Conflict Detection

When conflict detection is enabled, Security Cloud Control Firewall Management polls the device for the default interval to to determine if a change has been made to the device's configuration outside of Security Cloud Control Firewall Management . If Security Cloud Control Firewall Management detects that a change was made, it changes the configuration status for the device to Conflict Detected. Changes made to a device outside of Security Cloud Control Firewall Management are called "out-of-band" changes.

In the case of an On-Premises Firewall Management Center that is managed by Security Cloud Control Firewall Management , if there are changes that are staged and the device is in Not Synced state, Security Cloud Control Firewall Management stops polling the device to check for changes. When there are changes made outside Security Cloud Control Firewall Management which are pending to be synchronized with Security Cloud Control Firewall Management and changes made in Security Cloud Control Firewall Management which are pending to be deployed to the on-premises management center, Security Cloud Control Firewall Management declares the on-premises management center to be in the Conflict Detected state.

Once this option is enabled, you can configure how often conflicts or OOB changes are detected per device. See Schedule Polling for Device Changes for more information.