Cisco Secure Firewall

Cisco Secure Firewall Devices API

The Devices API from Cisco Secure Firewall — 108 operation(s) for devices.

GitHub OpenAPI

Documentation

📖
Documentation
https://developer.cisco.com/docs/cisco-security-cloud-control-firewall-manager/
📖
APIReference
https://developer.cisco.com/docs/cisco-security-cloud-control-firewall-manager/cdfmc-api-overview/
📖
GettingStarted
https://developer.cisco.com/docs/cisco-security-cloud-control-firewall-manager/getting-started/
📖
Authentication
https://developer.cisco.com/docs/cisco-security-cloud-control-firewall-manager/authentication/
📖
APIReference
https://developer.cisco.com/docs/cisco-security-cloud-control-firewall-manager/

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/cisco-secure-firewall/refs/heads/main/openapi/cisco-secure-firewall-devices-api-openapi.yml

Other Resources

🔗
OpenAPI Source
https://github.com/CiscoDevNet/scc-public-api-docs/blob/main/cdo/cdfmc-openapi.yaml
🔗
Postman
https://github.com/CiscoDevNet/scc-public-api-docs/blob/main/cdo/cdfmc-postman-collection.json
🔗
OpenAPI Source
https://github.com/CiscoDevNet/scc-public-api-docs/blob/main/cdo/openapi.yaml
🔗
Postman
https://github.com/CiscoDevNet/scc-public-api-docs/blob/main/cdo/postman-collection.json

OpenAPI Specification

cisco-secure-firewall-devices-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Cisco Secure Firewall Devices API
  version: 1.13.0
  contact:
    name: Cisco Firepower TAC
    email: ngfw-support@cisco.com
  description: 'Operations tagged Devices across 2 of this provider''s published API definitions: cdfmc-openapi.yaml, cisco-secure-firewall-cdfmc-openapi.yml.
    Each path carries the servers of the definition it was published in.'
  x-provenance:
    method: harvested
    first_party: true
    harvested: '2026-08-19'
    source: https://raw.githubusercontent.com/CiscoDevNet/scc-public-api-docs/main/cdo/cdfmc-openapi.yaml
    source_repo: https://github.com/CiscoDevNet/scc-public-api-docs
    note: Verbatim first-party OpenAPI published by Cisco in the CiscoDevNet scc-public-api-docs repository, the source of
      record for developer.cisco.com/docs/cisco-security-cloud-control-firewall-manager/. Not authored or modified by API
      Evangelist.
    derived_view: Per-tag view of cisco-secure-firewall-cdfmc-openapi.yml, the provider's source document. Operations and
      schemas are the provider's, unmodified; only the partition is ours.
    derived_from: cisco-secure-firewall-cdfmc-openapi.yml
    operation_coverage: 223/223
  x-evidence:
    fetched: '2026-08-19'
    url: https://raw.githubusercontent.com/CiscoDevNet/scc-public-api-docs/main/cdo/cdfmc-openapi.yaml
    http_status: 200
servers:
- url: https://api.us.security.cisco.com/firewall
  description: US
- url: https://api.eu.security.cisco.com/firewall
  description: EU
- url: https://api.apj.security.cisco.com/firewall
  description: APJ
- url: https://api.au.security.cisco.com/firewall
  description: AUS
- url: https://api.in.security.cisco.com/firewall
  description: IN
- url: https://api.int.security.cisco.com/firewall
  description: Staging
- url: https://scale.manage.security.cisco.com/api/rest
  description: Scale
- url: https://ci.manage.security.cisco.com/api/rest
  description: CI
- url: https://manage.stg.secure.cisco/api/rest
  description: Stgf9
tags:
- name: Devices
paths:
  /v1/cdfmc/api/fmc_config/v1/domain/{domainUUID}/devices/certificates:
    get:
      deprecated: false
      description: '**Get a list of all the certificates enrolled in devices.**'
      operationId: getDeviceCertificateModel
      parameters:
      - description: Filter by <code>deviceId</code> or filter by <code>expiryInDays</code>. When filtering by <code>deviceId:{id}</code>,
          lists all certificates enrolled on the given device. If filtering by <code>expiryInDays:{number of days}</code>,
          lists only the certificates which will expire within the given number of days.
