Help Center User GuideGetting StartedFAQRelease Notes
User Guide
Getting Started
Release Notes

Out-of-Band Changes Overview

Out-of-band configuration changes are the changes you make to a device configuration through any method other than deploying the configuration change from Security Director.

Out-of-band changes include configuration changes made by:

When you make out-of-band changes, Security Director detects the configuration changes on the device. It sets the device configuration state to Out of Sync because the device configuration does not match with the build mode configuration for the device. You cannot deploy configuration on devices that are in the Out of Sync state. To return the device configuration state to In Sync, click Resynchronize with Network. This task resynchronizes the device’s configuration stored in Security Director to match the device configuration.

After the configuration status of the device is In Sync, you can see an icon next to policy for which out of band policy changes have been made in the device. You can automatically synchronize or manually import the out-of-band firewall policy changes from the device. Automatic synchronization is applicable for only device-specific policies and manual synchronization is applicable for both device-specific and group policies.

Note Out-of-band firewall policy changes are applicable for both standard and unified firewall policies.

Out-of-band changes are not supported if more than one policy is assigned to a device or if rules are configured in All Devices Policy Pre/Post policies.

Related Documentation

Ask questions in TechWiki

Check documentation in TechLibrary

Rating by you:      

Additional Comments

800 characters remaining

May we contact you if necessary?


Need product assistance? Contact Juniper Support