Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160
14-41
AsyncOS 8.3 for Cisco Content Security Management User Guide
Chapter 14 Common Administrative Tasks
Saving and Importing Configuration Settings
Saving and Importing Configuration Settings
Note
The configuration file described in this section is used to configure Security Management appliances.
The configuration files and Configuration Master described in
The configuration files and Configuration Master described in
are used to configure Web Security appliances.
Most configuration settings for the Security Management appliance can be managed in a single
configuration file. The file is maintained in Extensible Markup Language (XML) format.
configuration file. The file is maintained in Extensible Markup Language (XML) format.
You can use this file in several ways:
•
In case of unexpected disaster to your primary Security Management appliance, you can quickly
configure a second Security Management appliance to restore service.
configure a second Security Management appliance to restore service.
•
You can save the configuration file to a different system to back up and preserve crucial
configuration data. If you make a mistake while configuring your appliance, you can “roll back” to
the most recently saved configuration file.
configuration data. If you make a mistake while configuring your appliance, you can “roll back” to
the most recently saved configuration file.
•
You can download the existing configuration file to view the entire configuration for an appliance
quickly. (Many newer browsers include the ability to render XML files directly.) This may help you
troubleshoot minor errors (like typographic errors) that may exist in the current configuration.
quickly. (Many newer browsers include the ability to render XML files directly.) This may help you
troubleshoot minor errors (like typographic errors) that may exist in the current configuration.
•
You can download an existing configuration file, make changes to it, and upload it to the same
appliance. This, in effect, “bypasses” both the CLI and the GUI for making configuration changes.
appliance. This, in effect, “bypasses” both the CLI and the GUI for making configuration changes.
•
You can upload an entire configuration file through FTP, or you can paste portions of a configuration
file directly into the CLI.
file directly into the CLI.
•
Because the file is in XML format, an associated document type definition (DTD) that describes all
of the XML entities in the configuration file is also provided. You can download the DTD to validate
an XML configuration file before uploading it. (XML validation tools are readily available on the
Internet.)
of the XML entities in the configuration file is also provided. You can download the DTD to validate
an XML configuration file before uploading it. (XML validation tools are readily available on the
Internet.)
Managing Multiple Appliances with XML Configuration Files
Warning
If you want to import a configuration file from one Security Management appliance into another
Security Management appliance:
Security Management appliance:
Everything in the original configuration, including the IP Address, is included in the configuration file.
Either edit the configuration file to change the IP address, or be sure the original Security
Management appliance is offline.
Either edit the configuration file to change the IP address, or be sure the original Security
Management appliance is offline.
Also, be aware that the SSH authentication connection will terminate. When this happens, you will
need to re-establish the connection for all connected Web Security appliances and Email Security
appliances.
need to re-establish the connection for all connected Web Security appliances and Email Security
appliances.
•
You can download an existing configuration file from one appliance, make changes to it, and upload
it to a different appliance. This lets you manage an installation of multiple appliances more easily.
However, you cannot load configuration files from Email Security appliances onto a Security
Management appliance.
it to a different appliance. This lets you manage an installation of multiple appliances more easily.
However, you cannot load configuration files from Email Security appliances onto a Security
Management appliance.
•
You can divide an existing configuration file downloaded from one appliance into multiple
subsections. You can modify those sections that are common among all appliances (in a multiple
appliance environment) and load them onto other appliances as the subsections are updated.
subsections. You can modify those sections that are common among all appliances (in a multiple
appliance environment) and load them onto other appliances as the subsections are updated.