Maintain devices

Relevant for: AFA Administrators

This topic includes maintenance procedures administrators may need to perform periodically for devices managed by AFA.

Edit a device's configuration

This procedure describes how to update the configuration for a specific device.

Tip: AFA also supports updating multiple devices in bulk using a CSV file. For more details, see Add/update multiple devices in bulk.

Do the following:

  1. Access the Devices Setup page. For details, see Access the DEVICES SETUP page.

  2. From the tree on the left, select the device whose configuration you want to edit, and then click Edit.

  3. Edit the field definitions as needed, and click Finish.

    A confirmation message appears. Click OK to continue.

Rename a device

By default, the device's display name, used to identify the device throughout AFA, is the device's host name. This procedure describes how to change this display name.

Do the following:

  1. Access the Devices Setup page. For details, see Access the DEVICES SETUP page.

  2. From the tree on the left, select the device you want to rename, and then click Rename.

  3. In the Rename .... dialog, enter the new name and click OK

    A confirmation message appears. Click OK to continue.

Add additional device identifiers for sub-systems

If a device is represented by multiple or non-standard device identifiers in the log files collected by AFA, such as firewall clusters or non-standard logging settings, you must configure additional device identifiers to work with AFA.

For parent devices, the AFA configuration enables you to define additional device identifiers when you add or edit the device. This procedure describes how to specify identifiers for subsystems, such as VSYS, VDOM, and so on, as well as for devices managed by a management system such as Juniper NSM or Palo Alto Panorama.

Tip: AFA also enables you to configure device identifiers for parent devices and sub-systems in bulk via CSV. For more details, see Add/update multiple devices in bulk.

Do the following:

  1. Access the Devices Setup page. For details, see Access the DEVICES SETUP page.

  2. From the tree on the left, select the device or sub-system you want to add identifiers for, and then click Edit on the right.

  3. In the Edit.... dialog, in the Log Collection area, enter any additional IP addresses or host names that identify the device.

    Separate multiple values with a colon (:). For example: 1.1.1.1:2.2.2.2:ServerName

    Note: The Log Collection areas appears only when log collection is supported for the device and relevant to the sub-system.

  4. Click OK. The additional identifiers are added to the sub-system's definition.

Delete a device

This procedure describes how to delete a device from AFA, such as if it is no longer in use, or needs to be updated in a way that requires you to remove it and add it back again.

Do the following:

  1. Before deleting a device from AFA, we recommend that you download all AFA reports for the device to back up the device's historical data. For details, see View an earlier report for a specific device.

  2. Access the Devices Setup page. For details, see Access the DEVICES SETUP page.

  3. From the tree on the left, select the device you want to delete, and then click Delete.

  4. In the verification message that appears, confirm that you do want to delete the device, and then click OK.

    A confirmation message appears. Click OK to continue.

Update a password for multiple devices

This procedure describes how to update and synchronize passwords across multiple devices.

Note: This procedure is not supported for devices configured with CyberArk authentication. For details, see Integrate ASMS and CyberArk.

Do the following:

  1. Access the Devices Setup page. For details, see Access the DEVICES SETUP page.

  2. On the right, click Bulk and select Update password from the dropdown menu.

  3. In the Bulk Update Passwords dialog, select the devices you want to update the password for.

    If you have many devices listed, do any of the following to help you locate your device:

    Find a device quickly Enter a name in the box at the top to select it automatically.
    Navigate across pages Click Previous or Next below the grid to navigate back and forth
    Sort the grid Click a column header to sort the devices shown
    Filter the grid Click in each column header to filter the grid by that column.
  4. In the New password field, type the new password to use on all selected devices.
  5. To get additional permissions for Cisco devices, select the Enable user password (Cisco Only) check box and type in another password.
  6. Click Update.

  7. In the Confirm Password dialog, confirm the password(s) you just updated, and then click Confirm.

    The password is updated for all the specified devices.