topic Re: ASA Auto Backup in Network Security

ASA Auto Backup

Murad* — Fri, 21 Feb 2020 16:41:03 GMT

i tried in couple months ago , some command started with ( korn ...) to take auto backup from Switches to FTP server and its working normally , so is this command working normally with ASA ??

any one try that ? or there is another idea for auto backup ?

Re: ASA Auto Backup

Sheraz.Salim — Mon, 21 Jan 2019 22:24:50 GMT

You can automate that using EEM (available since 9.2(1) - Reference). It would look something like this (substituting your local values in the backup command syntax):

event manager applet dailybackup
 description "Backup the ASA at midnight"
 event timer absolute time 0:00:00
 output none
 action 1 cli command "backup [ /noconfirm ] [ context name ] [ cert-passphrase value ] [ location path ]"

please do not forget to rate.

Re: ASA Auto Backup

balaji.bandi — Tue, 22 Jan 2019 01:16:31 GMT

I suggest to run this on a management server which poll the config and save. You can offload these activities from ASA and let it focus on security.
I am sure most of the network management have autobackup servers our of the box as dedicated services.

If you still looking to run on the box as suggested on other post EEM is the option

Depending on the ASA version you are running, you could set up an EEM script to send the output of more system:running-config to an ftp / tftp server.

https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/117883-config-eem-00.html

Re: ASA Auto Backup

Francesco Molino — Tue, 22 Jan 2019 04:35:31 GMT

Hi

You different solutions to handle this.
You can use EEM since a certain version on asa.
You have different tools that will be able to handle this but i could recommend one which is Rancid.
This is my favorite one, i deploy it for lots of my customers and works for multiple vendors.
On top of it, if you're not so comfortable with Linux, you can also have a web server that will help you read the saved configs, compare them and maybe use this machine as jumphost as well and why not use it as your automation machine with Python scripts.

Well it's free and lot of possibilities.