ASA automated backup script

[mike_ut_peterson]

Does someone have a script that backups up the ASA configuration and all the "extra" files (like 'dap.xml') that runs from 'cron' or equivalent?

The ASDM has a manual backup command that seems to get most (all?) of the locally modified files, but can that be automated somehow?

There is also a 'backupasa' script in the ASA CLI manual, but it misses some files.

Thanks,

Mike

[Marvin Rhoads]

The new (as of 9.3(2)) "backup" cli command should get everything that ASDM does. It includes the DAP files, VPN profiles, AnyConnect client image packages etc. Reference.

You can automate that using EEM (available since 9.2(1) - Reference). It would look something like this (substituting your local values  in the backup command syntax):

event manager applet dailybackup
 description "Backup the ASA at midnight"
 event timer absolute time 0:00:00
 output none
 action 1 cli command "backup [ /noconfirm ] [ context name ] [ cert-passphrase value ] [ location path ]"

[mike_ut_peterson]

Thanks - I'll check those out!