Upload File

firepower & firepower apis · 2020. 8. 26. · firepower threat defense rest api 5 •direct to...

  • Home
  • Documents
  • Firepower & Firepower APIs · 2020. 8. 26. · Firepower Threat Defense REST API 5 •Direct to device API public since 6.2.3 •Used by Firepower Device Manager & Cisco Defense Orchestrator
13
#CiscoLive | #DevNetDay Jared Smith – Principal Engineer Firepower & Firepower APIs Part1: FTD API Security Cisco Live Virtual DevNet Day

Upload: others

Post on 02-Feb-2021

36 views

Category:

Documents


0 download

Report

TRANSCRIPT

  • #CiscoLive | #DevNetDay

    Jared Smith – Principal Engineer

    Firepower & Firepower APIsPart1: FTD APISecurity Cisco Live Virtual DevNet Day

  • Agenda

    #CiscoLive | #DevNetDay © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public

    • Introduction Firepower Threat Defense• Introduction to Firepower Threat Defense

    REST API

    • Demo Ansible• Demo Import/Export API

    2

  • © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public#CiscoLive | #DevNetDay

    What is a Next Generation Firewall?

    3

    • Firepower Threat Defense (FTD) is our Next Generation Firewall (NGFW)

    • Next Generational Functionality Includes:• Application Awareness• Decryption• Intrusion Prevention• Talos Intelligence• User Identity

  • © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public#CiscoLive | #DevNetDay

    Firepower Threat Defense API Use Cases

    4

    • Automated provisioning

    • Scaling Configuration Updates

    • Configuration Verification

    • Object Definition Changes

    • Configuration Cloning

  • © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public#CiscoLive | #DevNetDay

    Firepower Threat Defense REST API

    5

    • Direct to device API public since 6.2.3

    • Used by Firepower Device Manager & Cisco Defense Orchestrator

    • Internally Automated for Regression Test

    • OAuth password authentication to obtain a token

    • All features in FDM have an API

    • The API is stable with good functionality coverage (SMB & Commercial)

  • © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public#CiscoLive | #DevNetDay

    Direct to Device API Options

    6

    Firepower Threat Defense

    Ansible{REST} OpenAPISpecification

    Bravado or other Libraries

  • © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public#CiscoLive | #DevNetDay

    What is Ansible?

    7

    • Opensource (free to use) tool supporting configuration management automation

    • No agent required on the firewall

    • Declarative configuration definition in YAML

    • Easy automation framework - simple to use and learn (no programming required)

    • Idempotent – Can replay playbook (checks current state and only does the required changes)

  • © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public#CiscoLive | #DevNetDay

    Import/Export API what is it for?

    8

    • Bulk Transactional addition and extraction of configuration from FTD• Faster than individual calls

    • Performed as a background job (Asynchronous)

    • Use Cases:• Cloning a device• Replicating objects• Replication of objects and policy

    • Opensource tooling exists to get you started

  • © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public#CiscoLive | #DevNetDay

    API Demonstrations

    9

    I will take you through two exercises leveraging a DevNet Sandbox:

    - Ansible Demo- Using Bulk Import Export API

  • © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public#CiscoLive | #DevNetDay

    Demo

    10

  • © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public#CiscoLive | #DevNetDay

    Explore More • General launch point for FTD-API resources on DevNet:• https://developer.cisco.com/firepower/threat-defense/

    • Ansible Information:• https://developer.cisco.com/site/ftd-ansible/• https://github.com/CiscoDevNet/FTDAnsible• https://developer.cisco.com/learning/lab/fdm-api-103/step/1

    • Import/Export API:• https://github.com/jaredtsmith/ftd_api• https://developer.cisco.com/learning/lab/fdm-api-104/step/1

    https://developer.cisco.com/firepower/threat-defense/https://developer.cisco.com/site/ftd-ansible/https://github.com/CiscoDevNet/FTDAnsiblehttps://developer.cisco.com/learning/lab/fdm-api-103/step/1https://github.com/jaredtsmith/ftd_apihttps://developer.cisco.com/learning/lab/fdm-api-104/step/1

  • Thank you

    #CiscoLive | #DevNetDay

  • #CiscoLive | #DevNetDay


Integrate Cisco Threat Response and Firepower · * Couldn't resolve host 'api-sse.cisco.com' * Closing connection 0 curl: (6) Couldn't resolve host 'api-sse.cisco.com' The above output

Remote Access VPN - · PDF fileDevice Model Maximum Concurrent Remote Access VPN ... Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.2.1

Cisco Firepower Threat Defense Syslog Messages · Cisco Firepower Threat Defense Syslog Messages First Published: 2018-03-30 Last Modified: 2020-04-01 Americas Headquarters CiscoSystems,Inc

and Firepower Mobility, Shock, Mobility Shock Firepower

Migrating ASA to Firepower Threat Defense Site-to …...Migrating ASA to Firepower Threat Defense—Site-to-Site VPN Using IKEv2 with Pre-Shared Key Authentication Verification of

Site-to-Site VPNs for Firepower Threat Defense · Managing Firepower Threat Defense Site-to-site VPNs SmartLicense ClassicLicense SupportedDevices SupportedDomains Access Export-Compliance

Quality of Service (QoS) for Firepower Threat Defense€¦ · TheRulestabintheQoSpolicyeditorlistseachruleinevaluationorder,anddisplaysasummaryoftherule conditionsandratelimitingconfigurations.Aright

