Skip to main content



Cisco Defense Orchestrator

Conflict Detection

If changes have been made to the configuration of an ASA outside of Cisco Defense Orchestrator (Defense Orchestrator), referred to as an out-of-band change, the entry for the device in the devices table is marked Conflict Detected.

Note: When the FirePOWER policy is managed by Defense Orchestrator, users cannot make out-of-band changes. Any changes made are overridden by Defense Orchestrator.

Enable Conflict Detection

Enabling conflict detection alerts you to instances where changes have been made to a device outside of Defense Orchestrator.

  1. Open the Devices & Services page.
  2. Select the device or devices for which you want to enable conflict detection. 
  3. In the details pane, in the Conflict Detection box, select Enabled from the list.


Related Topics
  • Was this article helpful?