Cisco Support Community
Community Member

MC for Firewalls will NOT import devices?

I have verified that all software requirements have been met. However, when I attempt to import a Pix 6.3(5) config the status is stuck on "Importing" and does not complete. Has anyone experienced this and if so did you find a work around?


Re: MC for Firewalls will NOT import devices?

If one imports from a live device, the interface settings should be overridden for that device and not inherited from Global, and should generate just fine.

If they are creating a device from scratch, then one would override the interfaces for the device themselves and provide the real IP addresses for inside/outside as well as define other interfaces as needed.

No, there is no function in Firewall MC to look at the config of a device prior to importing it.

One can do "https:///exec/show config" in a browser to get the config off of a device outside of Firewall MC. The device must be configured to permit HTTP for the host you're browsing from, just like it must be permitted for the server where Firewall MC is installed.

If one wants to see what the current config Firewall MC would put on the device, choose Configuration > View Config > Generate Config. This also has some diffing options to see differences between the config Firewall MC would use and the config on the device, or the last config deployed.

Community Member

Re: MC for Firewalls will NOT import devices?

The problem is that Firewall MC will not import my config from any of my firewalls (PIX). I cann https from my management console machine to the fw so that confirms that access is permitted, however, for some reason Firewall MC does not import?

CreatePlease to create content