Auto-accept changes
Auto-accept changes is a configuration management feature that
-
automatically accepts any change made directly to a managed device without using Security Cloud Control
-
enhances conflict detection by checking for out-of-band changes every 10 minutes, and
-
updates Security Cloud Control's local version of the device configuration automatically without prompting.
How auto-accept changes works
Changes made directly to a device without using Security Cloud Control are referred to as out-of-band changes. An out-of-band change creates a conflict between the device's configuration stored on Security Cloud Control and the configuration stored on the device itself.
If you have auto-accept changes enabled on your device, Security Cloud Control checks for changes every 10 minutes to determine if there have been any out-of-band changes made to the device's configuration. If there have been configuration changes, Security Cloud Control automatically updates its local version of the device's configuration without prompting you.
Note | Security Cloud Control will not automatically accept a configuration change if there are configuration changes made on Security Cloud Control that have not yet been deployed to the device. Follow the prompts on the screen to determine your next action. |
To use auto-accept changes, you first enable the tenant to display the auto-accept option in the Conflict Detection menu on the Security Devices page; then, you enable auto-accept changes for individual devices. For On-Premises Firewall Management Center, you can do this from the Services page by navigating and selecting the FMC.
If you want Security Cloud Control to detect out-of-band changes but give you the option to accept or reject them manually, enable Conflict detection instead.