topic Re: Restore point in Network Security

Restore point

Knassi — Wed, 01 Feb 2023 15:37:47 GMT

can you create a restore point on a cisco device? ASA, FMC for example instead of backing up and saving somewhere

Re: Restore point

balaji.bandi — Wed, 01 Feb 2023 16:18:54 GMT

not sure i am addressing correctly, yes you can configure SFTP./TFTP to confg offload.

Re: Restore point

Marvin Rhoads — Wed, 01 Feb 2023 18:11:14 GMT

There's no built-in "restore point" type of feature available for ASA and FMC (and FTD). There is a rollback feature in FMC 7.3 for deployments to managed devices.

NX-OS is the only Cisco network or security product that comes to mind with a restore point feature.

Re: Restore point

MHM Cisco World — Wed, 01 Feb 2023 18:24:15 GMT

https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa-firepower-module-user-guide-v541/Import-Export.pdf

may be @Marvin Rhoads can confirm my suggestion, I think import/export config can help here.
the only point that unsure about import/export is the revision number.

Re: Restore point

Marvin Rhoads — Wed, 01 Feb 2023 18:42:29 GMT

@MHM Cisco World I consider import-export config to be a method of backing up and saving off-box. The OP said they wanted something other than that.

Restore point operations are akin to "rollback" in NX-OS:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/system_management/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_System_Management_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_System_Management_Configuration_Guide_7x_chapter_01000.html