        in: query
        name: filter
        required: false
        schema:
          type: string
      - $ref: '#/components/parameters/domainUUID'
        name: domainUUID
      - $ref: '#/components/parameters/offset'
        name: offset
      - $ref: '#/components/parameters/limit'
        name: limit
      - $ref: '#/components/parameters/expanded'
        name: expanded
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DeviceCertificateModelListContainer'
                type: object
          description: OK
        default:
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
                type: object
          description: Error
      tags:
      - Devices
    servers:
    - url: https://api.us.security.cisco.com/firewall
      description: US
    - url: https://api.eu.security.cisco.com/firewall
      description: EU
    - url: https://api.apj.security.cisco.com/firewall
      description: APJ
    - url: https://api.au.security.cisco.com/firewall
      description: AUS
    - url: https://api.in.security.cisco.com/firewall
      description: IN
    - url: https://api.int.security.cisco.com/firewall
      description: Staging
    - url: https://scale.manage.security.cisco.com/api/rest
      description: Scale
    - url: https://ci.manage.security.cisco.com/api/rest
      description: CI
    - url: https://manage.stg.secure.cisco/api/rest
      description: Stgf9
  /v1/cdfmc/api/fmc_config/v1/domain/{domainUUID}/devices/certificatesexportdata/{objectId}:
    get:
      deprecated: false
      description: '**Get the exported certificate for download.**'
      operationId: getDeviceCertificateExportData
      parameters:
      - description: Unique identifier for the task.
        in: path
        name: objectId
        required: true
        schema:
          type: string
      - $ref: '#/components/parameters/domainUUID'
        name: domainUUID
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DeviceCertificateExportData'
                type: object
          description: OK
        default:
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
                type: object
          description: Error
      tags:
      - Devices
    servers:
    - url: https://api.us.security.cisco.com/firewall
      description: US
    - url: https://api.eu.security.cisco.com/firewall
      description: EU
    - url: https://api.apj.security.cisco.com/firewall
      description: APJ
    - url: https://api.au.security.cisco.com/firewall
      description: AUS
    - url: https://api.in.security.cisco.com/firewall
      description: IN
    - url: https://api.int.security.cisco.com/firewall
      description: Staging
    - url: https://scale.manage.security.cisco.com/api/rest
      description: Scale
    - url: https://ci.manage.security.cisco.com/api/rest
      description: CI
    - url: https://manage.stg.secure.cisco/api/rest
      description: Stgf9
  /v1/cdfmc/api/fmc_config/v1/domain/{domainUUID}/devices/copyconfigrequests:
    post:
      deprecated: false
      description: '**Copy device configuration. _Check the response section for applicable examples (if any)._**'
      operationId: createDeviceCopyConfigRequest
      parameters:
      - $ref: '#/components/parameters/domainUUID'
        name: domainUUID
      requestBody:
        content:
          application/json:
            examples:
              'Example 1 : POST /fmc_config/v1/domain/DomainUUID/devices/copyconfigrequests ( Device copy config request )':
                value:
                  copySharedPolicies: false
                  sourceDevice:
                    id: device_uuid
                    type: Device
                  targetDeviceList:
                  - id: device_uuid
                    type: Device
              ? 'Example 2 : POST /fmc_config/v1/domain/DomainUUID/devices/copyconfigrequests ( Device copy config request
                for FTD HA to stanalone devices )'
              : value:
                  copySharedPolicies: false
                  sourceDevice:
                    id: container_uuid
                    type: DeviceHAPair
                  targetDeviceList:
                  - id: device_uuid
                    type: Device
            schema:
              $ref: '#/components/schemas/DeviceCopyConfigRequest'
              type: object
        description: Input for Copy configuration request.
