cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
251
Views
0
Helpful
1
Replies

CSM 3.1.1: restricting policies which can be deployed

watsoncisco
Level 1
Level 1

Hi,

I'm trying to restrict the policies that can be deployed by CSM to only Security and NAT, is there a way of doing this from within CSM or is command authorisation via an ACS the only option?

I'm basically trying to stop out of band changes being overwritten when everything is pushed.

Regards

1 Reply 1

smalkeric
Level 6
Level 6

I think you can restrict the polices by understanding the concept of locking in CSM. Security Manager has a locking mechanism that is useful in organizations where several people have the authority to make configuration changes. It prevents a potential situation in which two or more people are making changes to the same device, policy, policy assignment, or object at the same time. When a lock is applied, a message is displayed across the top of the work area to other users who access that device or policy.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: