get any clear information on the API endpoints that we're trying to access, and this community is my only ...
Cert Enrollment FMC Rest API
Hi everyone, I've been exploring the Firepower Management Center (FMC) REST API, and I'm having trouble finding a method to add certificate enrollments to devices. I've successfully created certificate enrollments using the /api/fmc_config/v1/domain/...
Securex Dashboard Integration tiles
Hi i'm working on an intregation and I want to import some data to securex dashboard. I'm following this devnet tutorial > https://developer.cisco.com/learning/modules/securex-serverless-relay-modules/SecureX-7-Dashboard-Tiles/different-securex-dashb...
ASA rest-api install
Hello,ASA 5516x, v 9.16(4)82 HA pairI'm unfamiliar with rest-api so I'm a little nervous about the unknown...I need to install rest-api to start monitoring and collecting logs (for now) for a new siem we are going to start using.Can't find anywhere t...
Resolved! API endpoint for the shunned IP from the FMC
Hi,I would like to know if there is specific api endpoint on the fmc that I can grab a list of all the shunned IP. Thanks in advance.
