CSM 3.3

[mdwheadon]

Is it possible within CSM 3.3 to run an a adhoc report to identify devices whose policies is different to the policy configured within CSM.

[Panos Kampanakis]

Unfortunately no.

CSM assumes that all the configs on the devices are up to doate and are only managed with CSM.

If you make a change to a device though without deploying it you will see non-deployed activities in CSM.

But if someone logs into the device and changes something with CLI, CSM will not know about it until it tries to deploy to the device where it will find an "out of band change".

I hope it makes sense.

PK

[Christopher.Hayre]

While not necessarily a report, CSM 4.0 introduces the capability to do out-of-band change detection on devices (without having to deploy).  This will allow for you verify the differences, if any, between CSM's configuration manager and your device(s).  For more information on the introduction of this feature, please see:

http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/4.0/release/notes/csmrn40.html#wp759341