# bro netcontrol acld for use with Cisco ASA acl's

**URL:** <https://community.zeek.org/t/bro-netcontrol-acld-for-use-with-cisco-asa-acls/4291>\
**Category:** Zeek\
**Created:** [August 7, 2016, 10:01pm UTC](https://community.zeek.org/t/bro-netcontrol-acld-for-use-with-cisco-asa-acls/4291 "2016-08-07T22:01:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![John\_Babio2](https://avatars.discourse-cdn.com/v4/letter/j/e9c0ed/32.png) [@John\_Babio2](https://community.zeek.org/u/John_Babio2)\
**Post date:** [August 7, 2016, 10:01pm UTC](https://community.zeek.org/t/bro-netcontrol-acld-for-use-with-cisco-asa-acls/4291/1 "2016-08-07T22:01:10Z")

</div>

Has anyone been able to accomplish connecting netcontrol into an ASA firewall? For use with shun?

---

<div class="post-metadata">

**Author:** ![johanna](https://avatars.discourse-cdn.com/v4/letter/j/50afbb/32.png) [@johanna](https://community.zeek.org/u/johanna)\
**Post date:** [August 8, 2016, 5:11pm UTC](https://community.zeek.org/t/bro-netcontrol-acld-for-use-with-cisco-asa-acls/4291/2 "2016-08-08T17:11:29Z")

</div>

Hi John,

since the NetControl framework is still rather new, I assume that no one  
has done that and that you would have to write your own connectors.

Just to give you a few pointers - if you use the netcontrol broker plugin,  
which uses broker to push out the netcontrol rules, you can use the python  
API at [https://github.com/bro/bro-netcontrol/blob/master/netcontrol/api.py](https://github.com/bro/bro-netcontrol/blob/master/netcontrol/api.py)  
to get access to the commands without having to do all the python-side  
parsing yourself.  
[https://github.com/bro/bro-netcontrol/blob/master/command-line/command-line.py](https://github.com/bro/bro-netcontrol/blob/master/command-line/command-line.py)  
is an application that takes that route and uses the broker plugin on the  
NetControl side and the python API.

If you need more complex rules that you need to change on the Bro side,  
before you push them out via broker or another mechanism, you will  
probably need to write your own NetControl plugin; instructions for that  
are available at  
[https://www.bro.org/sphinx-git/frameworks/netcontrol.html#writing-plugins](https://www.bro.org/sphinx-git/frameworks/netcontrol.html#writing-plugins)

I hope this helps a bit,  
Johanna

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:43pm UTC](https://community.zeek.org/t/bro-netcontrol-acld-for-use-with-cisco-asa-acls/4291/3 "2022-05-06T15:43:55Z")

</div>

Closed on May 6, 2022, 3:43pm UTC