topic Re: How to see configuration on FMC 1000 in Network Security

How to see configuration on FMC 1000

adeebtaqui — Fri, 21 Feb 2020 16:13:52 GMT

How to see running configurations on FMC of integrated FWs like FPR2110?

Re: How to see configuration on FMC 1000

Marvin Rhoads — Thu, 13 Sep 2018 01:19:39 GMT

There's no single running-configuration. On the managed sensor itself you can use "show running-configuration" but that will only give you the "LINA" bits (i.e. parts of the configuration derived from the classic ASA code base).

In FMC, various pieces are used to control the device configuration - Platform settings, NAT configuration, remote access and site-site VPN, Access Control and related policies (prefilter, DNS, SSL, Intrusion, Identity).

Re: How to see configuration on FMC 1000

adeebtaqui — Thu, 13 Sep 2018 06:00:10 GMT

Can we not get a complete runn-config? Similar to CLI

Re: How to see configuration on FMC 1000

Marvin Rhoads — Thu, 13 Sep 2018 06:13:14 GMT

You can get a show running-configuration (from the device itself - not from FMC), but it won't suffice to tell you everything about the policies in effect on the device.

Re: How to see configuration on FMC 1000

adeebtaqui — Thu, 13 Sep 2018 06:16:16 GMT

So the best way to analyse and check the present configurations is to go to different tabs on GUI of fmc for policies , routes etc

Re: How to see configuration on FMC 1000

Marvin Rhoads — Thu, 13 Sep 2018 06:19:42 GMT

Depends on your goal. If you want to check a given packet flow then you can do that from GUI or cli. Same with a NAT rule (actually that one is best from cli). If you need to check an Intrusion policy that's pretty much completely via GUI.

Re: How to see configuration on FMC 1000

adeebtaqui — Thu, 13 Sep 2018 08:31:57 GMT

1- From the FMC GUI, you can go to device management page 2- Click on the troubleshooting utility icon 3- From there is some nice feature in advanced troubleshooting, one of them is sending show commands including “show run”