What problem does it solve? Cisco Firepower configurations exported from FMC or FDM arrive as dozens of separate REST API JSON responses with UUID-based references, making manual review, auditing, and cross-vendor migration slow and error-prone. This Skill normalizes those exports into one shared intermediate schema so access rules, objects, NAT, VPN, and HA settings can be analyzed consistently. ## Core Features & Use Cases - Full FMC/FDM JSON parsing: Extracts access control rules, prefilter rules, security zones, network/service objects and groups, NAT rules, intrusion and file policies, static routes, HA, VPN, and admin users into the shared firewall schema. - Rule ordering and action fidelity: Flattens prefilter, mandatory, default, and implicit default-action rules into true evaluation order with _rule_index, and flags non-terminal MONITOR rules and FASTPATH bypasses with mandatory warnings. - Audit-ready quality gates: Detects truncated paging, unresolved references, shadowed rules, overly permissive any/any rules, unused objects, and missing logging, and masks secrets while distinguishing absent versus redacted keys. - Use Case: Given a keyed envelope of FMC API responses, produce a single schema document per access control policy with object counts, warnings, and unresolved references, ready to feed conversion, diff, or audit skills. ## Quick Start Ask the agent to parse the attached FMC JSON export into the intermediate schema and report any truncated collections, unresolved references, and shadowed rules.
