Cisco Firepower

Use the Cisco Firepower integration for unified management of firewalls, application control, intrusion prevention, URL filtering, and advanced malware protection.

Network Security · Cisco Firepower

Configuration parameters

  • url — Server URL (e.g., https://192.168.0.1) (required)
  • credentials — Username (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (54)

  • ciscofp-create-access-policy

    Creates an access control policy.

  • ciscofp-create-access-rules

    Creates an access control rule.

  • ciscofp-create-host-object

    Creates a host object.

  • ciscofp-create-intrusion-policy

    Creates an intrusion policy with the specified parameters. This command may take a while, you can set the "execution-timeout" field if necessary (X > 300).

  • ciscofp-create-intrusion-rule

    Creates or overrides the Snort 3 Intrusion rule group with the specified parameters. Guide to Snort 3 rule writing: https://docs.snort.org/welcome.

  • ciscofp-create-intrusion-rule-group

    Creates or overrides the Snort 3 intrusion rule group with the specified parameters.

  • ciscofp-create-network-analysis-policy

    Creates a network analysis policy. This command may take a while, you can set the "execution-timeout" field if necessary (X > 300).

  • ciscofp-create-network-groups-objects

    Creates a group of network objects.

  • ciscofp-create-network-object

    Creates a network object.

  • ciscofp-create-policy-assignments

    Creates policy assignments to target devices.

  • ciscofp-delete-access-policy

    Deletes the specified access control policy.

  • ciscofp-delete-access-rules

    Deletes the specified access control rule.

  • ciscofp-delete-host-object

    Deletes the specified host object.

  • ciscofp-delete-intrusion-policy

    Deletes the intrusion policy associated with the specified ID.

  • ciscofp-delete-intrusion-rule

    Deletes the specified Snort3 rule.

  • ciscofp-delete-intrusion-rule-group

    Deletes the specified Snort 3 intrusion rule group.

  • ciscofp-delete-network-analysis-policy

    Deletes the network analysis policy associated with the specified ID.

  • ciscofp-delete-network-groups-objects

    Deletes a group of network objects.

  • ciscofp-delete-network-object

    Deletes the specified network object.

  • ciscofp-deploy-to-devices

    Creates a request for deploying configuration changes to devices.

  • ciscofp-get-access-policy

    Retrieves the access control policy associated with the specified ID. If no access policy ID is passed, all access control policies are returned.

  • ciscofp-get-access-rules

    Retrieves the access control rule associated with the specified policy ID and rule ID. If no rule ID is specified, retrieves a list of all access rules associated with the specified policy ID.

  • ciscofp-get-deployable-devices

    Retrieves a list of all devices with configuration changes that are ready to deploy.

  • ciscofp-get-device-records

    Retrieves a list of all device records.

  • ciscofp-get-host-object

    Retrieves the groups of host objects associated with the specified ID. If no ID is passed, retrieves a list of all network objects.

  • ciscofp-get-network-groups-object

    Retrieves the groups of network objects and addresses associated with the specified ID. If no ID is supplied, retrieves a list of all network objects.

  • ciscofp-get-network-object

    Retrieves the network objects associated with the specified ID. If no ID is supplied, retrieves a list of all network objects.

  • ciscofp-get-task-status

    Retrieves information about a previously submitted pending job or task with the specified ID. Used for deploying.

  • ciscofp-get-url-groups-object

    Retrieves the groups of URL objects and addresses associated with the specified ID. If not supplied, retrieves a list of all URL objects.

  • ciscofp-list-applications

    Retrieves a list of all application objects.

  • ciscofp-list-intrusion-policy

    Retrieves the intrusion policy associated with the specified ID. If no ID is specified, retrieves a list of all intrusion policies. Default list size is 50. GET arguments: intrusion_policy_id, include_count | LIST arguments: expanded_response, limit, page, page_size.

  • ciscofp-list-intrusion-rule

    Retrieves the Snort3 Intrusion rule group. If no ID is specified, it retrieves a list of all Snort3 Intrusion rule groups. Default list size is 50. GET argument: intrusion_rule_id | LIST arguments: sort, filter, expanded_response, limit, page, page_size.

  • ciscofp-list-intrusion-rule-group

    Retrieves the Snort 3 intrusion rule group. If no ID is specified, retrieves a list of all Snort 3 Intrusion rule groups. The default list size is 50. GET arguments: rule_group_id | LIST arguments: expanded_response, filter, limit, page, page_size.

  • ciscofp-list-ise-security-group-tag

    Retrieves a list of all ISE security group tag objects.

  • ciscofp-list-network-analysis-policy

    Retrieves the network analysis policy with the specified ID. If no ID is specified, retrieves a list of all network analysis policies. The default list size is 50. GET arguments: network_analysis_policy_id | LIST arguments: expanded_response, limit, page, page_size.

  • ciscofp-list-policy-assignments

    Retrieves the policy assignment associated with the specified ID. If no ID is specified, retrieves a list of all policy assignments to target devices.

  • ciscofp-list-ports

    Retrieves a list of all port objects.

  • ciscofp-list-security-group-tags

    Retrieves a list of all custom security group tag objects.

  • ciscofp-list-url-categories

    Retrieves a list of all URL category objects.

  • ciscofp-list-vlan-tags

    Retrieves a list of all VLAN tag objects.

  • ciscofp-list-vlan-tags-group

    Retrieves a list of all VLAN group tag objects.

  • ciscofp-list-zones

    Retrieves a list of all security zone objects.

  • ciscofp-update-access-policy

    Updates the specified access control policy.

  • ciscofp-update-access-rules

    Updates the specified access control rule.

  • ciscofp-update-host-object

    Updates the specified host object.

  • ciscofp-update-intrusion-policy

    Modifies the intrusion policy associated with the specified ID. This command may take a while, you can set the "execution-timeout" field if necessary (X > 300).

  • ciscofp-update-intrusion-rule

    Modifies the Snort3 Intrusion rule group with the specified ID. You must enter one or both of the following: rule_data | rule_group_ids. The variable that was not entered will remain the same. If merging, rule_group_ids must be entered.

  • ciscofp-update-intrusion-rule-group

    Modifies the Snort 3 intrusion rule group with the specified ID.

  • ciscofp-update-network-analysis-policy

    Modifies the network analysis policy associated with the specified ID. This command may take a while, you can set the "execution-timeout" field if necessary (X > 300).

  • ciscofp-update-network-groups-objects

    Updates a group of network objects.

  • ciscofp-update-network-object

    Updates the specified network object.

  • ciscofp-update-policy-assignments

    Updates the specified policy assignments to target devices.

  • ciscofp-update-url-groups-objects

    Updates the ID of a group of URL objects.

  • ciscofp-upload-intrusion-rule-file

    Imports or validates custom Snort 3 intrusion rules within a file. Import arguments: rule_import_mode, rule_group_ids.