Restore Security Cloud Control-Managed Devices

Before you restore

• Revert licensing changes.

  Revert any licensing changes made since you took backup.

  Otherwise, you may have license conflicts or orphan entitlements after the restore. However, do not unregister from Cisco Smart Software Manager (CSSM). If you unregister from CSSM, you must unregister again after you restore, then re-register.

  After the restore completes, reconfigure licensing. If you notice licensing conflicts or orphan entitlements, contact Cisco TAC.

• Disconnect faulty appliances.

  Disconnect the management interface, and for devices, the data interfaces.

  Restoring a Firewall Threat Defense device sets the management IP address of the replacement device to the management IP address of the old device. To avoid IP address conflicts, disconnect the old device from the management network before you restore the backup on its replacement.

• Do not unregister managed devices.

  Whether you are restoring a managed device, do not unregister devices from the Security Cloud Control, even if you physically disconnect an appliance from the network.

  If you unregister, you must redo some device configurations, such as security zone to interface mappings. After you restore, Security Cloud Control and devices should begin communicating normally.

• Reimage.

  In an RMA scenario, the replacement appliance arrives configured with factory defaults. However, if the replacement appliance is already configured, we recommend you reimage. Reimaging returns most settings to factory defaults, including the system password. You can only reimage to major versions, so you must patch after you reimage.

  If you do not reimage, keep in mind that Security Cloud Control intrusion events and file lists are merged rather than overwritten.