fmc-firewall-ops

Query Cisco FMC firewall profiles and access rules for policy audits.

Updated Feb 28, 2026
One-click install
npx skills add https://github.com/dgethings/netclaw --skill fmc-firewall-ops-dgethings
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: fmc-firewall-ops
Source: https://github.com/dgethings/netclaw/tree/main/workspace/skills/fmc-firewall-ops
Command: npx skills add https://github.com/dgethings/netclaw --skill fmc-firewall-ops-dgethings

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Cisco FMC firewall policy audits across single or multiple FMC instances, enabling fast discovery of profiles, targeted rule queries, and policy evaluations to improve security posture.

Core Features & Use Cases

  • Discover FMC instances with list_fmc_profiles to identify available FMC deployments.
  • Search and inspect access policies using search_access_rules to identify permissive or risky rules.
  • Resolve device-to-policy mappings with find_rules_for_target to audit specific firewalls or clusters.
  • Filter by IP, FQDN, or policy name to validate segmentation and policy coverage.
  • Integrate with existing workflows for cross-FMC consistency checks and audit reporting.

Quick Start

Begin by discovering FMC profiles with list_fmc_profiles to prepare for multi-FMC policy audits.

Frequently Asked Questions about fmc-firewall-ops

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Cisco FMC firewall rules across multiple FMC instances?

Audit Cisco FMC firewall rules across multiple FMC instances by discovering profiles with list_fmc_profiles, querying rules via search_access_rules, and mapping devices to policies for comprehensive security reporting.

Can I search FMC access policies by IP, FQDN, or policy name?

Search FMC access policies by filtering on IP, FQDN, or policy name to validate segmentation, identify permissive rules, and ensure policy coverage across your firewalls.

How do I find which access rules apply to a specific firewall device?

Find access rules for a specific firewall device by resolving device-to-policy mappings with find_rules_for_target, allowing targeted audits of individual firewalls or clusters.

What is involved in performing a multi-FMC policy audit?

Multi-FMC policy audit involves discovering available FMC deployments, searching access rules by criteria like IP or FQDN, and mapping devices to policies to assess rule effectiveness and segmentation.

Are there prerequisites for auditing firewall policies in a multi-FMC environment?

Auditing firewall policies in a multi-FMC environment requires no specific dependencies, but you should begin by discovering FMC profiles with list_fmc_profiles to prepare for cross-FMC consistency checks.

Why should I use multi-FMC profile discovery for firewall auditing?

Multi-FMC profile discovery identifies all available FMC deployments, enabling targeted rule queries, cross-FMC consistency checks, and comprehensive audit reporting to improve overall security posture.