Out-of-Band Changes
Out-of-band changes are the changes that you make to a device configuration using any method other than using Juniper Security Director Cloud UI. Out-of-band changes include configuration changes that you make by using the device commands. If you add or change a device configuration using Junos command, then these configuration changes do not match with the configuration stored in Juniper Security Director Cloud.
You must resolve the out-of-band change conflicts by accepting or rejecting the out-of-band device changes in the Juniper Security Director Cloud. For example, if you add a zone to a device using Junos command, the device’s configuration stored in Juniper Security Director Cloud does not match with the device configuration. As a result, you will not see the newly added zone information on Juniper Security Director Cloud. You must accept the out-of-band zone configuration in Juniper Security Director Cloud to use the zone for creating or editing security policy, NAT, or VPN.
When you make out-of-band device configuration changes, the Juniper Security Director Cloud changes the device configuration state to Out of Sync and displays a notification for device configuration change. You can view a list of all Out of Sync devices on the SRX > Device Management > Devices page.
In a multinode high availability (MNHA) pair, out-of-band changes are detected for each device in the pair.
To return the device configuration state to In Sync, you must resolve the conflicts by accepting or rejecting the out-of-band changes. This task (accepting or rejecting the out-of-band device changes) synchronizes the device’s configuration stored in Juniper Security Director Cloud to match the device configuration.