What problem does it solve? Cisco ASA and FTD running configurations are dense, line-oriented text that is hard to audit, compare, or migrate by hand. This Skill parses show running-config output into a structured vendor-neutral JSON schema so ACLs, NAT rules, objects, and routes can be analyzed, audited, or converted reliably. ## Core Features & Use Cases - Full config extraction: Parses interfaces, nameif-derived zones, network/service objects and groups, ACLs with access-group bindings, object and twice NAT, static routes, OSPF/BGP, VPN/IPsec, failover, DHCP, and admin users. - Built-in audit checks: Detects unused objects, shadowed ACL entries, overly permissive rules, missing logging, unbound ACLs, empty groups, and weak VPN algorithms like DES/3DES or MD5. - Conversion-ready output: Emits the shared intermediate schema consumed by downstream conversion and diff skills, with port-to-application mapping, implicit deny rules, residual capture, and secret masking. - Use Case: Paste an ASA running config and receive normalized JSON of all security policies and NAT rules plus a findings report flagging a permit ip any any rule and an unused object group before a migration to Palo Alto. ## Quick Start Ask the agent to parse the attached Cisco ASA running configuration into the shared firewall schema and report any audit findings.
