category: Network Security
provider: Cisco Systems
commonfields:
  id: Cisco ASA
  version: -1
configuration:
- display: Server URL (e.g. https://192.168.0.1)
  name: server
  required: true
  type: 0
- display: Credentials
  name: credentials
  required: true
  type: 9
- defaultvalue: 'false'
  display: Use system proxy settings
  name: proxy
  type: 8
  required: false
- defaultvalue: 'false'
  display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Is ASAv
  name: isASAv
  type: 8
  required: false
description: Use the Cisco Adaptive Security Appliance Software integration to manage interfaces, rules, and network objects.
display: Cisco ASA
name: Cisco ASA
script:
  commands:
  - arguments:
    - description: The object ID of the network group to retrieve. This can't be used with pagination arguments.
      name: object_id
    - description: 'Page number of paginated results. Minimum of 1; default 1.'
      name: page
    - name: page_size
      description: The number of items per page. Maximum of 100; default 50.
    - name: limit
      description: The maximum number of records to retrieve. Maximum of 100; default 50.
      defaultValue: '50'
    description: Retrieve information about network object groups. Network object groups can contain multiple network objects as well as inline networks or hosts. Network object groups can include a mix of both IPv4 and IPv6 addresses/network.
    name: cisco-asa-list-network-object-group
    outputs:
    - contextPath: CiscoASA.NetworkObjectGroup.object_id
      description: The object ID of the network object group.
      type: String
    - contextPath: CiscoASA.NetworkObjectGroup.name
      description: The name of the network object group.
      type: String
    - contextPath: CiscoASA.NetworkObjectGroup.description
      description: The description of the network object group.
      type: String
    - contextPath: CiscoASA.NetworkObjectGroup.members.kind
      description: The type of the network item. The viable types are IPv4Address, IPv4Network, IPv6Address, IPv6Network and objectRef#NetworkObj.
      type: String
    - contextPath: CiscoASA.NetworkObjectGroup.members.object_id
      description: The object ID of the network object.
      type: String
    - contextPath: CiscoASA.NetworkObjectGroup.members.value
      description: The value of IPv4Address, IPv4Network, IPv6Address or IPv6Network.
      type: String
  - arguments:
    - description: The object ID of the local user group to retrieve. This can't be used with pagination arguments.
      name: object_id
    - description: Page number of paginated results. Minimum of 1; default 1.
      name: page
    - name: page_size
      description: The number of items per page. Maximum of 100; default 50.
    - name: limit
      description: The maximum number of records to retrieve. Maximum of 100; default 50.
      defaultValue: '50'
    description: Retrieve information about local user groups, which are collections of user accounts, either from the local database or imported from Active Directory, that manage access to network resources not defined globally.
    name: cisco-asa-list-local-user-group
    outputs:
    - type: String
      contextPath: CiscoASA.LocalUserGroup.object_id
      description: The object ID of the local user group.
    - type: String
      contextPath: CiscoASA.LocalUserGroup.name
      description: The name of the local user group.
    - type: String
      contextPath: CiscoASA.LocalUserGroup.description
      description: The description of the local user group.
    - type: String
      contextPath: CiscoASA.LocalUserGroup.members.kind
      description: The type of the user.
    - type: String
      contextPath: CiscoASA.LocalUserGroup.members.object_id
      description: The ID of the user.
  - arguments:
    - description: The object ID of the local user to retrieve. This can't be used with pagination arguments.
      name: object_id
    - description: Page number of paginated results. Minimum of 1; default 1.
      name: page
    - description: The number of items per page. Maximum of 100; default 50.
      name: page_size
    - name: limit
      description: The maximum number of records to retrieve. Maximum of 100; default 50.
      defaultValue: '50'
    description: Retrieve information about individual local user accounts within a network system. These local users can be part of local user groups and groups imported from Active Directory.
    name: cisco-asa-list-local-user
    outputs:
    - contextPath: CiscoASA.LocalUser.object_id
      description: The object ID of the local user.
      type: String
    - contextPath: CiscoASA.LocalUser.name
      description: The name of the local user.
