Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Generating script for automation with Athena FirePac

Hi,

Just trying to automate Firewall operation through Athena FirePac and NCM. Is there any way by which a script can be generated in NCM for creating ACL where ACL source , destination and service details will be getting from Athena FirePac. Athena FirePac and NCM is having integration , so obviously there must have some kind of API which is used for exchanging information to each other.

Thanks in Advance .

Find more posts tagged with

Accepted answers

All comments

fcaron

Interesting question.

Can you tell me more about the use case and user experience expected here?

E.g. Is it an NCM user triggering a Config Change Template (CCT), and you need this config change template to somehow get ACL data from FirePac?

User using FirePac, working on his ACL, after verifying that his ACL changes are fine, willing to push this change via NCM's CCT?

Also, when you are talking automation, are you talking about performing a CCT on multiple nodes?

I don't think any of this is possible today, but we'll contact our partners, I am just trying to understand if we are talking about NCM pulling data from FirePAC or FirePAC pushing data to NCM, amd also what is the primary UI used by the user to configure and trigger this automation: NCM's or FirePAC's?

adat

Hi ,

For this actually information to generate script will come from Athena Fire PAC. Actualy users will not use neither Athena nor NCM, users will be interacting with a third system which is a ticketing tool. What is there in out mind on workflows are as follows---

1. User will raise ticket for a new destination access through Firewall in a ticketing system which is a lets say web based portal having capability to consume and provide

info through Web API.

2. This ticketing system will pass tickets required information portion to Athena Fire PAC.Which is essentially a source IP, a Destination IP and a service like TCP port

3389.

3. Athena Fire PAC will take that Input and will do some analysis.

4. Athena FirePAC will provide an output

Device ID/IP

A Source IP

A destination IP

A Protocol TCP/UDP

A port Number which is 3389 in this example

Interface (Inside or Outside or DMZ)

5. NCM will take above 4 points outputs

6. NCM will run a script to prepare a configuration from above inputs.(Basically an ACL,where ACL name will be the name of Interface in point 4's output )

7. NCM will logged in to the device by (Device ID/IP from Point number 4)

8. NCM will push the generated configuration through the script.

9. NCM will return some status code to Athena FirePAC as done /not done.

Please revert id this is possible or not.

cvachovecj

Hi,

This scenario would only be possible when NCM was provided with the complete script. That means, there would have to be an additional step between 4. and 5. -- e.g. an power shell script that would take output from Athena FirePAC, create the configuration script and then call NCM to execute it.

Regards,

Jiri