Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm looking for a method to send instructions to a Cisco ASA without writing scripts to execute on the CLI over SSH. Cisco doesn't seem to support netconf or xml-pi on the physical ASAs (only their new 1000v series).

Are there any suggestions for an ASA API?

share|improve this question

To best of my knowledge , there are no Cisco API's for Physical ASA's . You need to do it via CLI or Cisco Security Manager or ASDM .

share|improve this answer

I don't really know if it helps.

Cisco has a shell that can be used for some automation.

As far as I know this exists only on CISCO Routers and Switches, I don't know if in the latest ASA IOS the tcl shell has been implemented fully or partially. (never used it on a ASA... ).

To chek if your IOS has the shell you only need to write tclsh in privilege mode. This shell is the TCL shell where you can use TCL Scripting to automate some actions.

After that you can build the tcl scripts with the actions that you wish and you can make a simple webpage and activate https on your system to execute remotely the actions that you wish.

Plan correctly and implement the this with the appropriate security and you can have a better on-demand automation.

Some guides to scripting:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.