      type: String
    - contextPath: CiscoASA.LocalUser.mschap_authenticated
      description: Whether Extensible Authentication Protocol-Microsoft Challenge Handshake Authentication Protocol is authenticated.
      type: Boolean
    - contextPath: CiscoASA.LocalUser.privilege_level
      description: The user's privilege level.
      type: Number
    - contextPath: CiscoASA.LocalUser.asdm_cli_access_type
      description: ASDM and CLI access type. Can be one of "Full", "None", "Cli".
      type: String
  - arguments:
    - description: The object ID of the time range to retrieve. This can't be used with pagination arguments.
      name: object_id
    - description: Page number of paginated results. Minimum of 1; default 1.
      name: page
    - description: The number of items per page. Maximum of 100; default 50.
      name: page_size
    - description: The maximum number of records to retrieve. Maximum of 100; default 50.
      name: limit
      defaultValue: '50'
    description: Retrieve information about time range objects. A time range object defines a specific time consisting of a start time, an end time, and optional recurring entries. You use these objects on ACL rules to provide time-based access to certain features or assets. For example, you could create an access rule that allows access to a particular server during working hours only.
    name: cisco-asa-list-time-range
    outputs:
    - contextPath: CiscoASA.TimeRange.object_id
      description: The object ID of the time range.
      type: String
    - contextPath: CiscoASA.TimeRange.name
      description: The name of the time range.
      type: String
    - contextPath: CiscoASA.TimeRange.start
      description: Time at which this time range starts.
      type: String
    - contextPath: CiscoASA.TimeRange.end
      description: Time at which this time range ends.
      type: String
    - contextPath: CiscoASA.TimeRange.periodic.frequency
      description: The days of the week at which this time range will run periodically.
      type: String
    - contextPath: CiscoASA.TimeRange.periodic.start_hour
      description: The hour at which this time range will start periodically.
      type: Number
    - contextPath: CiscoASA.TimeRange.periodic.start_minute
      description: The minute at which this time range will start periodically.
      type: Number
    - contextPath: CiscoASA.TimeRange.periodic.end_hour
      description: The hour at which this time range will end periodically.
      type: Number
    - contextPath: CiscoASA.TimeRange.periodic.end_minute
      description: The minute at which this time range will end periodically.
      type: Number
  - arguments:
    - description: The object ID of the security object group to retrieve. This can't be used with pagination arguments.
      name: object_id
    - description: Page number of paginated results. Minimum of 1; default 1.
      name: page
    - description: The number of items per page. Maximum of 100; default 50.
      name: page_size
    - name: limit
      description: The maximum number of records to retrieve. Maximum of 100; default 50.
      defaultValue: '50'
    description: Retrieve information about security groups, which are collections of security groups or identifiers that manage access and permissions to network resources. These groups can be used in features like Cisco TrustSec and are often part of extended access control lists, enabling centralized and localized security policy management.
    name: cisco-asa-list-security-object-group
    outputs:
    - type: String
      contextPath: CiscoASA.SecurityObjectGroup.object_id
      description: The object ID of the security object group.
    - type: String
      contextPath: CiscoASA.SecurityObjectGroup.name
      description: The name of the security object group.
    - type: String
      contextPath: CiscoASA.SecurityObjectGroup.description
      description: The description of the security object group.
    - type: String
      contextPath: CiscoASA.SecurityObjectGroup.members.kind
      description: The type of the security object group; SecurityName, SecurityTag, objectRef#SecurityObjGroup.
    - type: String
      contextPath: CiscoASA.SecurityObjectGroup.members.value
      description: The value of the SecurityName or SecurityTag.
    - type: String
      contextPath: CiscoASA.SecurityObjectGroup.members.object_id
      description: The object ID of objectRef#SecurityObjGroup.
