If changes have been made to the configuration of an ASA outside of Cisco Defense Orchestrator (Defense Orchestrator), referred to as an out-of-band change, the entry for the device in the devices table is marked Conflict Detected.
Note: When the FirePOWER policy is managed by Defense Orchestrator, users cannot make out-of-band changes. Any changes made are overridden by Defense Orchestrator.
Enable Conflict Detection
Enabling conflict detection alerts you to instances where changes have been made to a device outside of Defense Orchestrator.
- Open the Devices & Services page.
- Select the device or devices for which you want to enable conflict detection.
- In the details pane, in the Conflict Detection box, select Enabled from the list.
- See Resolve "Conflict Detected" Status to learn how to resolve the conflict.