CHAP TER
7-1
User Guide for Cisco Security Manager 4.4
OL-28826-01
7
Managing FlexConfigs
FlexConfig policies allow you to configure device commands that are not otherwise supported by
Security Manager. By using Flexconfigs, you can extend Security Manager’s control over a device
configuration and take advantage of new device features before upgrading the product.
FlexConfig policies are made up of FlexConfig objects. These objects are essentially subroutines that
can include scripting language commands, device commands, and variables. You can configure an object
to be processed prior to applying the Security Manager configuration to a device, or you can have it
processed after the configuration. Security Manager processes your objects in the order you specify so
that you can create objects whose processing depends on the processing of another object. A FlexConfig
policy object’s contents can range from a single simple command string to elaborate CLI command
structures that incorporate scripting and variables.
Note Security Manager can be configured to deploy FlexConfigs only one time after creation or modification
of a FlexConfig, or to deploy FlexConfigs with each deployment. By default, Security Manager deploys
FlexConfigs one time. If you have FlexConfigs that need to be deployed with each deployment, then you
will need disable the "Deploy only new or modified Flexconfigs" setting on the Tools > Security
Manager Administration > Deployment page. After changing this setting, you will need manage
one-time FlexConfigs by deleting them after they have been deployed. For more information, see
Deployment Page, page 11-9.
Understanding policies and objects is central to understanding and using FlexConfig policy objects. For
more information on how Security Manager defines and uses polices, see Chapter5, “Managing
Policies” and for information on how Security Manager defines and uses objects, see Chapter6,
“Managing Policy Objects”.
The following topics describe FlexConfig policies and policy objects and how to use them:
•Understanding FlexConfig Policies and Policy Objects, page7-2
•Configuring FlexConfig Policies and Policy Objects, page7-24
•FlexConfig Policy Page, page 7-35