  - arguments:
    - description: The object ID of the user object to retrieve. This can't be used with pagination arguments.
      name: object_id
    - description: Page number of paginated results. Minimum of 1; default 1.
      name: page
    - description: The number of items per page. Maximum of 100; default 50.
      name: page_size
    - description: The maximum number of records to retrieve. Maximum of 100; default 50.
      name: limit
      defaultValue: '50'
    description: Retrieve information about user definitions within the system. This helps in managing and configuring user access and permissions in a network security context.
    name: cisco-asa-list-user-object
    outputs:
    - contextPath: CiscoASA.UserObject.object_id
      description: The object ID of the user object.
      type: String
    - contextPath: CiscoASA.UserObject.user_name
      description: The user's user name.
      type: String
    - contextPath: CiscoASA.UserObject.local_user_object_id
      description: The object ID of the local user.
      type: String
    - contextPath: CiscoASA.UserObject.value
      description: The value of the local user.
      type: String
  - description: Saves the running configuration to the default location for the startup configuration.
    name: cisco-asa-write-memory
    outputs:
    - contextPath: CiscoASA.WriteMemory.response
      description: Shows a successful 'write memory' command execution on a Cisco ASA device, building the configuration and generating a cryptochecksum for integrity. The process is completed with an "[OK]" message.
      type: String
  - arguments:
    - description: The name of the interface from which to get rules.
      name: interface_name
    - description: 'The interface type. Can be "In", "Out", or "Global". '
      name: interface_type
      auto: PREDEFINED
      predefined:
      - In
      - Out
      - Global
    description: Gets a list all rules for the supplied interface.
    name: cisco-asa-list-rules
    outputs:
    - contextPath: CiscoASA.Rules.Source
      description: The rule's source.
      type: String
    - contextPath: CiscoASA.Rules.Dest
      description: The rule's destination.
      type: String
    - contextPath: CiscoASA.Rules.InterfaceType
      description: The interface type. Can be "In", "Out", or "Global".
      type: String
    - contextPath: CiscoASA.Rules.IsActive
      description: Whether the rule is active.
      type: Boolean
    - contextPath: CiscoASA.Rules.Interface
      description: The name of the interface.
      type: String
    - contextPath: CiscoASA.Rules.Position
      description: The position of the rule.
      type: Number
    - contextPath: CiscoASA.Rules.ID
      description: The rule ID.
      type: String
    - contextPath: CiscoASA.Rules.Remarks
      description: A list of all rule remarks.
      type: Unknown
    - contextPath: CiscoASA.Rules.Permit
      description: Whether the rule permits traffic from source to destination.
      type: Boolean
    - contextPath: CiscoASA.Rules.DestService
      description: The destination service.
      type: String
    - contextPath: CiscoASA.Rules.SourceService
      description: The source service.
      type: String
    - contextPath: CiscoASA.Rules.SourceKind
      description: One of AnyIPAddress, IPv4Address, IPv4FQDN, IPv4Network, IPv4Range, IPv6Address, IPv6FQDN, IPv6Network, IPv6Range, SecurityName, SecurityTag, interfaceIP, objectRef#NetworkObj, objectRef#NetworkObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.DestKind
      description: One of AnyIPAddress, IPv4Address, IPv4FQDN, IPv4Network, IPv4Range, IPv6Address, IPv6FQDN, IPv6Network, IPv6Range, SecurityName, SecurityTag, interfaceIP, objectRef#NetworkObj, objectRef#NetworkObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.SourceSecurity.kind
      description: The type of the security group; SecurityName, SecurityTag, objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.SourceSecurity.value
      description: The value of the SecurityName or SecurityTag.
      type: String
    - contextPath: CiscoASA.Rules.SourceSecurity.objectId
      description: The object ID of objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.DestinationSecurity.kind
      description: The type of the security group; SecurityName, SecurityTag, objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.DestinationSecurity.value
      description: The value of the SecurityName or SecurityTag.
      type: String
    - contextPath: CiscoASA.Rules.DestinationSecurity.objectId
      description: The object ID of objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.User.kind
      description: One of AnyUser, NoneUser, objectRef#LocalUserObjGroup, objectRef#UserGroupObj, objectRef#UserObj.
      type: String
    - contextPath: CiscoASA.Rules.User.value
      description: The user value.
      type: String
    - contextPath: CiscoASA.Rules.User.objectId
      description: The object ID of the user.
      type: String
    - contextPath: CiscoASA.Rules.TimeRange.kind
      description: The object reference type or the actual TimeRange value.
      type: String
    - contextPath: CiscoASA.Rules.TimeRange.value
      description: The value of the time range.
