Retrieve Configurations

The process of collecting configurations is called a retrieval. Configurations can be retrieved manually or automatically when a change is detected or according to a schedule.

Retrieval Methods

This section explains the available retrieval methods: Manual, Change-based, and Scheduled.

Manual Retrieval

On occasion, such as when you need to verify communication between a newly added device and Security Manager, you may find it useful to manually retrieve configurations from your devices.

  • Manual retrievals can be performed independently of change-based or scheduled retrievals. The change-based and scheduled retrievals will still occur even if a manual retrieval has just taken place.
  • All retrieved configurations appear in Security Manager on the Change page, and indicate the type of retrieval (change, schedule, manual).

To manually retrieve a device or management station configuration, complete the following steps.

  1. In the row for the device or management station, click the Menu icon , and then click Retrieve Configuration.
  2. Confirm the retrieval, click Yes.

It may take up to 15 minutes to see the status result of the retrieval.

Change-based Retrieval

One of the key capabilities of Security Manager is its change monitoring. Security Manager actively monitors your network and security devices so that when a configuration change occurs, Security Manager immediately detects it and retrieves it. The record of the change appears in the list of revisions in Security Manager, where you can open and analyze it for compliance or reports.

  • For Check Point devices, configuration retrieval is change-based, and optionally, manual.
  • For all devices except Check Point, change-based retrieval is enabled as a default setting. It is not recommended that you disable this setting.
  • Security Manager begins monitoring for change as soon as you set up monitoring for each device.
  • All retrieved configurations appear in Security Manager on the Change page, and indicates the type of change that triggered the retrieval is indicated.
  • You can verify that change-based retrieval is enabled for a device in the Change Monitoring section of the device properties.