soar
Cisco Secure Firewall
Splunk SOAR Cloud
Splunk Built
Overview
This app interfaces with Cisco Firepower devices to add, update and delete network objects, network object groups, access policies and access rules
Supported Actions Version 1.0.1
- test connectivity: Validate the asset configuration for connectivity
- list network objects: List network object in FMC
- create network object: Creates a network object in FMC
- update network object: Updates a network object in FMC
- delete network object: Deletes a network object in FMC
- get network group objects: Gets all network group objects in FMC host or a specfic network group
- create network group object: Create a network group object
- update network group object: Update a network group object
- delete network group object: Delete a network group object
- get access control policies: Gets all or a particular access control policy in the FMC host for a particular domain
- create access control policy: Create an access control policy
- update access control policy: Update an access control policy
- delete access control policies: Deletes the specified access control policy
- get access control rules: Gets all access control rules associated with a particular access control policy
- create access control rule: Creates an access control rule associated with a particular access control policy
- update access control rule: Updates an access control rule associated with a particular access control policy
- delete access control rules: Deletes access control rule associated with a particular access control policy
- list intrusion policies: Gets all intrusion polcies in the FMC host for a particular domain
- create intrusion policy: Create an intrusion policy
- update intrusion policy: Update an intrusion policy
- delete intrusion policy: Deletes the specified access intrusion policy
- list devices: Lists all devices belonging to a particular domain/tenant
- get deployable devices: List all devices with configuration chnges that are ready to be deployed
- deploy devices: Deploy devices that are ready to deploy
- get deployment status: Get status of a deployment
Release Notes
Version 1.0.1
Feb. 14, 2025
- Initial Cisco Secure Firewall connector with the following actions and features:
- Support for both cloud and on-prem delivered FMC
- test connectivity
- list network objects
- create network object
- update network object
- delete network object
- get network groups
- create network group
- update network group
- delete network group
- get access control policies
- create access control policy
- update access control policy
- delete access control policy
- get access control rules
- create access control rule
- update access control rule
- delete access control rules
- list intrusion policies
- create intrusion policy
- update intrusion policy
- delete intrusion policy
- list devices
- get deployable devices
- deploy devices
- get deployment status