Skip to main content

CiscoWSA (Deprecated)

This Integration is part of the Cisco WSA Pack.#

Deprecated

Use CiscoWSAV2 instead.

Cisco WSA This integration was integrated and tested with version vSeries-100 of Cisco-WSA

Configure CiscoWSA on Cortex XSOAR#

  1. Navigate to Settings > Integrations > Servers & Services.

  2. Search for CiscoWSA.

  3. Click Add instance to create and configure a new integration instance.

    ParameterRequired
    BASE_URLTrue
    API_KEYTrue
    PORTFalse
    Trust any certificate (not secure)False
    Use system proxy settingsFalse

  4. Click Test to validate the URLs, token, and connection.

Commands#

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

wsa-get-access-policies#

Retrieving all access policies

Base Command#

wsa-get-access-policies

Input#

Argument NameDescriptionRequired

Context Output#

PathTypeDescription
wsa.AccessPoliciesstringRetrieving all access policies

Command Example#

!wsa-get-access-policies

Context Example#

{
"access_policies": [
{
"amw_reputation": {
"state": "use_global"
},
"avc": {
"state": "use_global"
},
"http_rewrite_profile": "use_global",
"membership": {
"identification_profiles": [
{
"profile2": {
"auth": "No Authentication"
}
}
],
"protocols": [
{
"id_profile": "profile2",
"value": [
"http",
"https",
"ftp"
]
}
]
},
"objects": {
"state": "use_global"
},
"policy_description": "",
"policy_expiry": "",
"policy_name": "policy2",
"policy_order": 1,
"policy_status": "enable",
"protocols_user_agents": {
"state": "use_global"
},
"url_filtering": {
"custom_cats": {
"use_global": [
"SocialURLCategorynader1"
]
},
"exception_referred_embedded_content": {
"state": "disable"
},
"state": "custom",
"update_cats_action": "use_global",
"yt_cats": {
"use_global": [
"Film & Animation",
"Autos & Vehicles",
"Music",
"Pets & Animals",
"Sports",
"Travel & Events",
"Gaming",
"People & Blogs",
"Comedy",
"Entertainment",
"News & Politics",
"Howto & Style",
"Education",
"Science & Technology",
"Nonprofits & Activism"
]
}
}
},
{
"amw_reputation": {
"state": "use_global"
},
"avc": {
"state": "use_global"
},
"http_rewrite_profile": "use_global",
"membership": {
"identification_profiles": [
{
"profile1": {
"auth": "No Authentication"
}
}
],
"protocols": [
{
"id_profile": "profile1",
"value": [
"http",
"https",
"ftp"
]
}
]
},
"objects": {
"state": "use_global"
},
"policy_description": "",
"policy_expiry": "",
"policy_name": "policy1",
"policy_order": 2,
"policy_status": "enable",
"protocols_user_agents": {
"state": "use_global"
},
"url_filtering": {
"custom_cats": {
"use_global": [
"SocialURLCategorynader1"
]
},
"exception_referred_embedded_content": {
"state": "disable"
},
"state": "custom",
"update_cats_action": "use_global",
"yt_cats": {
"use_global": [
"Film & Animation",
"Autos & Vehicles",
"Music",
"Pets & Animals",
"Sports",
"Travel & Events",
"Gaming",
"People & Blogs",
"Comedy",
"Entertainment",
"News & Politics",
"Howto & Style",
"Education",
"Science & Technology",
"Nonprofits & Activism"
]
}
}
},
{
"amw_reputation": {
"state": "use_global"
},
"avc": {
"state": "use_global"
},
"http_rewrite_profile": "use_global",
"membership": {
"identification_profiles": [
{
"profile2": {
"auth": "No Authentication"
}
}
],
"protocols": [
{
"id_profile": "profile2",
"value": [
"http",
"https",
"ftp"
]
}
]
},
"objects": {
"state": "use_global"
},
"policy_description": "",
"policy_expiry": "",
"policy_name": "nader2",
"policy_order": 3,
"policy_status": "enable",
"protocols_user_agents": {
"state": "use_global"
},
"url_filtering": {
"custom_cats": {
"use_global": [
"SocialURLCategorynader1"
]
},
