Hi. Is there any equivalent to the CISCO IOS archive?
logging size 200
notify syslog contenttype plaintext
Since ASA 9.2, we have had Embedded Event Manager (EEM). You can create an EEM configuration to watch for the syslog id of the configuration being changed and trigger a backup.
Here are some examples:
More a most thorough backup, you can use the backup command (available since ASA 9.3(2)).
I haven't tried it, but you should be able to:
Create an EEM applet to have two actions - write mem and backup
Create a command-alias to replace "write" with the event manager applet ("event manager run <applet name>")
Just thought I would write a comment to thank you for your help not only on this one but several others.
It seems almost everytime I have a question and do a google search (which is quite a bit) you have the answer, nice work and thanks for the Help.
I can see how you are a Hall of Fame Master - is that the Highest Level ? Whatever the highest is Yoda, Sensei, Master of all things Security Related - you should be it :)
here's an actual verified/working config to auto backup the asa on a daily basis:
ASA5515X(config)# event manager applet backup-config
ASA5515X(config-applet)# event timer absolute time 11:45:00
ASA5515X(config-applet)# action 0 cli command "copy /noconfirm running-config tftp://172.27.0.1/asa-cfg.txt"
ASA5515X(config-applet)# output none
ASA5515X# sh event manager
event manager applet backup-config, hits 1, last 2018/04/25 11:45:00 last file none
event absolute 11:45:00, left 83816 secs, hits 1, last 2018/04/25 11:45:00
action 0 cli command "copy /noconfirm running-config tftp://172.27.0.1/asa-cfg.txt", hits 1, last 2018/04/25 11:45:00
hope that helps.
Here's an example using the "backup" command:
event manager applet backup-asa description Backup ASA upon saving config event syslog id 111004 action 0 cli command "backup /noconfirm location tftp://192.168.1.20/configs/" output none