Contents
xii
User Guide for Cisco Security Manager 4.4
OL-28826-01
Suspending or Resuming Deployment Schedules 8-55
Adding Configuration Versions from a Device to the Configuration Archive 8-55
Viewing and Comparing Archived Configuration Versions 8-56
Configuration Version Viewer 8-56
Viewing Deployment Transcripts 8-58
Rolling Back Configurations 8-59
Understanding Configuration Rollback 8-59
Understanding Rollback for Devices in Multiple Context Mode 8-61
Understanding Rollback for Failover Devices 8-61
Understanding Rollback for Catalyst 6500/7600 Devices 8-61
Understanding Rollback for IPS and IOS IPS 8-62
Commands that Can Cause Conflicts after Rollback 8-64
Commands to Recover from Failover Misconfiguration after Rollback 8-65
Rolling Back Configurations to Devices Using the Deployment Manager 8-65
Using Rollback to Deploy Archived Configurations 8-66
Performing Rollback When Deploying to a File 8-67
CHAPTER
9 Troubleshooting Device Communication and Deployment 9-1
Testing Device Connectivity 9-1
Device Connectivity Test Dialog Box 9-3
Managing Device Communication Settings and Certificates 9-4
Manually Adding SSL Certificates for Devices that Use HTTPS Communications 9-4
Security Certificate Rejected When Discovering Device 9-6
Invalid Certificate Error During Device Discovery 9-6
Troubleshooting SSH Connection Problems 9-7
Troubleshooting Device Communication Failures 9-7
Resolving Red X Marks in the Device Selector 9-8
Troubleshooting Deployment 9-9
Changing How Security Manager Responds to Device Messages 9-10
Memory Violation Deployment Errors for ASA 8.3+ Devices 9-11
Security Manager Unable to Communicate With Device After Deployment 9-12
Updating VPNs That Include Routing Processes 9-13
Mixing Deployment Methods with Router and VPN Policies 9-13
Deployment Failures for Routers 9-14
Deployment Failures for Catalyst Switches and Service Modules 9-15
Changing How Security Manager Deploys Configurations to Multiple-Context FWSM 9-16
Deployment Failures to Devices Managed by AUS 9-17
Troubleshooting the Setup of Configuration Engine-Managed Devices 9-18