Cisco Firepower Database Access API

The Firepower System® database access feature allows you to query intrusion, discovery, user activity, correlation, connection, vulnerability, and application and URL statistics database tables on a Cisco Firepower Management Center, using a third-party client that supports JDBC SSL connections.

You can use an industry-standard reporting tool such as Crystal Reports, Actuate BIRT, or JasperSoft iReport to design and submit queries. Or, you can configure your own custom application to query Cisco data under program control. For example, you can build a servlet to report intrusion and discovery event data periodically or refresh an alert dashboard.

Note that you can connect to multiple Firepower Management Cneters with a single client, but you must configure access to each one individually.

When deciding which appliance or appliances to connect to, keep in mind that querying the database on a Cisco appliance reduces available appliance resources. You should carefully design your queries and submit them at times consistent with your organization’s priorities.

1. Learn about the Database Access API

Read an overview of Database API functionality.

Read the detailed Integration Guide

2. Start Integrating with the Firepower Database Access API

Links

API forum:
https://supportforums.cisco.com/community/12226126/sourcefire-api
List of Database Access partners:
http://www.cisco.com/c/en/us/products/security/partner-ecosystem.html