Action Items

Action Items

API Foundation

  • FMC REST API reference documented

  • FMC credentials configured in dsec

  • Token acquisition verified

  • ASA REST API reference documented

  • ASA credentials configured

Audit Scope

  • Export FTD/FMC configuration via API

  • Export ASA configuration via API

  • Rule base analysis — unused, overly permissive, shadowed rules

  • VPN configuration audit — tunnel groups, group policies, crypto

  • Platform security — management access, SSH/HTTPS, logging, NTP, AAA

  • High availability — failover state, interface monitoring

  • CIS benchmark alignment assessment

Deliverables

  • Security posture report for management

  • D2 diagrams — firewall zone topology, VPN architecture

  • API management runbook — common operations via curl/netapi