Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Verifying Imported Device Configurations

    After importing a Secure Access device, you should verify whether all device information has been imported.

    The imported device configurations can be verified in any of the following ways:

    Using Device Monitor

    The Device Monitor in NSM tracks the status of individual devices, systems, and their processes. To check the status of the imported device in the Device Monitor, from the left pane click Investigate, expand Realtime Monitor, and select Device Monitor. From the Device Monitor workspace, check the following parameters for your imported device:

    • The Config Status must be Managed.
    • The Conn. Status must be Up.

    Using Device Manager

    Using the Device Manager in NSM you can verify the configuration settings of the imported device. To verify the configuration settings, click Configure, expand Device Manager, and select Devices List tab.

    Ensure that the following parameters are indicated:

    • Imported device serial number matches the serial number on the physical device.
    • Imported device IP address matches the IP address for the physical device.
    • Imported device administrator name and password are correct for the physical device.

      Note: All passwords handled by NSM are case-sensitive.

    • Imported device interfaces are correct for the physical device.
    • Management system successfully imported all device configuration information, including zones, virtual routers, and routes.

    Using Job Manager

    Job Manager tracks the status of major administrative tasks, such as importing or updating a device. After you import a device, view the report for the import task to ensure that the management system imported the device configuration as you expected. To track the status of the imported Secure Access devices in NSM, from the left pane, click Administer and select Job Manager.

    Note: Job Manager configuration summaries and job information details do not display passwords in the list of CLI commands for administrators who do not have the assigned activity "View Device Passwords." By default, only the super administrator has this assigned activity.

    Job Manager also tracks the status of configuration summaries, described in the Using Configuration Summaries section.

    Using Configuration Summaries

    NSM provides three configuration summaries to help you manage device configurations and prevent accidental misconfigurations. Use configuration summaries after you import a device to ensure that the management system imported the physical device configuration as you expected.

    Configuration summaries help with ongoing device maintenance, particularly for devices on which a local device administrator has been troubleshooting using CLI commands or the Web UI. Because the device object configuration in the NSM UI can overwrite the physical device configuration, you should always confirm the commands that are sent to the device.

    The three configuration summaries that help you to manage device configurations are:

    • Configuration Summary
    • Delta Configuration Summary
    • Running Configuration Summary

    Configuration Summary

    A configuration summary shows you the exact CLI commands that will be sent to the managed device during the next device update. To get a configuration summary in NSM, from the Devices menu, click Configuration and select Summarize Config. The Summarize Config dialog box appears. You see a list of security devices to which you have access. Select the device you just imported and click OK. NSM analyzes the UI device object configuration and generates a summary report that lists the CLI commands or XML messages to send to the physical device during the next device update.

    For a just-imported device, the configuration summary report displays the device configuration that matches the configuration currently running on the physical device.

    Delta Configuration Summary

    A delta configuration summary shows you the differences between the configuration you see in the NSM UI and the configuration on the physical device. To get a delta configuration summary in NSM, from the Devices menu click Configuration and select Summarize Delta Config. The Get Delta Config Summary dialog box appears with a list of devices to which you have access. Select the device you just imported and click OK. NSM queries the physical device to obtain a list of all CLI commands or XML messages used in the device configuration, compares that list with the UI device configuration, and generates a summary report of all differences, or deltas, discovered.

    For a just-imported device, the delta config summary displays minimal deltas, meaning that very few differences exist between the configuration on the physical device and the configuration in the UI. NSM automatically imports your VPNs and displays the VPN policies; however, NSM does not create VPN abstractions for your VPN policies.

    Get Running Configuration

    A running configuration summary shows you the exact CLI commands or XML messages that were used to create the current device configuration on the physical device. To get the running config summary in the NSM application, from the Devices menu click Configuration and select Get Running Config. The Get Running Config dialog box appears. You see a list of devices to which you have access. Select the device you just imported and click OK.

    NSM queries the physical device to obtain a list of all CLI commands used in the device configuration and generates a summary report that lists those commands. For a just-imported device, the get running config summary report displays the device configuration currently running on the physical device.

    Published: 2013-01-03