Introduction to Firewall Management Center

Cisco Firewall Management Center is a comprehensive security management solution that allows organizations to centrally monitor, configure, and control Cisco firewalls. It provides a unified interface for managing firewall policies, analyzing network traffic, and responding to security incidents, enabling efficient network security management.

Learn more here: https://www.cisco.com/site/in/en/products/security/firewalls/firewall-management-center/index.html

Introduction to Firewall Threat Defense

Cisco Firewall Threat Defense is a next-generation firewall solution that combines advanced threat detection, intelligent automation, and unified management capabilities. It provides comprehensive network security by integrating firewall functionality with advanced threat prevention features, such as intrusion prevention systems (IPS), malware protection, and URL filtering.

Learn more here: https://www.cisco.com/c/en/us/support/security/firepower-ngfw/series.html

Introduction to Ansible Collection for Firewall Management Center REST API

A collection of Ansible modules that automate provisioning, configuration management and execution of operational tasks on Cisco Firepower Threat Defense (FTD) devices. The collection contains 1 Ansible module:

  • [fmc_configuration] - manages device configuration via REST API. The module configures virtual and physical devices by sending HTTPS calls formatted according to the REST API specification;

How to use Ansible modules

A simple example of creating network objects with the fmc_configuration module looks like this.

- name: Create a Network Object
  cisco.fmcansible.fmc_configuration:
    operation: "createMultipleNetworkObject"
    data:
        name: net1
        value: 1.0.0.0/24
        overridable: False
        description: Network obj 1
        type: Network
        name: net2
        value: 1.1.0.0/24
        overridable: False
        description: Network obj 2
        type: Network
    path_params:
        domainUUID: "{{ domain_uuid }}"
    query_params:
        bulk: "{{ bulk }}"

Check out the Examples section for more playbook samples.