topic SNMP ASA / PIX in Network Security https://community.cisco.com/t5/network-security/snmp-asa-pix/m-p/1103849#M894080 <P>Is there a possibility to read the firewall configuration over snmp and write it down to a tftp server? The customer has two firewallsystems and want to save the configurations daily to a tftp server. He has a linux server to provide the snmp and tftp services. The CSM is too big for this really little problem. For routers and switches exist a solution, named pancho.</P> Mon, 11 Mar 2019 14:07:39 GMT maik.behley 2019-03-11T14:07:39Z SNMP ASA / PIX https://community.cisco.com/t5/network-security/snmp-asa-pix/m-p/1103849#M894080 <P>Is there a possibility to read the firewall configuration over snmp and write it down to a tftp server? The customer has two firewallsystems and want to save the configurations daily to a tftp server. He has a linux server to provide the snmp and tftp services. The CSM is too big for this really little problem. For routers and switches exist a solution, named pancho.</P> Mon, 11 Mar 2019 14:07:39 GMT https://community.cisco.com/t5/network-security/snmp-asa-pix/m-p/1103849#M894080 maik.behley 2019-03-11T14:07:39Z Re: SNMP ASA / PIX https://community.cisco.com/t5/network-security/snmp-asa-pix/m-p/1103850#M894082 <HTML><HEAD></HEAD><BODY><P>You need to put on the security hat for this.</P><P>TFTP is NOT secure. Furthermore, SNMP can not </P><P>what you want. </P><P></P><P>Why not use RANCID to do this? It is secure</P><P>and can be done over SSH</P></BODY></HTML> Tue, 04 Nov 2008 14:05:44 GMT https://community.cisco.com/t5/network-security/snmp-asa-pix/m-p/1103850#M894082 cisco24x7 2008-11-04T14:05:44Z Re: SNMP ASA / PIX https://community.cisco.com/t5/network-security/snmp-asa-pix/m-p/1103851#M894084 <HTML><HEAD></HEAD><BODY><P>Depending on how many devices you are looking to backup I would suggest a product called Device Expert. We purchased it about a year ago and it works great.</P><P>It is very reasonably priced as well, $795.00 for up to 25 devices. It has alot of very nice features as well.</P><P></P><P><A class="jive-link-custom" href="http://manageengine.adventnet.com/products/device-expert/" target="_blank">http://manageengine.adventnet.com/products/device-expert/</A></P><P></P><P></P><P>Thanks,</P><P>Joe</P><P></P></BODY></HTML> Tue, 04 Nov 2008 16:06:50 GMT https://community.cisco.com/t5/network-security/snmp-asa-pix/m-p/1103851#M894084 joeduea67 2008-11-04T16:06:50Z Re: SNMP ASA / PIX https://community.cisco.com/t5/network-security/snmp-asa-pix/m-p/1103852#M894086 <HTML><HEAD></HEAD><BODY><P>Thanks, this can be the right solution. I have tested this tool. The first device is polled and i get the config. But the config from the second device i can't get. The server has the ssh right's and the correct password. In the config directory the rancid process create the file name.new but this file has 0 byte. Can you help me?</P><P>In the logfile i see the following failure:</P><P>IP_ADDRESS clogin error: Error: TIMEOUT reached</P><P>IP_ADDRESS missed cmd(s):</P><P></P><P>Do you have any idea?</P><P></P><P>Thanks!</P><P></P></BODY></HTML> Thu, 06 Nov 2008 12:53:49 GMT https://community.cisco.com/t5/network-security/snmp-asa-pix/m-p/1103852#M894086 maik.behley 2008-11-06T12:53:49Z Re: SNMP ASA / PIX https://community.cisco.com/t5/network-security/snmp-asa-pix/m-p/1103853#M894088 <HTML><HEAD></HEAD><BODY><P>I have to disagree with you on this. Why</P><P>pay for something when you can get it for FREE?</P><P></P><P>RANCID is the best tool, bar NONE. It can even</P><P>backup Unix DNS, sendmail configuration and </P><P>Checkpoint Secureplatform firewalls. You can</P><P>backup &gt;1000 devices with RANCID on either </P><P>gentoo or redhat linux box. A very scale</P><P>solution.</P><P></P><P>Can Device expert do that? </P></BODY></HTML> Thu, 06 Nov 2008 13:21:53 GMT https://community.cisco.com/t5/network-security/snmp-asa-pix/m-p/1103853#M894088 cisco24x7 2008-11-06T13:21:53Z