Manage Device Configuration

To manage a device, Security Cloud Control stores a copy of the device configuration in its local database. When Security Cloud Control reads a configuration from a managed device, it copies and saves the configuration.

Security Cloud Control also reads and saves a copy of a device configuration when the device is onboarded. Each of these actions serves a specific purpose.

• Discard Changes: This action is available when a device configuration status is "Not Synced." In the Not Synced state, there are changes to the device configuration pending on Security Cloud Control. This option allows you to undo all pending changes. The pending changes are deleted and Security Cloud Control overwrites its copy of the configuration with the copy of the configuration stored on the device.

• Check for Changes: This action is available if the device configuration status is "Synced." Click Check for Changes to instruct Security Cloud Control to compare its copy of the device configuration with the copy stored on the device. If a difference is detected, Security Cloud Control immediately overwrites its copy of the device configuration with the copy stored on the device.

• Review Conflict and Accept Without Review: If you have enabled Conflict Detection on a device, Security Cloud Control checks for configuration changes made on the device every 10 minutes. If the copy of the configuration stored on the device has changed, Security Cloud Control notifies you by displaying the "Conflict Detected" configuration status.

  • Review Conflict: Click Review Conflict to review changes made directly on a device and accept or reject them.

  • Accept Without Review: This action overwrites the copy of the device configuration on Security Cloud Control with the latest copy of the configuration stored on the device. Security Cloud Control does not prompt you to confirm the differences in the two copies of the configuration before taking the overwriting action.

Read All: This is a bulk operation. You can select any number of devices in any state and click Read All to overwrite all the device configurations stored on Security Cloud Control with the configurations stored on the devices.

• Deploy Changes: When you make changes to a device configuration, Security Cloud Control saves your changes to its copy of the configuration. These changes remain Pending in Security Cloud Control until you deploy them to the device. If there are pending changes that have not been deployed, the device is in the Not Synced configuration state.

  Pending configuration changes do not affect network traffic. They take effect only after Security Cloud Control deploys them to the device.

  When Security Cloud Control deploys changes to a device configuration, only the elements that were changed are overwritten. The entire device configuration file is not overwritten. You can deploy changes to one device or multiple devices simultaneously.

• Discard All: This option appears after you click Preview and Deploy.... When you click Preview and Deploy..., Security Cloud Control displays a preview of the pending changes in Security Cloud Control. You can delete all pending changes from Security Cloud Control without deploying them to the selected devices by clicking Discard All. Unlike "Discard Changes," deleting the pending changes completes the operation.