Cisco Firepower Threat Defense Virtual クイックス …...1 Cisco Systems, Inc. Cisco Firepower Threat Defense Virtual クイックスタートガイド（Microsoft Azure クラウド向け）

Cisco ASA-Firepower Threat Defense 마이그레이션 가이드 버전 6 · • Firepower디바이스요건,3페이지 • 라이센스요건,3페이지 • 마이그레이션이지원되는ASA기능,3페이지

Cisco Firepower NGFW - ZSIS · appliances as well as the Cisco ASA 5500-FTD-X appliances when running the Cisco Firepower Threat Defense image. Table 1. Performance Specifications

Cisco Firepower Threat Defense Software on Select ASA ... · PDF fileCisco Firepower Threat Defense Software on Select ASA Hardware..... 6 Cisco ASA with FirePOWER Services

Remote Access VPNs for Firepower Threat Defense › c › en › us › td › docs › security › ... · RemoteAccessVPNsforFirepowerThreat Defense •FirepowerThreatDefenseRemoteAccessVPNOverview,onpage1

Cisco Firepower Threat Defense Virtual for the … · 3 Cisco Firepower Threat Defense Virtual for the Microsoft Azure Cloud Quick Start Guide Guidelines and Limitations for the Firepower

Cisco Firepower Threat Defense バージョン 6.2 ......Cisco Firepower Threat Defense バージョン 6.2 コンフィギュレー ションガイド（ Firepower Device Manager

Cisco NGFW and UTM update•All NGFW editions have Stateful inspection firewall functionality. • The ASA+Firepower (Hybrid) and Firepower Threat Defense (Unified) editions use the

The F5 SSL Orchestrator and Cisco Firepower Solution · The Cisco Firepower Threat Defense solution may be delivered using several combinations of Cisco Firepower and Adaptive Security

Firepower Threat Defense Certificate-Based Authentication · Step2 Choose(+) Add > Add New Certificate toassociateandinstallanenrollmentobjectonadevice.Continue basedonthetypeofenrollment

Getting Started with Firepower Threat Defense Virtual and ...Getting Started with Firepower Threat Defense Virtual and Azure Author: Unknown Created Date: 4/6/2020 9:45:21 PM

Firewall de próxima geração Cisco Firepower...API aberta para integrações com produtos de terceiros; ... A Tabela 3 resume o desempenho e os recursos dos dispositivos Cisco Firepower

Migrating ASA to Firepower Threat Defense Site-to-Site VPN ...€¦ · Migrating ASA to Firepower Threat Defense Site-to-Site VPN Using IKEv2 with Certificates Verification of VPN

Configure Firepower Threat Defense (FTD) Management Interface · FTD/Firepower Management Center (FMC) integration scenarios Configure Management Interface on ASA 5500-X Devices The

Reimage the Cisco ASA or Firepower Threat Defense DeviceReimage the Cisco ASA or Firepower Threat Defense Device Reimage from ASA to Firepower Threat Defense 2. Download the Firepower

Interfaces for Firepower Threat Defense - cisco.com · Any N/A FTD Any ToconfigureaglobalIPv6addressforanyroutedmodeinterfaceandforthetransparentmodeBVI,perform …

Business Resiliency Through Superior Threat Defense · Business resiliency through superior threat defense –introducing the Firepower 2100 NGFW Superior threat defense Industry

Cisco ASA with FirePOWER Services Just Imagine. SRW- Website...Cisco ASA with FirePOWER Services takes an integrated approach to threat defense, reducing capital costs, operating costs

Cisco ASA 5500 with FirePOWER Services Datasheet · Cisco® ASA with FirePOWER Services delivers integrated threat defense for the entire attack continuum - before, during, and after

Static and Default Routes for Firepower Threat Defense · StaticandDefaultRoutesforFirepowerThreat Defense ThischapterdescribeshowtoconfigurestaticanddefaultroutesontheFTD. •AboutStaticandDefaultRoutes,onpage1

Cisco Firepower Threat Defense Hardening Guide, Version 6 · CiscoFirepowerThreatDefenseHardening Guide,Version6.4 FirstPublished:2019-05-10 Cisco Firepower Threat Defense Hardening

Cisco ASA with FirePOWER Services Data Sheet - Essextec · PDF fileCisco ASA with FirePOWER Services incorporates an integrated approach to threat defense, reducing capital and operating

Cisco ASA with FirePOWER Services Data Sheet · Cisco ASA with FirePOWER Services incorporates an integrated approach to threat defense, reducing capital and operating costs and administrative

Small Arms Defense Against Air Attack · PDF fileSMALL ARMS DEFENSE AGAINST AIR ATTACK ... Learning to use our full firepower for air defense means preparation ... MiG-27 FLOGGER D/J,

Firepower Threat Defense Deployment with FMC · Firepower Chassis Manager:AddaFirepower Threat Defense Logical Device YoucandeployanFTDfromtheFirepower4100aseitheranativeorcontainerinstance.Youcandeploy

VPN Troubleshooting for Firepower Threat Defense · INFO:jdoe RelatedCommands Command Description show debug Showsthecurrentlyactivedebugsettings. undebug Disablesdebuggingforafeature.Thiscommandisasynonymforno

Cisco Services Q & A for Sourcefire Customers · Sourcefire Defense Center Series Cisco FireSIGHT Management Center FirePOWER Appliance Cisco FirePOWER Appliance FirePOWER 7K Series

Firepower Threat Defense High Availability - cisco.com · Failover Link Thetwounitsinafailoverpairconstantlycommunicateoverafailoverlinktodeterminetheoperatingstatus ofeachunit. Failover