Skip to main content

 

 

Cisco Defense Orchestrator

General Settings

Access the Settings page by opening the user menu and clicking Settings:

user_menu.png 

 

My Tokens

Generate an API Token

  1. From the user menu, select Settings.
  2. In My Tokens, click Generate API Token.
  3. Save the token in a secure location in accordance with your enterprise's best practices for maintaining sensitive data.  

Renew an API Token

The API token does not expire. However, users may choose to renew their API token if the token is lost, compromised, or to conform to their enterprise's security guidelines. 

  1. From the user menu, select Settings.
  2. In My Tokens, click Renew. Defense Orchestrator generates a new token.
  3. Save the new token in a secure location in accordance with your enterprise's best practices for maintaining sensitive data.  

Revoke an API Token

  1. From the user menu, select Settings.
  2. In My Tokens, click Revoke. Defense Orchestrator revokes the token. 

Tenant Settings

Enable Change Request Management

Enabling change request management affects all users of your tenant. To enable Change Request Management, follow this procedure:

  1. From the user menu, select Settings.
  2. From the user menu, click General Settings.
  3. Click the slider under "Change Request Tracking".

Once confirmed, you see the Change Request toolbar appear in the lower left corner of the Defense Orchestrator interface and the Change Request drop-down menu in the Change Log.

Prevent Cisco Support from Viewing your Tenant

Cisco support will associate its users with your tenant to resolve support tickets or proactively fix issues that affect more than one customer. However, if you prefer, you can prevent Cisco support from accessing your tenant by changing your account settings. To do so, slide the button under "Prevent Cisco support from viewing this tenant" to show a green check mark. 

To prevent Cisco support from viewing your tenant, follow this procedure:

  1. From the user menu, select Settings.
  2. Click General Settings.
  3. Click the slider under "Prevent Cisco support from viewing this tenant".

Enable the Option to Auto-accept Device Changes

Enabling auto-accept for device changes allows Defense Orchestrator to automatically accept any changes made directly on the device. If you leave this option disabled, or disable it at a later time, you are required to review each device conflict before you can accept it. 

To enable auto-accept for device changes, follow this procedure: 

  1. From the user menu, select Settings.
  2. Click General Settings.
  3. Click the slider under "Enable the option to auto-accept device changes".

 

Enable the Option to Schedule Automatic Deployments

Enabling the option to schedule automatic deployments allows you to schedule future deployments at a date and time when it is convenient. Once enabled, you can schedule a single or a recurring automatic deployment. To schedule an automatic deployment, see <link>

Note that changes made on Defense Orchestrator for a device are not automatically deployed to the device if it has pending changes of its own ftd_changes_to_deploy.png. If a device is in an unhealthy state, such as Conflict Detected or Not Synched, scheduled deployments are not executed. The jobs page lists any instance where a scheduled deployment fails.

If Enable the Option to Schedule Automatic Deployments is turned off, all scheduled deployments are deleted. 

​​​​​Important: If you use the Defense Orchestrator UI to create more than one scheduled deployment for a device, the new deployment overwrites the existing deployment. If you create more than one scheduled deployment a device using API, you must delete the existing deployment prior to schedule the new deployment.

To enable the option to schedule automatic deployments, follow this procedure:

  1. From the user menu, select Settings.
  2. Click General Settings.
  3. Click the slider under "Enable the option to schedule automatic deployments".