Integrations

Overview

The Cisco FTD (Firepower Threat Defense) Integration allows Cywift tosecurely connect with Cisco Firepower devices to collect firewall policies,access control rules, threat configurations, and compliance-related data.

This integration helps automate firewall monitoring and improvesvisibility into security policies.

Before starting the integration, ensure the following:

• Administrative access to Cisco Firepower Management Center (FMC)
• FMC hostname or IP address
• Valid API username and password
• API access enabled
• Network connectivity between Cywift and FMC

‍Step 1: Create Read-Only API User

Cywift uses API-based communication for secure data collection.

Create Read-Only User

Log in to Cisco FMC.

Navigate to:

System → Users → User Management

Create a new user.

Assign the following role:

Role: Read Only

Save the configuration.

Verify API Access

Test API connectivity:

curl -k -u<username>:<password>https://<fmc-ip>/api/fmc_platform/v1/info/serverversion

Validate Read-Only Access

Ensure the user can retrieve policies and configurations without editpermissions.

Important Notes:

• Use read-only privileges only
• Secure API credentials properly
• Restrict API access to trusted systems

Step 2: Navigate to Integrations inCywift

• Log in to the Cywift Platform
• Go to Integration from the left menu
• Under NGFW
• Select Cisco FTD
• Click Connect

Step 3: Add Individual Integration

Use this option when integrating a single Cisco FMC instance.

Required Fields

Number of Integration
Select Individual Integration

Integration Type
Select NGFW

Collectors
Select a configured collector

Integration System
Select Cisco FTD

Alias
Enter a friendly name for the integration

Owner
Select the integration owner

Host Address
Enter FMC hostname or IP address

Username
Enter the read-only API username

Password
Enter the corresponding password

Actions

Test Connection
Verifies API connectivity and authentication

Cancel
Discards configuration

Step 4: Add Bulk Integration

Use this option to integrate multiple Cisco FMC instances.

Steps

• Select Bulk Integration
• Choose Integration Type (NGFW)
• Select Collectors
• Choose Integration System: Cisco FTD
• Click Download Template
• Fill in the template with required device details
• Upload the completed file
• Click Test Connection

Troubleshooting Tips

• Ensure FMC API service is enabled
• Verify username and password
• Confirm read-only permissions
• Check network connectivity
• Ensure firewall rules allow HTTPS/API access
• Verify management IP accessibility