Configs

Backup, running vs startup, compliance — the NCM half. Correlates with NetPath when a hop broke after a commit.

Revisions

stored configs

Drift

running ≠ policy

Policies

CIS PAN / IOS-XE

demo rulesets

History

HQ-FW-PA3220 · Opened backup-window object, no ACL change

Node

CIS Palo Alto

  set deviceconfig system hostname HQ-FW-PA3220
  set network ike gateway Austin-TUN peer-ip 10.2.0.1
  set vsys vsys1 zone trust network layer3 ethernet1/2
+ set rulebase security rules backup-window from trust to untrust action allow
+ set rulebase security rules backup-window schedule tue-0200