ASA Auto Backup to TFTP Server

[jwood1650]

Is there a way to have the ASA back up to a TFTP automatically, like daily or weekly?                  

[Jouni Forss]

Hi,

To my understanding ASA doesnt have this functionality like IOS devices seem to have.

The ASA does however have a "call-home" configuration. To my understanding it should be possible to configure it so that it sends the ASA configurations also. Though I think is done through email.

This document contains information about it.

https://supportforums.cisco.com/docs/DOC-12801#Configuration

This is the ASA 8.4/8.6 Configuration Guide section for Smart Call Home feature

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/monitor_smart_call_home.html

Here is the link to he list of Configuration Guides if you need to check one for other software level

http://www.cisco.com/en/US/products/ps6120/products_installation_and_configuration_guides_list.html

The "call-home" command was introduced in 8.2(2) it seems.

Other than this, I guess the only option is to manually write the configurations to TFTP server from the ASA or from Security Contexts if we are talking about a virtualized ASA. Also I guess many people use a script to log into the ASA and issue the needed commands to the ASA to get the backups automatically. I havent tried that myself.

- Jouni

[david.tran]

JouniForss wrote:
Also I guess many people use a script to log into the ASA and issue the needed commands to the ASA to get the backups automatically. I havent tried that myself.

The script can be written in either Perl or Expect.  It can be written in less than 5 minutes with less than 20 lines of codes.

[patrick.preuss]

Hi

You can also use rancid Tod grap the configs.

You than also have versioning via CVS or subversion.


Sent from Cisco Technical Support Android App