Description

SRX Admin wanted to know whether the existing config will be lost while enrolling or dis-enrolling SRX to SkyATP Portal.

Symptoms

Confirming whether existing SRX config will be deleted/overwritten while enrolling or dis-enrolling SRX to SkyATP Portal.

Solution

The answer is "NO"

 

The existing configs will remain intact while Enrolling and Dis-Enrolling the SRX from ATP Cloud.

 

Below are the actions/steps will be performed during the Enrolling and Dis-Enrolling process:

 

Communicate with cloud...

Remove related security-intelligence service configurations...

Remove related advanced-anti-malware service configurations...

Remove related SSL service configurations...

Remove related PKI configurations...

Clear local certificate aamw-srx-cert...

Clear key pair: aamw-srx-cert...

Clear CA profile aamw-cloud-ca...

Clear CA profile aamw-secintel-ca...

Communicate with cloud...

Restart aamwd...

Restart secintel...

Wait for aamw connection status...

Device disenrolled successfully!

 

NOTE: The above steps are for the Dis-Enrolling process. Enrolling process will also have the same steps. However, we can save the config just to be on the safe side.

Modification History

2025-01-30 : Article Created

Related Information

N/A