Cisco Firepower

Use the Cisco Firepower integration for unified management of firewalls, application control, intrusion prevention, URL filtering, and advanced malware protection.

Category

Network Security

Pack

CiscoFirepower

Configuration parameters

• url — Server URL (e.g., https://192.168.0.1) (required)
• credentials — Username (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (54)

• ciscofp-create-access-policy — Creates an access control policy.
• ciscofp-create-access-rules — Creates an access control rule.
• ciscofp-create-host-object — Creates a host object.
• ciscofp-create-intrusion-policy — Creates an intrusion policy with the specified parameters. This command may take a while, you can set the "execution-timeout" field if necessary (X > 300).
• ciscofp-create-intrusion-rule — Creates or overrides the Snort 3 Intrusion rule group with the specified parameters. Guide to Snort 3 rule writing: https://docs.snort.org/welcome.
• ciscofp-create-intrusion-rule-group — Creates or overrides the Snort 3 intrusion rule group with the specified parameters.
• ciscofp-create-network-analysis-policy — Creates a network analysis policy. This command may take a while, you can set the "execution-timeout" field if necessary (X > 300).
• ciscofp-create-network-groups-objects — Creates a group of network objects.
• ciscofp-create-network-object — Creates a network object.
• ciscofp-create-policy-assignments — Creates policy assignments to target devices.
• ciscofp-delete-access-policy — Deletes the specified access control policy.
• ciscofp-delete-access-rules — Deletes the specified access control rule.
• ciscofp-delete-host-object — Deletes the specified host object.
• ciscofp-delete-intrusion-policy — Deletes the intrusion policy associated with the specified ID.
• ciscofp-delete-intrusion-rule — Deletes the specified Snort3 rule.
• ciscofp-delete-intrusion-rule-group — Deletes the specified Snort 3 intrusion rule group.
• ciscofp-delete-network-analysis-policy — Deletes the network analysis policy associated with the specified ID.
• ciscofp-delete-network-groups-objects — Deletes a group of network objects.
• ciscofp-delete-network-object — Deletes the specified network object.
• ciscofp-deploy-to-devices — Creates a request for deploying configuration changes to devices.
• ciscofp-get-access-policy — Retrieves the access control policy associated with the specified ID. If no access policy ID is passed, all access control policies are returned.
• ciscofp-get-access-rules — Retrieves the access control rule associated with the specified policy ID and rule ID. If no rule ID is specified, retrieves a list of all access rules associated with the specified policy ID.
• ciscofp-get-deployable-devices — Retrieves a list of all devices with configuration changes that are ready to deploy.
• ciscofp-get-device-records — Retrieves a list of all device records.
• ciscofp-get-host-object — Retrieves the groups of host objects associated with the specified ID. If no ID is passed, retrieves a list of all network objects.
• ciscofp-get-network-groups-object — Retrieves the groups of network objects and addresses associated with the specified ID. If no ID is supplied, retrieves a list of all network objects.
• ciscofp-get-network-object — Retrieves the network objects associated with the specified ID. If no ID is supplied, retrieves a list of all network objects.
• ciscofp-get-task-status — Retrieves information about a previously submitted pending job or task with the specified ID. Used for deploying.
• ciscofp-get-url-groups-object — Retrieves the groups of URL objects and addresses associated with the specified ID. If not supplied, retrieves a list of all URL objects.
• ciscofp-list-applications — Retrieves a list of all application objects.
• ciscofp-list-intrusion-policy — Retrieves the intrusion policy associated with the specified ID. If no ID is specified, retrieves a list of all intrusion policies. Default list size is 50. GET arguments: intrusion_policy_id, include_count | LIST arguments: expanded_response, limit, page, page_size.
• ciscofp-list-intrusion-rule — Retrieves the Snort3 Intrusion rule group. If no ID is specified, it retrieves a list of all Snort3 Intrusion rule groups. Default list size is 50. GET argument: intrusion_rule_id | LIST arguments: sort, filter, expanded_response, limit, page, page_size.
• ciscofp-list-intrusion-rule-group — Retrieves the Snort 3 intrusion rule group. If no ID is specified, retrieves a list of all Snort 3 Intrusion rule groups. The default list size is 50. GET arguments: rule_group_id | LIST arguments: expanded_response, filter, limit, page, page_size.
• ciscofp-list-ise-security-group-tag — Retrieves a list of all ISE security group tag objects.
• ciscofp-list-network-analysis-policy — Retrieves the network analysis policy with the specified ID. If no ID is specified, retrieves a list of all network analysis policies. The default list size is 50. GET arguments: network_analysis_policy_id | LIST arguments: expanded_response, limit, page, page_size.
• ciscofp-list-policy-assignments — Retrieves the policy assignment associated with the specified ID. If no ID is specified, retrieves a list of all policy assignments to target devices.
• ciscofp-list-ports — Retrieves a list of all port objects.
• ciscofp-list-security-group-tags — Retrieves a list of all custom security group tag objects.
• ciscofp-list-url-categories — Retrieves a list of all URL category objects.
• ciscofp-list-vlan-tags — Retrieves a list of all VLAN tag objects.
• ciscofp-list-vlan-tags-group — Retrieves a list of all VLAN group tag objects.
• ciscofp-list-zones — Retrieves a list of all security zone objects.
• ciscofp-update-access-policy — Updates the specified access control policy.
• ciscofp-update-access-rules — Updates the specified access control rule.
• ciscofp-update-host-object — Updates the specified host object.
• ciscofp-update-intrusion-policy — Modifies the intrusion policy associated with the specified ID. This command may take a while, you can set the "execution-timeout" field if necessary (X > 300).
• ciscofp-update-intrusion-rule — Modifies the Snort3 Intrusion rule group with the specified ID. You must enter one or both of the following: rule_data | rule_group_ids. The variable that was not entered will remain the same. If merging, rule_group_ids must be entered.
• ciscofp-update-intrusion-rule-group — Modifies the Snort 3 intrusion rule group with the specified ID.
• ciscofp-update-network-analysis-policy — Modifies the network analysis policy associated with the specified ID. This command may take a while, you can set the "execution-timeout" field if necessary (X > 300).
• ciscofp-update-network-groups-objects — Updates a group of network objects.
• ciscofp-update-network-object — Updates the specified network object.
• ciscofp-update-policy-assignments — Updates the specified policy assignments to target devices.
• ciscofp-update-url-groups-objects — Updates the ID of a group of URL objects.
• ciscofp-upload-intrusion-rule-file — Imports or validates custom Snort 3 intrusion rules within a file. Import arguments: rule_import_mode, rule_group_ids.