Skip to content
Docs sslbrain sslbrain.com

Cisco Secure Firewall (FDM)

Copy link to the page “Cisco Secure Firewall (FDM)”

← All integrations

Firewall and VPN

Uploads or renews certificate objects and binds them to the Web UI, RA VPN and the other targets discovery found.

The appliance runs the package and connects to Cisco Secure Firewall (FDM) through FDM API over HTTPS on port 443. No agent is installed on Cisco Secure Firewall (FDM).

What happens

  1. The appliance connects to Cisco Secure Firewall (FDM) through FDM API on port 443.
  2. The certificate object is uploaded or renewed.
  3. The object is bound to the chosen target, and the change is deployed when chosen. If it fails: Rollback puts the target's previous binding back from the backup.
  4. Verification: the package checks target certificate references. For Web UI and RA VPN it also checks activation and the served TLS fingerprint.

Technical details

Connection
The package runs on the appliance, which connects over HTTPS to FDM API, port 443. No agent is installed.
You need
FDM user allowed to manage certificate objects and deployment.
Platform
Secure Firewall Threat Defense managed with Firewall Device Manager
Actions
Discovery, Installation, Verification, Rollback, Removal
Packages
cisco-fdm-api 0.4.0
Note
  • Rollback restores bindings, not certificate content overwritten by renewal in the same object. Create a separate object and change the binding to make the whole change reversible.
  • Discovery finds certificate objects, CA certificates, Web UI, RA VPN, SSL policy and site-to-site VPN references and API capabilities.

Get started