      type: String
    - contextPath: CiscoASA.Rules.TimeRange.objectId
      description: The object ID of the time range.
      type: String
  - description: Creates a backup of the current settings (i.e., the backup.cfg file).
    name: cisco-asa-backup
    arguments:
    - description: The name of the backup.
      name: backup_name
      required: true
    - description: The passphrase for the backup.
      name: passphrase
  - arguments:
    - description: The rule ID.
      name: rule_id
      required: true
    - description: The name of the interface.
      name: interface_name
    - auto: PREDEFINED
      description: The interface type. Can be "In", "Out", or "Global".
      name: interface_type
      predefined:
      - In
      - Out
      - Global
      required: true
    description: Gets a specific rule by rule ID.
    name: cisco-asa-get-rule-by-id
    outputs:
    - contextPath: CiscoASA.Rules.Interface
      description: The name of the interface.
      type: String
    - contextPath: CiscoASA.Rules.Source
      description: The rule's source.
      type: String
    - contextPath: CiscoASA.Rules.Dest
      description: The rule's destination.
      type: String
    - contextPath: CiscoASA.Rules.InterfaceType
      description: The interface type. Can be "In", "Out", or "Global".
      type: String
    - contextPath: CiscoASA.Rules.IsActive
      description: Whether the rule is active.
      type: Boolean
    - contextPath: CiscoASA.Rules.Position
      description: The position of the rule.
      type: Number
    - contextPath: CiscoASA.Rules.ID
      description: "The rule ID."
      type: String
    - contextPath: CiscoASA.Rules.Remarks
      description: A list of all rule remarks.
      type: Unknown
    - contextPath: CiscoASA.Rules.Permit
      description: Whether the rule permits traffic from source to destination.
      type: Boolean
    - contextPath: CiscoASA.Rules.DestService
      description: The destination service.
      type: String
    - contextPath: CiscoASA.Rules.SourceService
      description: The source service.
      type: String
    - contextPath: CiscoASA.Rules.SourceKind
      description: One of AnyIPAddress, IPv4Address, IPv4FQDN, IPv4Network, IPv4Range, IPv6Address, IPv6FQDN, IPv6Network, IPv6Range, SecurityName, SecurityTag, interfaceIP, objectRef#NetworkObj, objectRef#NetworkObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.DestKind
      description: One of AnyIPAddress, IPv4Address, IPv4FQDN, IPv4Network, IPv4Range, IPv6Address, IPv6FQDN, IPv6Network, IPv6Range, SecurityName, SecurityTag, interfaceIP, objectRef#NetworkObj, objectRef#NetworkObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.SourceSecurity.kind
      description: The type of the security group; SecurityName, SecurityTag, objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.SourceSecurity.value
      description: The value of the SecurityName or SecurityTag.
      type: String
    - contextPath: CiscoASA.Rules.SourceSecurity.objectId
      description: The object ID of objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.DestinationSecurity.kind
      description: The type of the security group; SecurityName, SecurityTag, objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.DestinationSecurity.value
      description: The value of the SecurityName or SecurityTag.
      type: String
    - contextPath: CiscoASA.Rules.DestinationSecurity.objectId
      description: The object ID of objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.User.kind
      description: One of AnyUser, NoneUser, objectRef#LocalUserObjGroup, objectRef#UserGroupObj, objectRef#UserObj.
      type: String
    - contextPath: CiscoASA.Rules.User.value
      description: The user value.
      type: String
    - contextPath: CiscoASA.Rules.User.objectId
      description: The object ID of the user.
      type: String
    - contextPath: CiscoASA.Rules.TimeRange.kind
      description: The object reference type or the actual TimeRange value.
      type: String
    - contextPath: CiscoASA.Rules.TimeRange.value
      description: The value of the time range.
      type: String
    - contextPath: CiscoASA.Rules.TimeRange.objectId
      description: The object ID of the time range.
      type: String
  - arguments:
    - description: The source. Can be the value of an IPv4, an address block, or the name of a network object.
      name: source
      required: true
    - description: The destination. Can be the value of an IPv4, an address block, or the name of a network object.
