Check for Changes to determine if the device's configuration has been changed directly on the device and it is no longer the same as the copy of the configuration stored on CDO. You will see the this option when the device is in the "Synced" state.
To check changes:
In the navigation bar, click Inventory.
Click the Devices tab.
Click the appropriate device type tab.
Select the device, whose configuration you suspect may have been changed directly on the device.
Click Check for Changes in the Synced pane on the right.
The behavior that follows is slightly different depending on the device:
AWS device if there has been a change to the device's configuration, you will receive the message:
Reading the policy from the device. If there are active deployments on the device, reading will start after they are finished.
Compare the two configurations presented to you. Click Continue. The configuration labeled Last Known Device Configuration is the configuration stored on CDO. The configuration labeled Found on Device is the configuration saved on the Secure Firewall
Reject the out-of-band changes to keep the "Last Known Device Configuration."
Accept the out-of-band changes to overwrite the device's configuration stored in CDO with the configuration found on the device.