        required: true
      responses:
        '202':
          content:
            application/json:
              examples:
                'Example 1 : POST /fmc_config/v1/domain/DomainUUID/devices/copyconfigrequests ( Device copy config request )':
                  value:
                    copySharedPolicies: false
                    metadata:
                      task:
                        id: task_id
                        links:
                          self: https://fmc_host/api/fmc_config/v1/domain/domainUuid/job/taskstatuses/task_id
                        type: TaskStatus
                    sourceDevice:
                      id: device_uuid
                      type: Device
                    targetDeviceList:
                    - id: device_uuid
                      type: Device
                    type: CopyConfigRequest
                ? 'Example 2 : POST /fmc_config/v1/domain/DomainUUID/devices/copyconfigrequests ( Device copy config request
                  for FTD HA to stanalone devices )'
                : value:
                    copySharedPolicies: false
                    metadata:
                      task:
                        id: task_id
                        links:
                          self: https://fmc_host/api/fmc_config/v1/domain/domainUuid/job/taskstatuses/task_id
                        type: TaskStatus
                    sourceDevice:
                      id: container_uuid
                      type: DeviceHAPair
                    targetDeviceList:
                    - id: device_uuid
                      type: Device
                    type: CopyConfigRequest
              schema:
                $ref: '#/components/schemas/DeviceCopyConfigRequest'
                type: object
          description: Accepted
        default:
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
                type: object
          description: Error
      tags:
      - Devices
    servers:
    - url: https://api.us.security.cisco.com/firewall
      description: US
    - url: https://api.eu.security.cisco.com/firewall
      description: EU
    - url: https://api.apj.security.cisco.com/firewall
      description: APJ
    - url: https://api.au.security.cisco.com/firewall
      description: AUS
    - url: https://api.in.security.cisco.com/firewall
      description: IN
    - url: https://api.int.security.cisco.com/firewall
      description: Staging
    - url: https://scale.manage.security.cisco.com/api/rest
      description: Scale
    - url: https://ci.manage.security.cisco.com/api/rest
      description: CI
    - url: https://manage.stg.secure.cisco/api/rest
      description: Stgf9
  /v1/cdfmc/api/fmc_config/v1/domain/{domainUUID}/devices/devicerecords:
    get:
      deprecated: false
      description: '**Get the list of all device records.**'
      operationId: getAllDevice
      parameters:
      - description: 'Filter to retrieve all device records based upon filter parameters specified. <br/><br/>Filter criteria
          should be <code>name:{name};isUZTNAEnabled:{true|false};hostName:{hostName};serialNumber:{ABCXXXXX};containerType:{value};version:{x.x.x};clusterBootstrapSupported:{true|false};analyticsOnly:{true|false};includeOtherAssociatedPolicies:{true|false};modelType:{NGFW|Chassis};isMCDManaged:{true|false}</code><br/><br/><code>containerType</code>
          -- Allowed values are <code>{DeviceCluster|DeviceHAPair|DeviceStack}</code><br/><br/><code>clusterBootstrapSupported</code>
          -- Allowed values are <code>{true|false}</code><br/><br/><code>analyticsOnly</code> -- Allowed values are <code>{true|false}</code><br/><br/><code>modelType</code>
          -- Allowed values are <code>{NGFW|Chassis}</code>. <code>NGFW</code> fetches all NGFW devices. <code>Chassis</code>
          fetches all FXOS chassis (also known as MIO). If you don''t specify the type, then all devices and chassis are fetched.</br></br><code>includeOtherAssociatedPolicies</code>
          -- Allowed values are <code>{true|false}</code>. When set to <code>true</code>, will give following policies if
          assigned to device: [<code>RAVpn</code>,<code>FTDS2SVpn</code>,<code>PlatformSettingsPolicy</code>,<code>QosPolicy</code>,<code>NatPolicy</code>,<code>FlexConfigPolicy</code>]<br/><br/><code>isMCDManaged</code>
          -- Allowed values are <code>{true|false}</code>'
        in: query
        name: filter
        required: false
        schema:
          type: string
      - $ref: '#/components/parameters/domainUUID'
        name: domainUUID
      - $ref: '#/components/parameters/offset'
        name: offset
      - $ref: '#/components/parameters/limit'
        name: limit
      - $ref: '#/components/parameters/expanded'
        name: expanded
      responses:
        '200':
          content:
            application/json:
              examples:
                ? 'Example 1 : GET /fmc_config/v1/domain/DomainUUID/object/devices/devicerecords ( Get all paginated network
                  objects without offset and limit )'
                : {}
              schema:
                $ref: '#/components/schemas/DeviceListContainer'
                type: object
          description: OK
        default:
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
                type: object
          description: Error
      tags:
      - Devices
    servers:
    - url: https://api.us.security.cisco.com/firewall
      description: US
    - url: https://api.eu.security.cisco.com/firewall
      description: EU
    - url: https://api.apj.security.cisco.com/firewall
      description: APJ
    - url: https://api.au.security.cisco.com/firewall
      description: AUS
    - url: https://api.in.security.cisco.com/firewall
      description: IN
    - url: https://api.int.security.cisco.com/firewall
      description: Staging
    - url: https://scale.manage.security.cisco.com/api/rest
      description: Scale
    - url: https://ci.manage.security.cisco.com/api/rest
      description: CI
    - url: https://manage.stg.secure.cisco/api/rest
      description: Stgf9
  /v1/cdfmc/api/fmc_config/v1/domain/{domainUUID}/devices/devicerecords/{containerUUID}/bridgegroupinterfaces:
    get:
      deprecated: false
      description: '**Get the list of all bridge group interfaces associated with the specified NGFW device ID. <div class="alert
        alert-warning">More details on netmod events(out of sync interfaces):<b> GET /interfaceevents</b></div>.**'
      operationId: getAllFTDBridgeGroupInterface
      parameters:
      - description: UUID of the ticket for tracking the configuration changes.
        in: header
        name: ticket-id
        required: false
        schema:
          type: string
      - description: The container id under which this specific resource is contained.
        in: path
        name: containerUUID
        required: true
        schema:
          type: string
      - $ref: '#/components/parameters/domainUUID'
        name: domainUUID
      - $ref: '#/components/parameters/offset'
        name: offset
      - $ref: '#/components/parameters/limit'
        name: limit
      - $ref: '#/components/parameters/expanded'
        name: expanded
      responses:
        '200':
          content:
            application/json:
              examples:
                ? 'Example 1 : GET /fmc_config/v1/domain/domainUUID/devices/devicerecords/containerUUID/bridgegroupinterfaces
                  ( Success: Test GET ALL success )'
                : value:
                    items:
                    - id: '1'
                      links:
                        self: /fmc_config/v1/domain/domainUUID/devices/devicerecords/containerUUID/bridgegroupinterfaces/bridgegroupinterfaceUUID1
                      name: s1p3.1
                      type: BridgeGroupInterface
                    - id: bridgegroupinterfaceUUID2
                      links:
                        self: /fmc_config/v1/domain/domainUUID/devices/devicerecords/containerUUID/bridgegroupinterfaces/bridgegroupinterfaceUUID2
                      name: s1p4.2
                      type: BridgeGroupInterface
                    - id: bridgegroupinterfaceUUID3
                      links:
                        self: /fmc_config/v1/domain/domainUUID/devices/devicerecords/containerUUID/bridgegroupinterfaces/bridgegroupinterfaceUUID3
                      name: hybrid_1
                      type: BridgeGroupInterface
                    links:
                      self: /fmc_config/v1/domain/domainUUID/devices/devicerecords/containerUUID/bridgegroupinterfaces?offset=0&limit=3
                    paging:
                      count: 3
                      limit: 3
                      offset: 0
                      pages: 1
                ? 'Example 2 : GET /fmc_config/v1/domain/domainUUID/devices/devicerecords/containerUUID/bridgegroupinterfaces/bridgegroupinterfaceUUID?expanded=true
                  ( Success: Test GET ALL success with expanded=true )'
                : value:
                    items:
                    - MTU: 1500
                      applicationMonitoring:
                        enable: true
                      bridgeGroupId: 1
                      enabled: true
                      id: bridgegroupinterfaceUUID1
                      ifname: BVI1
                      ipAddress: 1.2.3.4
                      ipv4:
                        static:
                          address: 1.2.3.4
                          netmask: '25'
                      links:
                        self: /fmc_config/v1/domain/default/devices/devicerecords/containerUUID/bridgegroupinterfaces/bridgegroupinterfaceUUID1
                      managementOnly: false
                      metadata:
                        domain:
                          id: domainUUID
                          name: Global
                        timestamp: 1462814174120.0
                      mode: NONE
                      name: BVI1
                      pathMonitoring:
                        enable: true
                        monitoredIp: string
                        type: PEER_IPV4 | PEER_IPV6 | AUTO | AUTO4 | AUTO6
                      selectedInterfaces:
                      - id: interface UUID
                        name: GigabitEthernet0/1
                        type: PhysicalInterface
                      type: BridgeGroupInterface
                    - MTU: 1500
                      applicationMonitoring:
                        enable: true
                      bridgeGroupId: 2
                      enabled: true
                      id: bridgegroupinterfaceUUID2
                      ifname: BVI2
                      ipAddress: 1.2.3.4
                      ipv4:
                        static:
                          address: 1.2.3.4
                          netmask: '25'
                      links:
                        self: /fmc_config/v1/domain/default/devices/devicerecords/containerUUID/bridgegroupinterfaces/bridgegroupinterfaceUUID2
                      managementOnly: false
                      metadata:
                        domain:
                          id: domainUUID
                          name: Global
                        timestamp: 1462814174120.0
                      mode: NONE
                      name: BVI2
                      pathMonitoring:
                        enable: true
                        monitoredIp: string
                        type: PEER_IPV4 | PEER_IPV6 | AUTO | AUTO4 | AUTO6
                      selectedInterfaces:
                      - id: interface UUID
                        name: GigabitEthernet0/2
                        type: PhysicalInterface
                      type: BridgeGroupInterface
                    links:
                      self: /fmc_config/v1/domain/domainUUID/devices/devicerecords/containerUUID/bridgegroupinterfaces/bridgegroupinterfaceUUID?offset=0&limit=2
              schema:
                $ref: '#/components/schemas/FTDBridgeGroupInterfaceListContainer'
                type: object
          description: OK
        default:
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
                type: object
          description: Error
      tags:
      - Devices
    post:
      deprecated: false
      description: '**Create a bridge group interface. _Check the response section for applicable examples (if any)._**'
      operationId: createFTDBridgeGroupInterface
      parameters:
      - description: UUID of the ticket for tracking the configuration changes.
        in: header
        name: ticket-id
        required: false
        schema:
          type: string
      - description: The container id under which this specific resource is contained.
        in: path
        name: containerUUID
        required: true
        schema:
          type: string
      - $ref: '#/components/parameters/domainUUID'
        name: domainUUID
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/FTDBridgeGroupInterface'
              type: object
        description: The input bridge group interface model.
        required: true
      responses:
        '201':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/FTDBridgeGroupInterface'
                type: object
          description: Created
        default:
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
                type: object
          description: Error
      tags:
      - Devices
    servers:
    - url: https://api.us.security.cisco.com/firewall
      description: US
    - url: https://api.eu.security.cisco.com/firewall
      description: EU
    - url: https://api.apj.security.cisco.com/firewall
      description: APJ
    - url: https://api.au.security.cisco.com/firewall
      description: AUS
    - url: https://api.in.security.cisco.com/firewall
      description: IN
    - url: https://api.int.security.cisco.com/firewall
      description: Staging
    - url: https://scale.manage.security.cisco.com/api/rest
      description: Scale
    - url: https://ci.manage.security.cisco.com/api/rest
      description: CI
    - url: https://manage.stg.secure.cisco/api/rest
      description: Stgf9
  /v1/cdfmc/api/fmc_config/v1/domain/{domainUUID}/devices/devicerecords/{containerUUID}/bridgegroupinterfaces/{objectId}:
    delete:
      deprecated: false
      description: '**Delete the bridge group interface associated with the specified NGFW device ID and interface ID. _Check
        the response section for applicable examples (if any)._**'
      operationId: deleteFTDBridgeGroupInterface
      parameters:
      - description: Unique identifier of a bridge group interface.
