Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Email Security Quick-links: ESA Product Support | SMA Product Support | Email Submission and Tracking Portal | Cisco SecurityHub
Current General Deployment (GD) Releases:
ESA: 11.0.0-264 WSA: 10.5.1-296 SMA: 11.0.0-115 Email Plug-in (Reporting): 1.0.1-048 Email Plug-in (Encryption): 1.0.0-036

Configuration and Reporting API

Hello,

I'm wondering if there is any API to deploy configuration updates/changes to the ESA and an API to retrieve custom data from the ESA/SMA?

After looking around my first impression is...

There is no API for configuration updates/changes and my best bet is to use the command line interface.

For the reporting API I found the "Ironport AsyncOS 6.4 Reporing API" pdf, which is quite outdated and the URLs to retrieve data do not work on the ESA/SMA.

Any advice on how to get consolidated report data off the ESA/SMA or how to deploy automatic configurations is greatly appreciated:)

Christoph

 

1 ACCEPTED SOLUTION

Accepted Solutions

Hello Christoph,you are

Hello Christoph,

you are correct that there is no specific API for the ESAs to apply configuration changes, the reason for this is that, security scanners except, the appliances are not designed to be reconfigured frequently. There are a couple workarounds mentioned in KB articles, most of them use scripts accessing the CLI to have some settings updated via import/export, i.e. RAT and HAT tables, text resources, or dictionaries.

Regarding reporting, event with some of the links not working, you'd still be able to retrieve reports via the export links under the graphs and tables on the monitor pages, at least if your URL fetching program supports cookies or session IDs.

 

Hope that helps, Andreas

 

1 REPLY

Hello Christoph,you are

Hello Christoph,

you are correct that there is no specific API for the ESAs to apply configuration changes, the reason for this is that, security scanners except, the appliances are not designed to be reconfigured frequently. There are a couple workarounds mentioned in KB articles, most of them use scripts accessing the CLI to have some settings updated via import/export, i.e. RAT and HAT tables, text resources, or dictionaries.

Regarding reporting, event with some of the links not working, you'd still be able to retrieve reports via the export links under the graphs and tables on the monitor pages, at least if your URL fetching program supports cookies or session IDs.

 

Hope that helps, Andreas

 

372
Views
10
Helpful
1
Replies