Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →automateyournetwork/fmc-firewall-ops
Cisco Secure Firewall FMC — access policy search, rule inspection, FTD device targeting, multi-FMC profile management.
Passed 10 of 16 test cases with the skill, and 4 of 16 without it.
and 6 more in the full report
9 fixed5 passed either way8 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.
Which environment variable specifies the file path to the directory containing multi-instance profile configurations?
| Checked | Without skill | With skill |
|---|---|---|
| Specifies FMC_PROFILES_DIR as the environment variable configuring the profile directory path. | Missed | Passed |
The instructions your model reads when the skill loads.
http://<host>:8000/mcp) — requires HTTPS reverse proxy for productiongit clone + pip install -r requirements.txt + python -m sfw_mcp_fmc.server (or Docker)FMC_BASE_URL, FMC_USERNAME, FMC_PASSWORD| Tool | What It Does |
|---|---|
list_fmc_profiles | Discover all configured FMC instances (single or multi-FMC mode). Returns profile IDs, display names, and aliases. Use this first to select which FMC to query. |
find_rules_by_ip_or_fqdn | Search rules within a specific access policy by IP address or FQDN. Matches source/destination network objects against the given indicator. |
find_rules_for_target | Resolve FTD devices or HA clusters to their assigned access policies, then search those policies. Use when you know the firewall device name but not the policy name. |
search_access_rules | FMC-wide rule search with multiple filter types: network indicators (IP, FQDN), identity indicators (SGT tags, realm users/groups), and policy name filters. The most powerful search tool. |
| Concept | What It Means |
|---|---|
| FMC | Firepower Management Center — centralized management for Cisco Secure Firewalls (FTD) |
| FTD | Firepower Threat Defense — the firewall appliance/virtual managed by FMC |
| Access Policy | Collection of access rules (ACLs) applied to FTD devices — permit/deny by source/dest/port/app |
| Access Rule | Individual rule within a policy — source zones, dest zones, source/dest networks, ports, action (allow/block/monitor) |
| SGT | Security Group Tag — TrustSec identity-based tag for micro-segmentation |
| HA Cluster | High Availability pair of FTD devices sharing the same policy |
| Profile | FMC connection configuration (URL, credentials) — supports multi-FMC environments |
When a user asks "what firewall rules exist for 10.1.1.0/24?":
list_fmc_profiles — identify which FMCs manage this networksearch_access_rules with network indicator 10.1.1.0/24test cases passed, vs 4 / 16 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.