XSoar Integration with cisco firepower

oDarweesh2 — Thu, 13 Oct 2022 16:01:14 GMT

Dears,

I installed cisco firepower integration. from Market Place.

I use update network group objects command but actually it removes all the IP addresses inside this group and add the only list that I newly updated.

Kindly need your support.

Also for Integration with ASA firewall , it failed in the testing phase as it gives me error for 400 code.

Re: XSoar Integration with cisco firepower

jfernandes1 — Thu, 20 Oct 2022 00:58:52 GMT

Hi @oDarweesh2, This might a limitation of the Cisco API. I don't have access to Cisco API documentation but from https://www.cisco.com/c/en/us/td/docs/security/firepower/620/api/REST/Firepower_Management_Center_REST_API_Quick_Start_Guide_620/Objects_in_the_REST_API.html#reference_mtn_z3f_bcb it looks like the API only creates and overrides.

You can get around this by first issuing the !ciscofp-get-network-groups-object command to fetch the existing values. Then the !ciscofp-update-network-groups-objects command to update everything.

topic XSoar Integration with cisco firepower in Cortex XSOAR Discussions

XSoar Integration with cisco firepower

Re: XSoar Integration with cisco firepower