      name: destination
      required: true
    - auto: PREDEFINED
      description: Whether the rule is a permit. If True, the rule is a permit.
      name: permit
      predefined:
      - 'True'
      - 'False'
      required: true
    - description: A list of remarks for the rule.
      isArray: true
      name: remarks
    - description: 'The position in which to create the rule.'
      name: position
    - auto: PREDEFINED
      description: The log level of the rule. Can be "Default", "Emergencies", "Alerts", "Critical", "Errors", "Warnings", "Notifications", "Informational", or "Debugging".
      name: log_level
      predefined:
      - Default
      - Emergencies
      - Alerts
      - Critical
      - Errors
      - Warnings
      - Notifications
      - Informational
      - Debugging
    - auto: PREDEFINED
      description: Whether the rule will be active. If True, the rule will be active.
      name: active
      predefined:
      - 'True'
      - 'False'
      defaultValue: 'True'
    - auto: PREDEFINED
      description: The interface type. Can be "In", "Out", or "Global".
      name: interface_type
      predefined:
      - In
      - Out
      - Global
      required: true
    - description: The interface name.
      name: interface_name
    - description: The service of the rule.
      name: service
    - auto: PREDEFINED
      description: The destination address type in the ace.
      name: destination_kind
      predefined:
      - AnyIPAddress
      - IPv4Address
      - IPv4FQDN
      - IPv4Network
      - IPv4Range
      - IPv6Address
      - IPv6FQDN
      - IPv6Network
      - IPv6Range
      - SecurityName
      - SecurityTag
      - interfaceIP
      - NetworkObj
      - NetworkObjGroup
    - auto: PREDEFINED
      description: The source address type in the ace.
      name: source_kind
      predefined:
      - AnyIPAddress
      - IPv4Address
      - IPv4FQDN
      - IPv4Network
      - IPv4Range
      - IPv6Address
      - IPv6FQDN
      - IPv6Network
      - IPv6Range
      - SecurityName
      - SecurityTag
      - interfaceIP
      - NetworkObj
      - NetworkObjGroup
    - auto: PREDEFINED
      description: The source service type.
      name: service_kind
      predefined:
      - AnyService
      - ICMP6Service
      - ICMPService
      - NetworkProtocol
      - NetworkServiceGroups
      - NetworkServiceObjects
      - TcpUdpService
    - description: The destination service value.
      name: destination_service
    - auto: PREDEFINED
      description: The destination service type.
      name: destination_service_kind
      predefined:
      - AnyService
      - ICMP6Service
      - ICMPService
      - NetworkProtocol
      - NetworkServiceGroups
      - NetworkServiceObjects
      - TcpUdpService
    - auto: PREDEFINED
      description: Object ID of for the time range object. Can be received with the command cisco-asa-list-time-range.
      name: time_range
    - description: The object ID to the user. Can be one of LocalUserObjGroup, UserGroupObj, UserObj. Can be received with existing commands; cisco-asa-list-local-user-group, cisco-asa-list-local-user, cisco-asa-list-user-object.
      name: user
    - auto: PREDEFINED
      description: The type of the user. Can be one of LocalUserObjGroup, UserGroupObj, UserObj.
      name: user_kind
      predefined:
      - LocalUserObjGroup
      - UserGroupObj
      - UserObj
    - description: Source security group in the ace. Possible values are SecurityName, SecurityTag and SecurityObjGroup. Can be received with the existing command cisco-asa-list-security-object-group.
      name: source_security
    - auto: PREDEFINED
      description: The source security type.
      name: source_security_kind
      predefined:
      - SecurityName
      - SecurityTag
      - SecurityObjGroup
    - description: Destination security group in the ace. Possible values are SecurityName, SecurityTag and SecurityObjGroup. Can be received with the existing command cisco-asa-list-security-object-group.
      name: destination_security
    - auto: PREDEFINED
      description: The destination security type.
      name: destination_security_kind
      predefined:
      - SecurityName
      - SecurityTag
      - SecurityObjGroup
    description: Creates a rule.
    name: cisco-asa-create-rule
    outputs:
    - contextPath: CiscoASA.Rules.Source
      description: The rule's source.
      type: String
    - contextPath: CiscoASA.Rules.Dest
      description: The rule's destination.