"exception_referred_embedded_content": {
"state": "disable"
},
"state": "custom",
"update_cats_action": "use_global",
"yt_cats": {
"use_global": [
"Film & Animation",
"Autos & Vehicles",
"Music",
"Pets & Animals",
"Sports",
"Travel & Events",
"Gaming",
"People & Blogs",
"Comedy",
"Entertainment",
"News & Politics",
"Howto & Style",
"Education",
"Science & Technology",
"Nonprofits & Activism"
]
}
}
},
{
"amw_reputation": {
"state": "use_global"
},
"avc": {
"state": "use_global"
},
"http_rewrite_profile": "use_global",
"membership": {
"identification_profiles": [
{
"profile1": {
"auth": "No Authentication"
}
}
],
"protocols": [
{
"id_profile": "profile1",
"value": [
"http",
"https",
"ftp"
]
}
]
},
"objects": {
"state": "use_global"
},
"policy_description": "",
"policy_expiry": "",
"policy_name": "nader1",
"policy_order": 4,
"policy_status": "enable",
"protocols_user_agents": {
"state": "use_global"
},
"url_filtering": {
"custom_cats": {
"use_global": [
"SocialURLCategorynader1"
]
},
"exception_referred_embedded_content": {
"state": "disable"
},
"state": "custom",
"update_cats_action": "use_global",
"yt_cats": {
"use_global": [
"Film & Animation",
"Autos & Vehicles",
"Music",
"Pets & Animals",
"Sports",
"Travel & Events",
"Gaming",
"People & Blogs",
"Comedy",
"Entertainment",
"News & Politics",
"Howto & Style",
"Education",
"Science & Technology",
"Nonprofits & Activism"
]
}
}
},
{
"amw_reputation": {
"cisco_dvs_amw": {
"amw_scanning": {
"amw_scan_status": "disable",
"amw_scanners": {
"mcafee": "unavailable",
"sophos": "unavailable",
"webroot": "unavailable"
}
},
"other_categories": {},
"suspect_user_agent_scanning": "scan"
},
"web_reputation": {
"filtering": "unavailable"
}
},
"avc": {
"state": "unavailable"
},
"http_rewrite_profile": "None",
"membership": {
"identification_profiles": [
{
"_all_": {
"auth": "No Authentication"
}
}
]
},
"objects": {
"max_object_size_mb": {
"ftp": 0,
"http_or_https": 0
},
"object_type": {
"Archives": {
"monitor": [
"StuffIt",
"BinHex",
"LHARC",
"ARC",
"ARJ"
]
},
"Document Types": {
"monitor": [
"PostScript Document (PS)",
"OpenOffice Document",
"OASIS Open Document Format",
"Microsoft Office",
"XML Document",
"Portable Document Format (PDF)",
"FrameMaker Document (FM)",
"Rich Text Format (RTF)"
]
},
"Executable Code": {
"monitor": [
"UNIX Executable",
"Windows Executable",
"Java Applet"
]
},
"Inspectable Archives": {
"allow": [
"BZIP2",
"CPIO",
"7zip",
"RAR",
"LHA",
"ZIP Archive",
"GZIP",
"Compress Archive (Z)",
"TAR",
"Microsoft CAB"
]
},
"Installers": {
"monitor": [
"UNIX/LINUX Packages"
]
},
"Media": {
"monitor": [
"Photographic Images",
"Video",
"Audio"
]
},
"Miscellaneous": {
"monitor": [
"Calendar Data"
]
},
"P2P Metafiles": {
"monitor": [
"BitTorrent Links (.torrent)"
]
},
"Web Page Content": {
"monitor": [
"Images",
"Flash"
]
}
},
"state": "custom"
},
"policy_description": "Default settings",
"policy_expiry": "",
"policy_name": "global_policy",
"policy_status": "enable",
"protocols_user_agents": {
"allow_connect_ports": [
"8080",
"21",
"443",
"563",
"4431",
"6443",
"8443",
"20",
"6080"
],
"block_custom_user_agents": [],
"block_protocols": [],
"state": "custom"
},
"url_filtering": {
"custom_cats": {
"exclude": [
"SocialURLCategorynader1"
]
},
"exception_referred_embedded_content": {
"state": "disable"
},
"update_cats_action": "least restrictive",
"yt_cats": {
"monitor": [
"Film & Animation",
"Autos & Vehicles",
"Music",
"Pets & Animals",
"Sports",
"Travel & Events",
"Gaming",
"People & Blogs",
"Comedy",
"Entertainment",
"News & Politics",
"Howto & Style",
"Education",
"Science & Technology",
"Nonprofits & Activism"
]
}
}
}
]
}

