Cisco-_FTDv_Automation_using_Ansible

Automating Cisco NGFW solution using Rest API via Ansible

Problem Statement

Manage FTD day to day Operation like adding Host Objects, ACLs, NAT rules etc using a standard Automation Language which can be spanned to other Network Device. In this playbook we are aiming to push bulk host object to FMC i.e more 1 host object to be pushed to FMC in one api call.

Solution:

Customer Network are now moving to utilise Automation capabilities available within Network Devices/Products to avail ease of operation and less human error. Keeping the same in mind, Ansible is one such automation lanaguage whih can be leveraged as central methodology to managae all Network Device present in the network. The same can be extended to Cisco FTD which is Next Gen Firewall solution using in the Enterprise/DC/SP Network. Cisco FTD is also capable of communicating with other devices over REST API as well.
This script explores the option to use REST API of Cisco FTD using Ansible.

Benefit :

No need invest on learning curve for new scripting language like Python. Ansible can be used to manage CLI as well as REST API based Devices. Ansible is now being ussed as standard language through out industry to manage the Network Infrastructure. We do have Ansible support for Cisco FTDv https://developer.cisco.com/docs/ftd-ansible-v6-3/#!introduction-to-ftd-ansible/introduction-to-ansible-modules-for-ftd-6-3-0 .

This solution aims to utilize the REST API of Cisco FTDv using Ansible

Usage:

Clone the repo.

git clone https://github.com/Madhuri150791/Cisco-_FTDv_Automation_using_Ansible.git

Edit FTD_Inventory.txt

Put your FTD node under the group mylabserver, and edit the credentials. Similary in the FTD-playbook.yml edit the server and credential details.

Run the playbook.

ansible-playbook -i FTD-inventory.txt FTD-playbook.yml

Note: PLease make sure you have ansible installed in the local machine from where you are running the ansible.

For more clarification on the code please visit https://www.linkedin.com/pulse/setting-up-ansible-cisco-ise-madhuri-dewangan/

Developed By:

Madhuri Dewangan

Professional Services Cisco