      type: String
    - contextPath: CiscoASA.Rules.InterfaceType
      description: The interface type. Can be "In", "Out", or "Global".
      type: String
    - contextPath: CiscoASA.Rules.IsActive
      description: Whether the rule is active.
      type: Boolean
    - contextPath: CiscoASA.Rules.Interface
      description: The name of the interface.
      type: String
    - contextPath: CiscoASA.Rules.Position
      description: The position of the rule.
      type: Number
    - contextPath: CiscoASA.Rules.ID
      description: The rule ID.
      type: String
    - contextPath: CiscoASA.Rules.Remarks
      description: A list of all rule remarks.
      type: Unknown
    - contextPath: CiscoASA.Rules.Permit
      description: Whether the rule permits traffic from source to destination.
      type: Boolean
    - contextPath: CiscoASA.Rules.DestService
      description: The destination service.
      type: String
    - contextPath: CiscoASA.Rules.SourceService
      description: The source service.
      type: String
    - contextPath: CiscoASA.Rules.SourceKind
      description: One of AnyIPAddress, IPv4Address, IPv4FQDN, IPv4Network, IPv4Range, IPv6Address, IPv6FQDN, IPv6Network, IPv6Range, SecurityName, SecurityTag, interfaceIP, objectRef#NetworkObj, objectRef#NetworkObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.DestKind
      description: One of AnyIPAddress, IPv4Address, IPv4FQDN, IPv4Network, IPv4Range, IPv6Address, IPv6FQDN, IPv6Network, IPv6Range, SecurityName, SecurityTag, interfaceIP, objectRef#NetworkObj, objectRef#NetworkObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.SourceSecurity.kind
      description: The type of the security group; SecurityName, SecurityTag, objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.SourceSecurity.value
      description: The value of the SecurityName or SecurityTag.
      type: String
    - contextPath: CiscoASA.Rules.SourceSecurity.objectId
      description: The object ID of objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.DestinationSecurity.kind
      description: The type of the security group; SecurityName, SecurityTag, objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.DestinationSecurity.value
      description: The value of the SecurityName or SecurityTag.
      type: String
    - contextPath: CiscoASA.Rules.DestinationSecurity.objectId
      description: The object ID of objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.User.kind
      description: One of AnyUser, NoneUser, objectRef#LocalUserObjGroup, objectRef#UserGroupObj, objectRef#UserObj.
      type: String
    - contextPath: CiscoASA.Rules.User.value
      description: The user value.
      type: String
    - contextPath: CiscoASA.Rules.User.objectId
      description: The object ID of the user.
      type: String
    - contextPath: CiscoASA.Rules.TimeRange.kind
      description: The object reference type or the actual TimeRange value.
      type: String
    - contextPath: CiscoASA.Rules.TimeRange.value
      description: The value of the time range.
      type: String
    - contextPath: CiscoASA.Rules.TimeRange.objectId
      description: The object ID of the time range.
      type: String
  - arguments:
    - description: The rule ID.
      name: rule_id
      required: true
    - description: The name of the interface.
      name: interface_name
    - auto: PREDEFINED
      description: The interface type. Can be "In", "Out", or "Global".
      name: interface_type
      predefined:
      - In
      - Out
      - Global
      required: true
    description: Deletes a rule.
    name: cisco-asa-delete-rule
  - arguments:
    - auto: PREDEFINED
      description: The interface type. Can be "In", "Out", or "Global".
      name: interface_type
      predefined:
      - In
      - Out
      - Global
      required: true
    - description: The interface name.
      name: interface_name
    - description: The rule ID.
      name: rule_id
      required: true
    - auto: PREDEFINED
      description: Whether the rule will be active. If True, will be active.
      name: active
      predefined:
      - 'True'
      - 'False'
      defaultValue: 'True'
    - description: The log level of the rule.
      name: log_level
    - description: 'The position the rule will be in. '
      name: position
    - description: A list of remarks for the rule.
      isArray: true
      name: remarks
    - auto: PREDEFINED
      description: True if the rule is a permit.
      name: permit
      predefined:
      - 'True'
      - 'False'
    - description: The destination. Can be the value of an IPv4, an address block, or the name of a network object.
