topic Re: is it important to get mange for all devices in DNA inventory stat in Cisco Catalyst Center

is it important to get mange for all devices in DNA inventory status?

Ahmed Tarek — Sun, 27 Aug 2023 09:08:03 GMT

hi all,

i have many devices in DNA inventory status shown in compliance not manage, they are have different reasons like not match for running config or start up config too, or need to upgrade to newer version, or Critical Security Advisories

my question is it is important to all devices to be manage in compliance for Critical Security Advisories?

Re: is it important to get mange for all devices in DNA inventory stat

Ahmed Tarek — Sun, 27 Aug 2023 09:52:26 GMT

there is no duplicate posts, i just add 2 different posts about 2 different topic, pls check first

Re: is it important to get mange for all devices in DNA inventory stat

Mark Elsen — Sun, 27 Aug 2023 10:35:53 GMT

>...my question is it is important to all devices to be manage in compliance for Critical Security Advisories?
- There is probably no unique answer to that question , it for instance depends on business needs ; a bank manager may for instance answer yes to that question concerning the IT infrastructure being used. Another viewpoint could be to assess the specific advisory w.r.t apps being used on the network. Other security advices may not or no longer be 'critical' as first advertised ,

Re: is it important to get mange for all devices in DNA inventory stat

balaji.bandi — Sun, 27 Aug 2023 11:38:29 GMT

my question is it is important to all devices to be manage in compliance for Critical Security Advisories?

Not necessary - You can manually review the Security advisory and make decision is this effecting your device and environment.

some CV not effected, then i will ignore that advisory if you are not using the features at all.

Always Cisco advised to Upgrade latest stable version - so you can understand the release notes and upgrade least effected device before you deploy mass deployment all over campus.

then you can set that image as advisory image.

Re: is it important to get mange for all devices in DNA inventory stat

Ahmed Tarek — Mon, 28 Aug 2023 08:52:30 GMT

thanks marce and balaji for support,

i have another question, it is important for device to be manage all time ? whatever the reason ?

Re: is it important to get mange for all devices in DNA inventory stat

Mark Elsen — Mon, 28 Aug 2023 09:01:37 GMT

>... it is important for device to be manage all time ? whatever the reason ?
- The question is unclear for me, can you elaborate ?

Re: is it important to get mange for all devices in DNA inventory stat

Ahmed Tarek — Mon, 28 Aug 2023 09:28:29 GMT

i found many reasons cased none compliant status for example:

miss march between running and startup configuration

i think this case not impact switch, am i right?

Re: is it important to get mange for all devices in DNA inventory stat

balaji.bandi — Mon, 28 Aug 2023 20:39:32 GMT

check and compare the config - see is that valid, some users forgot to issue command write, so the config difference always you see,

write the config and re-sync should be ok

Re: is it important to get mange for all devices in DNA inventory stat

Ahmed Tarek — Tue, 29 Aug 2023 07:04:41 GMT

really appreciated your reply and help, i will do this step.

but sorry, my point if i did not do this and still there is difference between running and start up config, is there any impact ?

Re: is it important to get mange for all devices in DNA inventory stat

Ahmed Tarek — Tue, 29 Aug 2023 11:54:43 GMT

followed up your guide, yes it compliant after i clicked

Synch Device config

but after that health check for this device is 1 instead of 7.

health check (fabric health score)

what do you think?

Re: is it important to get mange for all devices in DNA inventory stat

balaji.bandi — Tue, 29 Aug 2023 15:45:49 GMT

not sure - can you post the screenshot what you see ?

Re: is it important to get mange for all devices in DNA inventory stat

Ahmed Tarek — Tue, 29 Aug 2023 16:41:07 GMT

health score is up now to 7, i uploaded the current score, but it was 1?