# Cisco Secure Firewall Audit

> Converts Cisco Secure Firewall health-check source files into structured audit reports. Use when the user provides Cisco Secure Firewall health check content in DOCX, Markdown, TXT, LOG, CFG, or CONF format and wants an HTML, Markdown, or JSON audit report. Evaluates findings using the project references for audit categories, extraction patterns, reference values, and report template guidance. Produces severity-based findings, positive findings, compliance mapping, methodology, and disclaimer sections. Performs a comprehensive Cisco Secure Firewall configuration and health check audit for FMC and FTD inputs. Use when the user uploads, shares, or references a Cisco Secure Firewall health check report, Word document, raw CLI output, show-tech, policy export, FMC notes, or log bundle and asks for a review, audit, compliance mapping, best-practice analysis, or HTML report. Evaluates against Cisco Secure Firewall best practices, covering software lifecycle, device registration, access control policy hygiene, intru

- Skill: `ranilf2005/cisco-secure-firewall-audit` (Agent Skill, multi-file: 47 files)
- Install (CLI): `npx skillmds@latest add ranilf2005/cisco-secure-firewall-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/ranilf2005/cisco-secure-firewall-audit/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Web & Frontend
- Author: ranilf2005 (https://skillmd.com/u/ranilf2005)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/ranilf2005/cisco-secure-firewall-audit

---


# Cisco Secure Firewall Audit Skill

> This skill extends the Cisco health-check base framework and mirrors the same workflow style used by the uploaded wireless audit example.

## Tier 0
Use this skill when the source material is a Cisco Secure Firewall health check report, FMC export, FTD notes, or copied findings and the user wants structured audit output, compliance mapping, or branded HTML.

## Tier 1
1. Parse the input file and normalize the text
2. Extract metadata and evidence using `references/grep-patterns.md`
3. Evaluate all categories in `references/audit-checklist.md`
4. Cross-check severity using `references/reference-values.md`
5. Generate branded HTML and Markdown using `references/report-templates.md`

## Tier 2
Advanced scope:
- Combine Word report content with raw FMC/FTD CLI evidence
- Preserve customer-authored findings where they already exist
- Mark ambiguous items as `Manual review` rather than inventing evidence
- Exclude historical or already-remediated exceptions from negative findings

## Common failure modes
- Source report has recommendations but no evidence lines
- Device versions are missing, so lifecycle severity must be capped
- Rules engine misses findings because the customer's wording differs from expected keywords
- Placeholder or template text is misread as active evidence

## Purpose

This skill converts Cisco Secure Firewall health-check input files into branded HTML,
Markdown, and JSON reports.

## Input types

- .docx
- .md
- .txt
- .log
- .cfg
- .conf

## Workflow

1. Read the source file from `input/reports/`.
2. Extract plain text and structural content.
3. Use `references/grep-patterns.md` to locate evidence.
4. Use `references/audit-checklist.md` to evaluate findings.
5. Use `references/reference-values.md` for target values and severity.
6. Use `references/report-templates.md` to build the output structure.
7. Generate:
   - HTML report
   - Markdown report
   - JSON findings file

## Report rules

- Preserve exact evidence excerpts where possible.
- Do not include credentials or sensitive values.
- Keep output professional and customer-friendly.
- Show positive findings separately.
- Include methodology and disclaimer in every report.
- If evidence is incomplete, mark the item as unclear rather than guessing.

## Output locations

- `output/html/`
- `output/markdown/`
- `output/json/`
- `output/extracted/`