How to see configuration on FMC 1000

[adeebtaqui]

How to see running configurations on FMC of integrated FWs like FPR2110?

[Marvin Rhoads]

There's no single running-configuration. On the managed sensor itself you can use "show running-configuration" but that will only give you the "LINA" bits (i.e. parts of the configuration derived from the classic ASA code base). 

In FMC, various pieces are used to control the device configuration - Platform settings, NAT configuration, remote access and site-site VPN, Access Control and related policies (prefilter, DNS, SSL, Intrusion, Identity).

[adeebtaqui]

Can we not get a complete runn-config? Similar to CLI

[Marvin Rhoads]

You can get a show running-configuration (from the device itself - not from FMC), but it won't suffice to tell you everything about the policies in effect on the device.

[adeebtaqui]

So the best way to analyse and check the present configurations is to go to different tabs on GUI of fmc for policies , routes etc

[Marvin Rhoads]

Depends on your goal. If you want to check a given packet flow then you can do that from GUI or cli. Same with a NAT rule (actually that one is best from  cli). If you need to check an Intrusion policy that's pretty much completely via GUI. 

[adeebtaqui · Accepted solution]

1- From the FMC GUI, you can go to device management page 2- Click on the troubleshooting utility icon 3- From there is some nice feature in advanced troubleshooting, one of them is sending show commands including “show run”