      name: destination
    - description: The source. Can be the value of an IPv4, an address block, or the name of a network object.
      name: source
    - description: The service of the rule.
      name: service
    - auto: PREDEFINED
      description: The destination address type in the ace.
      name: destination_kind
      predefined:
      - AnyIPAddress
      - IPv4Address
      - IPv4FQDN
      - IPv4Network
      - IPv4Range
      - IPv6Address
      - IPv6FQDN
      - IPv6Network
      - IPv6Range
      - SecurityName
      - SecurityTag
      - interfaceIP
      - NetworkObj
      - NetworkObjGroup
    - auto: PREDEFINED
      description: The source address type in the ace.
      name: source_kind
      predefined:
      - AnyIPAddress
      - IPv4Address
      - IPv4FQDN
      - IPv4Network
      - IPv4Range
      - IPv6Address
      - IPv6FQDN
      - IPv6Network
      - IPv6Range
      - SecurityName
      - SecurityTag
      - interfaceIP
      - NetworkObj
      - NetworkObjGroup
    - auto: PREDEFINED
      description: The source service type.
      name: service_kind
      predefined:
      - AnyService
      - ICMP6Service
      - ICMPService
      - NetworkProtocol
      - NetworkServiceGroups
      - NetworkServiceObjects
      - TcpUdpService
    - description: The destination service value.
      name: destination_service
    - auto: PREDEFINED
      description: The destination service type.
      name: destination_service_kind
      predefined:
      - AnyService
      - ICMP6Service
      - ICMPService
      - NetworkProtocol
      - NetworkServiceGroups
      - NetworkServiceObjects
      - TcpUdpService
    - auto: PREDEFINED
      description: Object ID of for the time range object. Can be received with the command cisco-asa-list-time-range.
      name: time_range
    - description: The object ID to the user. Can be one of LocalUserObjGroup, UserGroupObj, UserObj. Can be received with existing commands; cisco-asa-list-local-user-group, cisco-asa-list-local-user, cisco-asa-list-user-object.
      name: user
    - auto: PREDEFINED
      description: The type of the user.
      name: user_kind
      predefined:
      - LocalUserObjGroup
      - UserGroupObj
      - UserObj
    - description: Source security group in the ace. Possible values are SecurityName, SecurityTag and SecurityObjGroup. Can be received with the existing command cisco-asa-list-security-object-group.
      name: source_security
    - auto: PREDEFINED
      description: The source security type.
      name: source_security_kind
      predefined:
      - SecurityName
      - SecurityTag
      - SecurityObjGroup
    - description: Destination security group in the ace. Possible values are SecurityName, SecurityTag and SecurityObjGroup. Can be received with the existing command cisco-asa-list-security-object-group.
      name: destination_security
    - auto: PREDEFINED
      description: The destination security type.
      name: destination_security_kind
      predefined:
      - SecurityName
      - SecurityTag
      - SecurityObjGroup
    description: Updates an existing rule.
    name: cisco-asa-edit-rule
    outputs:
    - contextPath: CiscoASA.Rules.Source
      description: The rule's source.
      type: String
    - contextPath: CiscoASA.Rules.Dest
      description: The rule's destination.
      type: String
    - contextPath: CiscoASA.Rules.InterfaceType
      description: The interface type. Can be "In", "Out", or "Global".
      type: String
    - contextPath: CiscoASA.Rules.IsActive
      description: Whether the rule is active.
      type: Boolean
    - contextPath: CiscoASA.Rules.Interface
      description: The name of the interface.
      type: String
    - contextPath: CiscoASA.Rules.Position
      description: The position of the rule.
      type: Number
    - contextPath: CiscoASA.Rules.ID
      description: The rule ID.
      type: String
    - contextPath: CiscoASA.Rules.Remarks
      description: A list of all rule remarks.
      type: Unknown
    - contextPath: CiscoASA.Rules.Permit
      description: Whether the rule permits traffic from source to destination.
      type: Boolean
    - contextPath: CiscoASA.Rules.DestService
      description: The destination service.
      type: String
    - contextPath: CiscoASA.Rules.SourceService
      description: The source service.
