Add files via upload

fmc-obj-del.py

@@ -0,0 +1,160 @@
+#!/usr/bin/python
+# =====================================================================================================================
+#
+# Overview: This script delete objects out of Cisco FMC utilizing the built-in API
+#
+# Usage:    Run python <script_name> 
+#
+# Use script at you own risk, and no warranties are inferred or granted. 
+# =====================================================================================================================
+import requests
+import json
+import requests
+import logging
+from requests.packages.urllib3.exceptions import InsecureRequestWarning
+requests.packages.urllib3.disable_warnings(InsecureRequestWarning)
+logging.basicConfig(filename='response.log',level=logging.DEBUG)
+requests_log = logging.getLogger("requests.packages.urllib3")
+requests_log.setLevel(logging.INFO)
+requests_log.propagate = True
+
+print "======================================"
+print "=      Cisco Firepower API           ="
+print "=      Object Delete script          ="
+print "=  Will only delete unused objects   ="
+print "=     Use at your own Risk!          ="
+print "======================================"
+
+# Interactive Input of FMC and login
+user1= raw_input("Enter your FMC api username: ")
+pass1= raw_input("Enter your FMC password: ")
+ipaddr= raw_input("Enter the IP address of Firepower Management Center: ")
+print "Enter the object type to delete?"
+print "1. networks"
+print "2. ports"
+print "3. hosts"
+print "4. network groups"
+print "5. port groups"
+print "6. address ranges"
+
+while True:
+        try:
+            question = int(raw_input('Options\(1,2,3,4,5),?'))
+
+        except ValueError:
+            print("Sorry, that is an invaild option.")
+            #better try again... Return to the start of the loop
+            continue
+
+        if question == 1:
+            fmcobj='networks'
+            break
+
+        elif question == 2:
+            fmcobj='ports'
+            break
+
+        elif question == 3:
+            fmcobj='hosts'
+            break
+
+        elif question == 4:
+            fmcobj='networkgroups'
+            break   
+
+        elif question == 5:
+            fmcobj='portobjectgroups'
+            break   
+
+        elif question == 6:
+            fmcobj='ranges'
+            break   
+
+        else:
+            print('That\'s not an option!')
+            continue
+
+url = "https://%s/api/fmc_platform/v1/auth/generatetoken" % ipaddr
+
+headers = {
+    'cache-control': "no-cache",
+    'postman-token': "ff30c506-4739-9d4d-2e53-0dc7efc2036a"
+    }
+
+response = requests.request("POST", url, headers=headers, auth=(user1,pass1), verify=False)
+
+# Authenicates token used in addiotnal HTTPS CRUD request
+auth = response.headers['X-auth-access-token']
+
+url = "https://%s/api/fmc_config/v1/domain/e276abec-e0f2-11e3-8169-6d9ed49b625f/object/%s" % (ipaddr, fmcobj)
+
+querystring = {"limit":"1000"}
+
+headers = {
+    'x-auth-access-token': auth,
+    'cache-control': "no-cache",
+    'postman-token': "ff30c506-4739-9d4d-2e53-0dc7efc2036a"
+    }
+
+# get all objects type based in user reponse from FMC 
+response = requests.request("GET", url, headers=headers, params=querystring, verify=False)
+
+# format response in JSON format 
+data = response.json()
+
+p=data['paging']['pages']
+
+offset= 1000
+
+# FMC get all objects for user specified type
+for pages in [p]:
+    querystring = {"offset":"%d" % offset,"limit":"1000"}
+    response = requests.request("GET", url, headers=headers, params=querystring, verify=False)
+    offset += 1000
+    raw=response.json()
+    data['items'].append(raw['items'])
+
+def delobj(obj):
+
+    global response
+    global headers
+    global ipaddr
+    global user1
+    global pass1
+    netdel = response 
+
+    if 'items' in obj:
+
+        for id in obj['items']:
+
+            #Sends a delete http for all network objects, but only deletes unused objects
+
+            if netdel.status_code != 401:
+                #print id['links']['self'] 
+                url = id['links']['self']
+                netdel = requests.request("DELETE", url, headers=headers, verify=False)
+                print (id['name'], netdel)
+                logging.info("%s Response: Status code: %d" % (id['name'], netdel.status_code))
+
+            else:
+                urlauth = "https://%s/api/fmc_platform/v1/auth/generatetoken" % ipaddr
+                headers = {
+                'cache-control': "no-cache",
+                'postman-token': "ff30c506-4739-9d4d-2e53-0dc7efc2036a"
+                }
+                response = requests.request("POST", urlauth, headers=headers, auth=(user1,pass1), verify=False)
+                # Authenicates token used in addiotnal HTTPS CRUD request
+                auth = response.headers['X-auth-access-token']
+                headers = {
+                'x-auth-access-token': auth,
+                'cache-control': "no-cache",
+                'postman-token': "ff30c506-4739-9d4d-2e53-0dc7efc2036a"
+                }  
+
+                netdel.status_code = 200
+
+
+
+
+delobj(data)
+