Cisco works backup ASA configuration along with visible PRE-SHARED KEY (PSK)

[mmali]

Hi,

We are taking configuration back of ASA firewalls using Cisco works LMS

Everything works fine. Here is what we are trying to achieve

We would like to have the PRE-SHARED KEY (PSK) from the ASA configuration to be decrypted while Cisco works is taking automated backup.

For example: as of today when Cisco works takes any configuration backup, the PSK is encrypted.

Is it possible to add this command ( “more system:running-config”) in below cwcli command

cwcli config get -u userid -p password [-d debuglevel] [-m email] [-l logfile][-timeout seconds] [-filetype running|startup|runningstartup] { -device list | -view name | -device list -view name |-ipaddress list }

cwcli netshow createjob -u Username -p Password -customcmd " more system:running-config " -schedule Schedule -scheduletype Schedule Type

Cisco works LMS

Cisco ASA 5505, 5510 Version 8.2, ASDM version 6.2

Thanks

Mudassir

[Gaganjeet Chug]

Hi,

Actually No, Its not possible to have the PRE-SHARED KEY (PSK) from the ASA configuration to be decrypted while Cisco works is taking automated backup. This could be because of the security issues not to have the password in clear text.

But, Bug for this issue have been already filed to track down this issue. BUG ID =CSCto14724

You can view this bug at the below URL :-

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?caller=pluginredirector&method=fetchBugDetails&bugId=CSCto14724

Thanks

Gaganjeet

If this post answers your question, please click the "Correct Answer" button"