8-42
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 8 Managing Deployment
Working with Deployment and the Configuration Archive
Step 1 Click the Deployment Manager button in the Main toolbar.
The Deployment Manager window appears. Click the Deployment Jobs tab if it is not active.
Step 2 Select the job to discard.
Step 3 Click Discard. You are prompted for an optional comment to explain why you are discarding the job.
Deploying Configurations Using an Auto Update Server or CNS Configuration Engine
If your organization uses Auto Update Server (AUS) or Cisco Networking Services (CNS) Configuration
Engine to manage the deployment of configurations to your network devices, you can use these
intermediate servers with Security Manager. To perform this type of deployment, you need to set up the
device, the AUS or Configuration Engine, and Security Manager properly. This procedure explains the
tasks that you need to perform.
Tip You cannot successfully deploy a configuration to AUS that requires Security Manager to download
other files to the device. For example, some remote access VPN policies allow you to configure plug-ins,
Anyconnect clients, and Cisco Secure Desktop configurations. These files are not sent to AUS. Do not
use AUS if you want to configure these types of policy.
Related Topics
•Overview of the Deployment Process, page 8-1
•Chapter 2, “Preparing Devices for Management”
•Including Devices in Deployment Jobs or Schedules, page8-8
•Understanding Deployment Methods, page 8-8
•Managing Device Communication Settings and Certificates, page9-4
Step 1 Set up the AUS or Configuration Engine using the documentation for those products.
Step 2 Configure the devices to use the server. The following topics describe the configuration steps depending
on the type of server and the desired setup:
•Setting Up AUS on PIX Firewall and ASA Devices, page2-8
•Setting Up CNS on Cisco IOS Routers in Event-Bus Mode, page 2-9
•Setting Up CNS on Cisco IOS Routers in Call-Home Mode, page 2-10
Step 3 When you add the device to Security Manager, select the AUS or Configuration Engine for the device if
your chosen method allows it. If the AUS or Configuration Engine is not already defined in Security
Manager, you can identify it to Security Manager as you add the network device. For detailed
procedures, see these topics:
•Adding Devices from the Network, page 3-11
•Adding Devices from Configuration Files, page3-20
•Adding Devices by Manual Definition, page3-25
•Adding Devices from an Inventory File, page3-29