Step 1

In the left pane, click Security Devices.

Step 2

Click the Devices tab.

Step 3

Select the device, and in the Device Actions pane on the right, click >_Command Line Interface.

Step 4

Enter one or more commands in the command pane, and click Send.

If there are limitations on the commands you can run, those limitations are listed above the command pane.

The device's response to the command(s) are displayed below in the response pane. If there is no output for a command (either it was executed successfully, or there was no output to show), you will see Done! in the results pane.

Example:

The following ASA example sends a batch of commands that creates three network objects and a network object group that contains those network objects.

Step 5

After you send commands, Security Cloud Control records that command in the History pane. You can rerun the commands saved in the History pane or use the commands as a macro.

1. Click the clock icon to open the History pane.

   

2. Select the command in the History pane that you want to modify or resend.

3. Reuse the command as it is or edit it in the command pane and click Send.

Step 1

In the left pane, click Security Devices.

Step 2

Click the Devices tab.

Step 3

Select multiple devices of the same type, and in the Device Actions pane on the right, click >_Command Line Interface.

Step 4

Enter one or more commands in the command pane, check or uncheck devices you want to send the commands to in the My List field, and click Send.

Note	If you enter a very long list of commands, you may exceed the limitations of Security Cloud Control's interface with the device. If you see an error, you can add extra blank lines between groups of commands so Security Cloud Control can send the commands in batches.

Note	For the ASA, if any of the selected devices are not synced, only the following commands are allowed: show , ping , traceroute , vpn-sessiondb , changeto , dir , write , and copy .

Step 5

View the device output.

The Execution tab shows the devices where the commands were sent; this list should match the selected devices in My List.

If there is no output for a command (either it was executed successfully, or there was no output to show), you will see Done! in the results pane.

The devices' response to the commands are displayed below in the response pane. If the response was the same for more than one device, the response pane displays the message "Showing Responses for X devices." Click X Devices to show all the devices that returned the same response in a pane to the right. Click View Device to go to that device in Inventory.

On the By Response tab, devices with identical responses are consolidated in a single row. Click a different row to show the response from other devices.

To re-run the command on the selected devices, click the prompt symbol to the right of the device row, and then click Send. You can change the commands you want to send or check and uncheck devices in the My List tab.

Click the By Device tab, and select a device to show only that device's command response.

Step 6

After you send commands, Security Cloud Control records that command in the History pane. You can rerun the commands saved in the history pane or use the commands as a macro. The commands in the history pane are associated with the original devices on which they were run.

1. Click the clock icon to open the History pane.

   

2. Select the command in the History pane that you want to modify or resend.

   Note that the command you pick is associated with specific devices (shown on the Execution tab) and not necessarily the ones you chose in the first step.

3. Click the My List tab to check or uncheck additional devices.

4. Reuse the command as it is or edit it in the command pane, and click Send.

Step 1

In the left pane, click Security Devices

Step 2

Click the Devices tab.

Step 3

Select one or more devices of the same type, and in the Device Actions pane on the right, click >_Command Line Interface.

Step 4

Create a macro for this device type if one does not already exist.

1. Add a macro in one of the following ways:

   • New macro—On the Macros tab (), create a new macro by clicking the Create Macro () button.

     

   • From an existing macro—On the Macros tab (), create a macro starting with the same commands by selecting a macro and then clicking the Create Macro () button.

     

   • From history—On the History tab (), select a command you already ran, and then click Create Macro () button.

     

2. Give the macro a unique name and provide an optional description and notes.

   

3. Enter the commands in the Command field. For variables, enter the parameter surrounded by double curly brackets: {{parameter}} .

   You will define the parameter before you run the macro.

   

   You can name your parameters anything you want.

4. Click Create.

Step 5

Click the star to open the Macros tab, and select a macro from the list.

Step 6

Run the macro one of two ways:

• If the macro has no parameters to define, click Send. The response to the command appears in the response pane. You're done.

• If the macro contains parameters, such as the Configure DNS macro below, click >_ View Parameters.

1. In the Parameters pane, fill in the values for the parameters in the Parameters fields.

   

2. Click Send.

Step 7

Save configuration changes if you made any.

After you send the command you may see the message, "Some commands may have made changes to the running config" along with two links.

• Clicking Write to Disk saves the changes made by this command, and any other change that in the running config, to the device's startup config.

• Clicking Dismiss, dismisses the message and does not save the configuration. You may lose the configuration changes if you reboot the device.

Step 1

Run your commands according to Use the Command Line Interface on a Single Device, Use the Bulk Command Line Interface, or Run a CLI Macro, or choose a command from the History pane ().

Step 2

Click the Export results () button.

Step 3

Give the .csv file a descriptive name and save the file to your local file system.