Hi all,
Though someone might be able to give me some better understanding about CDO features. I thought to be impressed by CDO but during testing my "whoa" effect has not arrived (yet) about CDO and it's potential....
Maybe just in points:
- Is there a way CDO performs daily backups of the firewalls (e.g. ASA) and storing them? So you can see historical backups and do comparisons? I can see there is just the latest configuration and CDO known config so you can't see historical config like a week ago...
- Change Request Management - Is there a way to really utilize some "change control" process like it was in old FSM? So someone prepare changes in ACLs/objects etc. submit it for implementation and other will approve/deploy changes as a kind of process workflow?
- Can CDO show the content of objects (like Network/Service object-groups, Service object-groups) in an easier way within ACL rules? So you can see it directly like a flip ASA Access Policies into "view" mode to display content of all objects on site within rules? Suppose not, and you always have to search. E.g. in ASDM you can define to display X members of the object directly...
- Any possibility for "reports" like actual hits in given timeframe
- Is there a way for ACL export which would also include all objects within ACL and it's content? At the moment export creates CSV of the ACL, but all object content is not there so nobody could use it to verify legitimacy of the used objects. Or any other representation for Export to be like HTML or similar easier readable by someone else who has no access to CDO?
- Troubleshooting - does it work to define subnet like /24 or 255.255.255.0 to capture all...seems not and only host IPs are allowed within troubleshooting section of CDO.
- Is there a page about already submitted features which are being worked on?
- Any easy way to discard changes done by CDO (before they are deployed)? I had to wait for conflict detection interval to be able to discard changes done by CDO...or at least missed button to simply discard it..
Kind of hoped for a bit more with CDO
Thank you,
Martin
