skills.rest
automateyournetwork
automateyournetworkCOMMUNITY
Explore all skills by this author →
Website𝕏@john_capobiancoGitHub

fmc-firewall-ops

Searches Firebolt and other CSPs' data warehouses for specified text strings and returns matching objects and metadata.

627|175|Updated Feb 19, 2026
Search Tags:#security#cisco#firewall#fmc#access-policy#ftd
One-click install
npx skills add https://github.com/automateyournetwork/netclaw --skill fmc-firewall-ops
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: fmc-firewall-ops
Source: https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/fmc-firewall-ops
Command: npx skills add https://github.com/automateyournetwork/netclaw --skill fmc-firewall-ops

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill streamlines the auditing and inspection of Cisco Secure Firewall policies managed by the Firepower Management Center (FMC), enabling efficient security policy analysis and troubleshooting.

Core Features & Use Cases

  • Access Policy Search: Search firewall rules by IP address, FQDN, or Security Group Tag (SGT).
  • Device Policy Resolution: Identify and query the specific access policies assigned to FTD devices or HA clusters.
  • Multi-FMC Management: Seamlessly query and manage policies across multiple FMC instances.
  • Use Case: Investigate which firewall rules permit or deny traffic to a specific server IP address, or audit all rules associated with a particular SGT for compliance.

Quick Start

Use the fmc-firewall-ops skill to search for firewall rules associated with the IP address 10.1.1.0/24.

Frequently Asked Questions about fmc-firewall-ops

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I search Cisco firewall rules by IP address or FQDN in FMC?▼

You can search Cisco firewall rules by IP address or FQDN by querying access policies via the FMC MCP server, which inspects rules across targeted FTD devices and resolves matching security policies automatically.

Can I audit access policies across multiple Firepower Management Center instances?▼

Yes, multi-FMC management allows you to seamlessly query and audit access policies across multiple Firepower Management Center instances, automating the discovery of FMC instances for comprehensive security policy analysis.

How do I find which firewall rules permit traffic to a specific server IP?▼

To find which firewall rules permit traffic to a specific server IP, perform a firewall-wide rule search using the FMC MCP server, which queries access policies and inspects rules matching your network and identity indicators.

What environment variables are required to query FTD device policies?▼

Querying FTD device policies requires the FMC_BASE_URL, FMC_USERNAME, and FMC_PASSWORD environment variables to authenticate with the FMC MCP server and resolve assigned access policies for FTD devices or HA clusters.

How do I audit Cisco Secure Firewall rules associated with a Security Group Tag?▼

Auditing Cisco Secure Firewall rules by Security Group Tag involves searching access policies via the FMC MCP server, which filters and inspects rules containing the specified SGT for compliance verification.

Related Skills

Explore More Software Engineering Skills→
pi-2rpi-2r

postgres

Query and inspect a local PostgreSQL database through an MCP server.

Community
Advanced
jaskaranhundaljaskaranhundal
3

network-exposure

Analyze network exposure from scan data, firewall rules, and topology.

Community
Advanced
dgethingsdgethings

fmc-firewall-ops

Query Cisco FMC firewall profiles and access rules for policy audits.

Community
Advanced
do360nowdo360now

firewall-review

Audit firewall rule bases for misconfigurations and compliance with industry standards.

Community
Advanced