Verifying Imported Device Configurations

After importing a Secure Access device, you should verify whether all device information has been imported.

The imported device configurations can be verified in any of the following ways:

Using Device Monitor

The Device Monitor in NSM tracks the status of individual devices, systems, and their processes. To check the status of the imported device in the Device Monitor, from the left pane click Investigate, expand Realtime Monitor, and select Device Monitor. From the Device Monitor workspace, check the following parameters for your imported device:

Using Device Manager

Using the Device Manager in NSM you can verify the configuration settings of the imported device. To verify the configuration settings, click Configure, expand Device Manager, and select Devices List tab.

Ensure that the following parameters are indicated:

Using Job Manager

Job Manager tracks the status of major administrative tasks, such as importing or updating a device. After you import a device, view the report for the import task to ensure that the management system imported the device configuration as you expected. To track the status of the imported Secure Access devices in NSM, from the left pane, click Administer and select Job Manager.

Note: Job Manager configuration summaries and job information details do not display passwords in the list of CLI commands for administrators who do not have the assigned activity "View Device Passwords." By default, only the super administrator has this assigned activity.

Job Manager also tracks the status of configuration summaries, described in the Using Configuration Summaries section.

Using Configuration Summaries

NSM provides three configuration summaries to help you manage device configurations and prevent accidental misconfigurations. Use configuration summaries after you import a device to ensure that the management system imported the physical device configuration as you expected.

Configuration summaries help with ongoing device maintenance, particularly for devices on which a local device administrator has been troubleshooting using CLI commands or the Web UI. Because the device object configuration in the NSM UI can overwrite the physical device configuration, you should always confirm the commands that are sent to the device.

The three configuration summaries that help you to manage device configurations are:

Configuration Summary

A configuration summary shows you the exact CLI commands that will be sent to the managed device during the next device update. To get a configuration summary in NSM, from the Devices menu, click Configuration and select Summarize Config. The Summarize Config dialog box appears. You see a list of security devices to which you have access. Select the device you just imported and click OK. NSM analyzes the UI device object configuration and generates a summary report that lists the CLI commands or XML messages to send to the physical device during the next device update.

For a just-imported device, the configuration summary report displays the device configuration that matches the configuration currently running on the physical device.

Delta Configuration Summary

A delta configuration summary shows you the differences between the configuration you see in the NSM UI and the configuration on the physical device. To get a delta configuration summary in NSM, from the Devices menu click Configuration and select Summarize Delta Config. The Get Delta Config Summary dialog box appears with a list of devices to which you have access. Select the device you just imported and click OK. NSM queries the physical device to obtain a list of all CLI commands or XML messages used in the device configuration, compares that list with the UI device configuration, and generates a summary report of all differences, or deltas, discovered.

For a just-imported device, the delta config summary displays minimal deltas, meaning that very few differences exist between the configuration on the physical device and the configuration in the UI. NSM automatically imports your VPNs and displays the VPN policies; however, NSM does not create VPN abstractions for your VPN policies.

Get Running Configuration

A running configuration summary shows you the exact CLI commands or XML messages that were used to create the current device configuration on the physical device. To get the running config summary in the NSM application, from the Devices menu click Configuration and select Get Running Config. The Get Running Config dialog box appears. You see a list of devices to which you have access. Select the device you just imported and click OK.

NSM queries the physical device to obtain a list of all CLI commands used in the device configuration and generates a summary report that lists those commands. For a just-imported device, the get running config summary report displays the device configuration currently running on the physical device.

Related Documentation