      type: String
    - contextPath: CiscoASA.Rules.SourceKind
      description: One of AnyIPAddress, IPv4Address, IPv4FQDN, IPv4Network, IPv4Range, IPv6Address, IPv6FQDN, IPv6Network, IPv6Range, SecurityName, SecurityTag, interfaceIP, objectRef#NetworkObj, objectRef#NetworkObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.DestKind
      description: One of AnyIPAddress, IPv4Address, IPv4FQDN, IPv4Network, IPv4Range, IPv6Address, IPv6FQDN, IPv6Network, IPv6Range, SecurityName, SecurityTag, interfaceIP, objectRef#NetworkObj, objectRef#NetworkObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.SourceSecurity.kind
      description: The type of the security group; SecurityName, SecurityTag, objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.SourceSecurity.value
      description: The value of the SecurityName or SecurityTag.
      type: String
    - contextPath: CiscoASA.Rules.SourceSecurity.objectId
      description: The object ID of objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.DestinationSecurity.kind
      description: The type of the security group; SecurityName, SecurityTag, objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.DestinationSecurity.value
      description: The value of the SecurityName or SecurityTag.
      type: String
    - contextPath: CiscoASA.Rules.DestinationSecurity.objectId
      description: The object ID of objectRef#SecurityObjGroup.
      type: String
    - contextPath: CiscoASA.Rules.User.kind
      description: One of AnyUser, NoneUser, objectRef#LocalUserObjGroup, objectRef#UserGroupObj, objectRef#UserObj.
      type: String
    - contextPath: CiscoASA.Rules.User.value
      description: The user value.
      type: String
    - contextPath: CiscoASA.Rules.User.objectId
      description: The object ID of the user.
      type: String
    - contextPath: CiscoASA.Rules.TimeRange.kind
      description: The object reference type or the actual TimeRange value.
      type: String
    - contextPath: CiscoASA.Rules.TimeRange.value
      description: The value of the time range.
      type: String
    - contextPath: CiscoASA.Rules.TimeRange.objectId
      description: The object ID of the time range.
      type: String
  - arguments:
    - description: A comma-separated list of network object names for which to get the network.
      isArray: true
      name: object_name
    - description: A comma-separated list of object IDs for which to get the network object.
      isArray: true
      name: object_id
    description: Gets a list all configured network objects.
    name: cisco-asa-list-network-objects
    outputs:
    - contextPath: CiscoASA.NetworkObject.ID
      description: The ID of the network object.
      type: String
    - contextPath: CiscoASA.NetworkObject.Host
      description: The host information of the network object.
      type: String
    - contextPath: CiscoASA.NetworkObject.Description
      description: A description of the network object.
      type: String
    - contextPath: CiscoASA.NetworkObject.Name
      description: The name of the network object.
      type: String
  - arguments:
    - auto: PREDEFINED
      description: The type of network object to create.
      name: object_type
      predefined:
      - IPv4
      - IP-Network
      required: true
    - description: The name of the object to create.
      name: object_name
      required: true
    - description: The value of the network object to create.
      name: object_value
      required: true
    description: Creates a network object.
    name: cisco-asa-create-network-object
    outputs:
    - contextPath: CiscoASA.NetworkObject.ID
      description: The ID of the network object.
      type: String
    - contextPath: CiscoASA.NetworkObject.Host
      description: The host information of the network object.
      type: String
    - contextPath: CiscoASA.NetworkObject.Description
      description: A description of the network object, if exists.
      type: String
    - contextPath: CiscoASA.NetworkObject.Name
      description: The name of the network object.
      type: String
  - description: Gets a list of all interfaces.
    name: cisco-asa-list-interfaces
    outputs:
    - contextPath: CiscoASA.Interface.ID
      description: The interface ID.
      type: String
    - contextPath: CiscoASA.Interface.Name
      description: The interface name.
      type: String
    - contextPath: CiscoASA.Interface.Type
      description: The type of interface.
      type: String
  dockerimage: demisto/python3:3.12.13.10116658
  runonce: false
  script: '-'
  type: python
  subtype: python3
fromversion: 5.0.0
tests:
- No tests (auto formatted)