8-46
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 8 Managing Deployment
Working with Deployment and the Configuration Archive
Detecting and Analyzing Out of Band Changes
When you deploy configurations to devices, Security Manager either removes out of band changes or
cancels the deployment based on your deployment settings. (For a detailed explanation of out of band
changes and how they are handled during deployment, see Understanding How Out-of-Band Changes
are Handled, page 8-12.)
In the most typical scenario, Security Manager removes any out of band changes during deployment.
However, there might have been good reason for those changes to have been made to the device outside
of Security Manager. Thus, it is good practice to analyze a device for out of band changes before
deploying configurations, so that you have the opportunity to proactively recreate any configuration
changes that should be preserved.
There are many ways to detect whether there have been out of band changes to a device configuration
since the last deployment to the device. If there have been changes (by another device management
application or by direct CLI updates), you can preview the changes and determine whether to update the
device policies before deployment, or to deploy and overwrite those out of band changes. (Out of band
changes are sometimes called OOB changes in Security Manager.)
Table8-12 Config Version Viewer (Preview Configuration) Dialog Box
Element Description
Proposed Config Type The type of configuration you want to view. For example, you can view
the full configuration or just the delta (the changes from the last
deployed configuration). The proposed configuration is displayed in
the left pane.
Compare to Version Choose a configuration to compare against the proposed configuration.
The selected configuration is displayed in the right pane.
•None—Leaves the reference configuration blank.
•Last Deployed—Displays the last configuration that was deployed
to the device and compares it with the proposed configuration.
•Running Config—Displays the current configuration running on
the device and compares it with the proposed configuration. The
device must be accessible to obtain the running configuration.
First Difference button Moves the cursor to the first difference noted between the proposed and
reference configurations.
Previous Difference button Moves the cursor to the previous difference noted between the proposed
and reference configurations.
Current Difference button Centers the currently selected difference on the page.
Next Difference button Moves the cursor to the next difference noted between the proposed and
reference configurations.
Last Difference button Moves the cursor to the last difference noted between the proposed and
reference configurations.
Print button Prints the configuration.