Users Guide

• Remove a configuration compliance baseline
Manage compliance baseline templates
Use compliance template to create compliance baselines and then periodically check the configuration compliance status of
devices that are associated with the baseline. See Managing the device configuration compliance on page 83. You can create
baseline templates by using deployment template, reference device, importing from a file. See Manage compliance baseline
templates on page 84.
By selecting Configuration > Configuration Compliance > Template Management, you can view the list of compliance
templates. On this page:
● You can create compliance template by:
○ Using a deployment template. See Create a compliance baseline template from deployment template on page 84.
○ Using a reference device. See Create a compliance baseline template from reference device on page 85.
○ Importing from a template file. See Create a compliance baseline by importing from a file on page 85.
● Edit a compliance template. See Edit a baseline compliance template on page 85.
● Clone a compliance template. See Clone a compliance baseline template on page 85.
● Export report about a compliance template. On the Compliance Templates page, select the corresponding check box, and
then click Export. See Export all or selected data on page 47.
● Delete a compliance template. On the Compliance Templates page, select the corresponding check box, and then click
Delete.
Configuration compliance is scalable to a maximum of 6,000 devices. To efficiently manage large-scale configuration compliance
activity do the following:
● Disable the default Configuration Inventory task that is triggered automatically and run it manually when needed.
● Create compliance baselines with lesser number of devices. For example, 6,000 devices must be categorized into four
separate baselines with 1,500 devices each.
● All the baselines should not be checked for compliance at the same time.
NOTE:
When you edit a compliance template, configuration compliance is automatically triggered on all the baselines that it
is associated with. If there is a use case of frequent template edits the above scale environment is unsupported, and it is
recommended that you associate a maximum of 100 devices per baseline for optimal performance.
Related information
Managing the device configuration compliance on page 83
Edit a configuration compliance baseline on page 87
Remove a configuration compliance baseline on page 88
Create a compliance baseline template from deployment template on page 84
Edit a baseline compliance template on page 85
Create a compliance baseline template from deployment template
1. Click Configuration > Configuration Compliance > Template Management > Create > From Deploy Template.
2. In the Clone Deployment Template dialog box, from the Template drop-down menu, select a template that must be used
as the baseline for the new template.
3. Enter a name and description for the baseline compliance template.
4. Click Finish.
A compliance template is created and listed in the list of configuration compliance baselines.
Related tasks
Manage compliance baseline templates on page 84
Clone a compliance baseline template on page 85
84
Managing the device configuration compliance