Human Readable Output#

Results#

access_policies

wsa-get-domain-map#

Retrieving the Domain Map Details

Base Command#

wsa-get-domain-map

Input#

Argument NameDescriptionRequired

Context Output#

PathTypeDescription
wsa.DomainMapsstringRetrieving the Domain Map Details

Command Example#

!wsa-get-domain-map

Context Example#

{
"res_code": 400,
"res_message": "The feature key for https proxy has expired or is unavailable."
}

Human Readable Output#

Results#

res_coderes_message
400The feature key for https proxy has expired or is unavailable.

wsa-get-url-categories#

Retrieving URL Categories

Base Command#

wsa-get-url-categories

Input#

Argument NameDescriptionRequired

Context Output#

PathTypeDescription
wsa.UrlCategoriesstringRetrieving URL Categories

Command Example#

!wsa-get-url-categories

Context Example#

{
"custom": [
"SocialURLCategorynader1"
],
"predefined": null
}

Human Readable Output#

Results#

custompredefined
SocialURLCategorynader1

wsa-get-identification-profiles#

Modifying identification profiles

Base Command#

wsa-get-identification-profiles

Input#

Argument NameDescriptionRequired

Context Output#

PathTypeDescription
wsa.ProfilesstringRetrieving Identification Profiles

Command Example#

!wsa-get-identification-profiles

Context Example#

{
"identification_profiles": [
{
"description": "",
"identification_method": {},
"members": {
"protocols": [
"http",
"https",
"ftp"
]
},
"order": 1,
"profile_name": "profile2",
"status": "enable"
},
{
"description": "",
"identification_method": {},
"members": {
"protocols": [
"http",
"https",
"ftp"
]
},
"order": 2,
"profile_name": "profile1",
"status": "enable"
},
{
"description": "Default settings",
"identification_method": {},
"profile_name": "global_identification_profile",
"status": "enable"
}
]
}

Human Readable Output#

Results#

identification_profiles

wsa-modify-access-policies#

Modifying an Access Policy

Base Command#

wsa-modify-access-policies

Input#

Argument NameDescriptionRequired
policynameName of the policy. Unique identifier of the policy.Required
profile_name(profilename, auth). Use "No Authentication" in case of no authentication required for the specific profile. Empty strings represents "global identification profile". _all represents "All identification profiles". Please all inputs comma separated.Required
auth(profilename,auth). Use "No Authentication" in case of no authentication required for the specific profile. Empty strings represents "global identification profile". _all represents "All identification profiles". Please all inputs comma separated.Required
policy_orderIndex of this specific profile in the collection. Its starts from 1. Order of policy in collection of policies. Not applicable for global_policy.Required
policy_statusWhether profile is enabled or disabled. Possible values: enable, disable.Required

Context Output#

PathTypeDescription
wsa.responsestringwhether the result indicates if request is success or failure

Command Example#

!wsa-modify-access-policies policyname=policy1 profile_name=profile1 policy_order=2 policy_status=disable auth="No Authentication"

Context Example#

{
"wsa": {
"response": "The modifying request has been processed successfully and all the given access policies are updated with the given payload"
}
}

Human Readable Output#

Results#

wsa

wsa-delete-access-policies#

Deleting an Access Policy

Base Command#

wsa-delete-access-policies

Input#

Argument NameDescriptionRequired
policy_nameName of the policy. Unique identifier of the policy.Required

Context Output#

PathTypeDescription
wsa.responseunknownwhether the result indicates if request is success or failure

Command Example#

!wsa-delete-access-policies policy_name=policy2

Context Example#

{
"wsa": {
"response": "The deleting request has been processed successfully and all the given access policies are updated with the given payload"
}
}

Human Readable Output#

Results#

wsa
Edit this page
Report an Issue