        in: path
        name: objectId
        required: true
        schema:
          type: string
      - description: UUID of the ticket for tracking the configuration changes.
        in: header
        name: ticket-id
        required: false
        schema:
          type: string
      - description: The container id under which this specific resource is contained.
        in: path
        name: containerUUID
        required: true
        schema:
          type: string
      - $ref: '#/components/parameters/domainUUID'
        name: domainUUID
      responses:
        '200':
          content:
            application/json:
              examples:
                ? 'Example 1 : DELETE /fmc_config/v1/domain/domainUUID/devices/devicerecords/containerUUID/bridgegroupinterfaces/bridgeGroupIntfUUID
                  ( Success: Test DELETE method for bridge group interface )'
                : value:
                    MTU: 1500
                    bridgeGroupId: 39
                    enabled: true
                    id: bridgeGroupIntfUUID
                    ifname: bridgeGroupIntf1
                    ipAddress: 1.2.3.5
                    ipv4:
                      static:
                        address: 1.2.3.5
                        netmask: '25'
                    ipv6:
                      addresses:
                      - address: '9090::'
                        prefix: '12'
                      dadAttempts: 1
                      enableIPV6DadLoopbackDetect: true
                      nsInterval: 10000
                      reachableTime: 0
                    links:
                      self: <fmc_host>:<port>/fmc_config/v1/domain/domainUUID/devices/devicerecords/containerUUID/bridgegroupinterfaces/bridgeGroupIntfUUID
                    managementOnly: false
                    metadata:
                      timestamp: 0
                    pathMonitoring:
                      enable: true
                      monitoredIp: string
                      type: PEER_IPV4 | PEER_IPV6 | AUTO | AUTO4 | AUTO6
                    selectedInterfaces:
                    - id: interface UUID
                      name: GigabitEthernet0/0
                      type: PhysicalInterface
                    type: BridgeGroupInterface
              schema:
                $ref: '#/components/schemas/FTDBridgeGroupInterface'
                type: object
          description: OK
        default:
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
                type: object
          description: Error
      tags:
      - Devices
    get:
      deprecated: false
      description: '**Get the bridge group interface associated with the specified NGFW device ID and interface ID.**'
      operationId: getFTDBridgeGroupInterface
      parameters:
      - description: Unique identifier of a bridge group interface.
        in: path
        name: objectId
        required: true
        schema:
          type: string
      - description: UUID of the ticket for tracking the configuration changes.
        in: header
        name: ticket-id
        required: false
        schema:
          type: string
      - description: The container id under which this specific resource is contained.
        in: path
        name: containerUUID
        required: true
        schema:
          type: string
      - $ref: '#/components/parameters/domainUUID'
        name: domainUUID
      responses:
        '200':
          content:
            application/json:
              examples:
                ? 'Example 1 : GET /fmc_config/v1/domain/domainUUID/devices/devicerecords/containerUUID/bridgegroupinterfaces/bridgegroupinterfaceUUID
                  ( Success: Test GET method for brdge group interface )'
                : value:
                    MTU: 1500
                    applicationMonitoring:
                      enable: true
                      monitoredApplications:
                      - id: '2325'
                        name: 050plus
                        type: Application
                      - id: '1553'
                        name: 1&1 Internet
                        type: Application
                    bridgeGroupId: 39
                    enabled: true
                    id: bridgegroupinterfaceUUID
                    ifname: bridgeGroupIntf1
                    ipAddress: 1.2.3.4
                    ipv4:
                      static:
                        address: 1.2.3.4
                        netmask: '25'
                    links:
                      self: /fmc_config/v1/domain/domainUUID/devices/devicerecords/containerUUID/bridgegroupinterfaces/bridgegroupinterfaceUUID
                    managementOnly: false
                    metadata:
                      domain:
                        id: DomainUUID
                        name: Global
                        type: domain
                      lastUser:
                        id: UserUUID
                        name: admin
                        type: user
                      readOnly:
                        state: false
                      timestamp: 1458597038.0
                    pathMonitoring:
                      enable: true
                      monitoredIp: string
                      type: PEER_IPV4 | PEER_IPV6 | AUTO | AUTO4 | AUTO6
                    selectedInterfaces:
                    - id: interface UUID
                      name: GigabitEthernet0/1
                      type: PhysicalInterface
                    type: BridgeGroupInterface
              schema:
                $ref: '#/components/schemas/FTDBridgeGroupInterface'
                type: object
          description: OK
        default:
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
                type: object
          description: Error
      tags:
      - Devices
    put:
      deprecated: false
      description: '**Modify the bridge group interface associated with the specified NGFW device ID and interface ID. _Check
        the response section for applicable examples (if any)._**'
      operationId: updateFTDBridgeGroupInterface
      parameters:
      - description: Unique identifier of a bridge group interface.
