Export a Cisco FTD by hand
One CLISH transcript of the device. FMC and cdFMC come through the Collector.
On this page
Run the commands
Sign in over SSH and run these at the > prompt:
show version
show managers
show running-config
show access-control-config
show failover
show failover state
show user
show ntp
show ssh-access-list
show license all
show networkSave the transcript
- Save the whole session as one
.txtfile and keep the>prompt lines. Each output is read under the command on the prompt line above it. - Run each command without an
| includefilter. The output is filed under the command before the|, so a filtered output reads as if it were complete.
What the upload is read for
| Output | Read for |
|---|---|
show version | Model, serial, release, and LSP, SRU and VDB versions |
show managers | Whether FMC, cdFMC or FDM manages it, and the registration |
show running-config | Interfaces, objects, access rules, NAT, static routes, VPN, failover and management settings |
show access-control-config | Rule names and the Snort-side settings: intrusion and file policy, logging |
show failover | Both units' serials, which identify the HA pair |
show failover state | This unit's and the peer's state |
show user | Local CLI users |
show ntp | NTP servers |
show ssh-access-list | Who may open SSH |
show license all | Smart Licensing registration and authorization |
show network | Management address |
Over SSH ConfigProof cannot see application, URL and user conditions, intrusion policy content, inheritance, pending deployment, the platform settings policy or policy assignment. The analysis lists them as gaps.
Through the Collector
| Reading | Command or source |
|---|---|
| Routing table | show route, show ipv6 route |
| LLDP neighbors | show lldp neighbors |
| FMC, cdFMC or FDM configuration | The manager's API. No manual upload. |
Upload
Open New analysis
Choose File upload and select the file, or choose Paste, paste the output and select Upload and parse.
It is sent at once
One file per upload. ConfigProof reads the vendor and export type from the content, not the file name, then asks the client, project and name. If your role is limited to certain clients, choose the client first.
Answer the picker if asked
A file that holds several VDOMs, contexts, virtual systems or gateways opens a picker. Each one you choose is its own analysis.