Cisco
Login
Search
Software Secure Firewall Threat Defense
Platform Secure Firewall Threat Defense Virtual
Activity Onboard

Onboard Devices to Cloud-Delivered Firewall Management Center Device Settings Edit General Settings Export and Import the Device Configuration

Last updated: Jul 29, 2025

Export and Import the Device Configuration

You can export all of the the device-specific configuration configurable on the Device pages, including:

  • Interfaces

  • Inline Sets

  • Routing

  • DHCP

  • VTEP

  • Associated objects

You can then import the saved configuration for the same device in the following use cases:

  • Moving the device to a different Firewall Management Center—First unregister the device from the original Firewall Management Center, then add the device to the new Firewall Management Center. Then you can import the saved configuration.

  • Restore an old configuration—If you deployed changes that negatively impacted the operation of the device, you can import a backup copy of a known working configuration to restore a previous operational state.

  • Reregistering a device—If you unregister a device from the Firewall Management Center, but then want to add it back, you can import the saved configuration.

See the following guidelines:

  • You can only import the configuration to the same device (the UUID must match). You cannot import a configuration to a different device, even if it is the same model.

  • Do not change the version running on the device between exporting and importing; the version must match.

  • If you export a standalone configuration, you cannot import it to a high availability pair or vice versa.

  • If an object doesn't exist, it will be created. If an object exists, but the value is different, see below:

    Table 1. Object Import Action

    Scenario

    Import Action

    Object exists with the same name and value.

    Reuse existing objects.

    Object exists with the same name but different value.

    Network and Port objects: Create object overrides for this device. See Object Overrides.

    Interface objects: Create new objects. For example, if both the type (security zone or interface group) and the interface type (routed or switched, for example) do not match, then a new object is created.

    All other objects: Reuse existing objects even though the values are different.

    Object doesn't exist.

    Create new object.s

Procedure

1

Choose Devices > Device Management.

2

Next to the device you want to edit, click Edit (edit icon).
3

Click Device.

4

Export the configuration.

  1. In the General area, click Export.

    Export Device Configuration
    Figure 1: Export Device Configuration

    You are prompted to acknowledge the export; click OK.

    Acknowldge Export
    Figure 2: Acknowledge Export

    You can view the export progress in the Tasks page.

  2. On the Notifications > Tasks page, ensure that the export has completed; click Download Export Package. Alternatively, you can click the Download button in the General area.

    Export Task
    Figure 3: Export Task

    You are prompted to download the package; click Click here to download the package to save the file locally, and then click OK to exit the dialog box.

    Download Package
    Figure 4: Download Package
5

Import the configuration.

  1. In the General area, click Import.

    Import Device Configuration
    Figure 5: Import Device Configuration

    You are prompted to acknowledge that the current configuration will be replace. Click Yes, and then navigate to the configuration package (with the suffix .sfo; note that this file is different from the Backup/Restore files).

    Import Package
    Figure 6: Import Package
    Navigate to Package
    Figure 7: Navigate to Package

    You are prompted to acknowledge the import; click OK.

    Acknowledge Import
    Figure 8: Acknowledge Import

    You can view the import progress in the Tasks page.

  2. View the import reports so you can see what was imported. On the Notifications > Tasks page for the import task, click View Import Report.

    View Import Report
    Figure 9: View Import Report

    The Device Configuration Import Reports page provides links to available reports.
Previous topic Copy a Configuration to Another Device Next topic Edit License Settings