        in: path
        name: objectId
        required: true
        schema:
          type: string
      - description: UUID of the ticket for tracking the configuration changes.
        in: header
        name: ticket-id
        required: false
        schema:
          type: string
      - description: The container id under which this specific resource is contained.
        in: path
        name: containerUUID
        required: true
        schema:
          type: string
      - $ref: '#/components/parameters/domainUUID'
        name: domainUUID
      requestBody:
        content:
          application/json:
            examples:
              ? 'Example 1 : PUT /fmc_config/v1/domain/domainUUID/devices/devicerecords/containerUUID/bridgegroupinterfaces/bridgeGroupIntfUUID
                ( Success: Test PUT method for bridge group interface )'
              : value:
                  MTU: 1500
                  bridgeGroupId: 39
                  enabled: true
                  id: bridgeGroupIntfUUID
                  ifname: bridgeGroupIntf1
                  ipAddress: 1.2.3.5
                  ipv4:
                    static:
                      address: 1.2.3.5
                      netmask: '25'
                  ipv6:
                    addresses:
                    - address: '9090::'
                      prefix: '12'
                    dadAttempts: 1
                    enableIPV6DadLoopbackDetect: true
                    nsInterval: 10000
                    reachableTime: 0
                  managementOnly: false
                  pathMonitoring:
                    enable: true
                    monitoredIp: string
                    type: PEER_IPV4 | PEER_IPV6 | AUTO | AUTO4 | AUTO6
                  selectedInterfaces:
                  - id: interface UUID
                    name: GigabitEthernet0/0
                    type: PhysicalInterface
                  type: BridgeGroupInterface
            schema:
              $ref: '#/components/schemas/FTDBridgeGroupInterface'
              type: object
        description: Input representation of bridge group interface.
        required: true
      responses:
        '200':
          content:
            application/json:
              examples:
                ? 'Example 1 : PUT /fmc_config/v1/domain/domainUUID/devices/devicerecords/containerUUID/bridgegroupinterfaces/bridgeGroupIntfUUID
                  ( Success: Test PUT method for bridge group interface )'
                : value:
                    MTU: 1500
                    applicationMonitoring:
                      enable: false
                    bridgeGroupId: 39
                    enabled: true
                    id: bridgeGroupIntfUUID
                    ifname: bridgeGroupIntf1
                    ipAddress: 1.2.3.5
                    ipv4:
                      static:
                        address: 1.2.3.5
                        netmask: '25'
                    ipv6:
                      addresses:
                      - address: '9090::'
                        prefix: '12'
                      dadAttempts: 1
                      enableIPV6DadLoopbackDetect: true
                      nsInterval: 10000
                      reachableTime: 0
                    links:
                      self: <fmc_host>:<port>/fmc_config/v1/domain/domainUUID/devices/devicerecords/containerUUID/bridgegroupinterfaces/bridgeGroupIntfUUID
                    managementOnly: false
                    metadata:
                      timestamp: 0
                    pathMonitoring:
                      enable: true
                      monitoredIp: string
                      type: PEER_IPV4 | PEER_IPV6 | AUTO | AUTO4 | AUTO6
                    selectedInterfaces:
                    - id: interface UUID
                      name: GigabitEthernet0/

# --- truncated at 32 KB (1554 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cisco-secure-firewall/refs/heads/main/openapi/cisco-secure-firewall-devices-api-openapi.yml