An engineer attempts to pull the configuration for a Cisco FTD sensor to review with Cisco TAC but does not have direct access to the CLI for the device. The CLI for the device is managed by Cisco FMC to which the engineer has access. Which action in Cisco FMC grants access to the CLI for the device?
To get the configuration details of a Cisco FTD sensor via Cisco FMC when direct CLI access is not available, you can use the 'show run all' command in the Cisco FTD CLI feature within Cisco FMC. This feature is located in the troubleshooting or advanced troubleshooting section and allows you to execute specific commands that provide the necessary configuration details.
FTD CLI is found under troubleshooting/Advanced Troubleshooting of FMC. A 'show run all'
For those of you struggling to find this FTD CLI they are referring to, it's not really a full CLI but more like a command injector that uses the LINA engine to pull CLI data from the FTD. This tool is located under settings/Health/Monitor/Devices, select <your FTD>, View System & Troubleshooting Details.../Advanced Troubleshooting/Threat Defense CLI/ and then select a command or set your own and execute it to receive output. The answer is 100% D! I confirmed this myself on version 7.0.1
The FMC GUI has a export config button on the device page.
Threat Defense CLI is found under troubleshooting/Advanced Troubleshooting on later versions of FMC. A 'show run all' works there.
In Cisco FMC, to grant access to the CLI for a Cisco FTD sensor, the engineer can use the "show run" command from within the Cisco FTD CLI feature. This command allows the engineer to view the current configuration of the Cisco FTD sensor, including any changes that have been made since the last time the configuration was saved. The engineer can then share this configuration with Cisco TAC as needed for troubleshooting or support.
Agree 100%. In FMC you can go to devices--- Threat defense cli--- execute command: show runn-config