Cisco ASA's config comparison Issue

Question

Hi Folks,

I've noticed that most of our ASA's (but not all) are downloading configs every night. I have the download job scheduled to only download a config if it has changed from the most recent config in the database. So I searched the offending devices and compared a single device's configs 1 day after another and I couldn't find a difference.

In the Comparison window it does mark lines in green and red as it should when it thinks it's found a difference but the lines that it has highlighted are completely blank so there is nothing to compare.

Anyone got any suggestions?

jpnavarrette · Answer

I had a similar issue. Are you using auto template or Cisco Adaptive Security Appliance Version 7? Try using Cisco Adaptive Security Appliance Version 7 if you are not. I am running version 8.0 by the way and it works fine.

ShamChauthani · Answer

Could there be an issue with whitespace characters like space or tab etc?

Could you take a look at the two configs being compared here and see if on the lines with differences if there are any whitespace characters on one that are missing from the other or the count of those characters is different. If you do find something that is different then you could use the RegEx functionality to ignore those lines in the comparison and thus avoid the false positives in the diff.

If you are not able to find the difference then please open a support ticket and provide them the two configs that you are comparing (in txt file format) and the saved diff report.