Skip to main content



Cisco Defense Orchestrator

Conflict Detection

This articles describes conflict detection and how to enable conflict detection.

If changes have been made to the configuration of an ASA outside of Cisco Defense Orchestrator (CDO), known as out-of-band changes, the entry for the device in the devices table is marked Conflict Detected to indicate this. See Resolve "Conflict Detected" Status to learn how to resolve the conflict. 

Note: When the FirePOWER policy is managed by CDO, users cannot make out-of-band changes. Any changes made are overridden by CDO.

Enable Conflict Detection

Enabling conflict detection alerts you to instances where changes have been made to a device outside of CDO.

  1. Open the Devices & Services page.
  2. Select the device or devices for which you want to enable conflict detection. 
  3. In the details pane, in the Conflict Detection box, select Enabled from the list.


  • Was this article helpful?