conflict-resolve

Function

The conflict-resolve command sets the solution to the conflict between the asset information obtained by proactive scanning and the asset information obtained by passive traffic learning.

undo conflict-resolve command restores the default.

Format

conflict-resolve { keep-learn-result | keep-scan-result | override }

undo conflict-resolve

Parameters

Parameter	Description	Value
keep-learn-result	Indicates that the asset information obtained by passive traffic learning is preferred.	-
keep-scan-result	Indicates that the asset information obtained by proactive scanning is preferred.	-
override	Indicates that the new asset information overwrites the previous one.	-

Views

Asset scanning view

Default Level

2: Configuration level

Usage Guidelines

The default solution is override.

Application Scenarios

In addition to proactive scanning, if the FW is used in the camera security management solution, it can obtain asset information by passive traffic learning. When camera traffic passes through the FW, the FW obtains camera asset information through in-depth traffic learning. Therefore, when the same asset information obtained in two modes is inconsistent, use the conflict-resolve command to determine the priority.

Precautions

The conflict-resolve command determines the priority of proactive scanning and passive traffic learning. If the asset information automatically obtained using either of the two methods is manually modified by the administrator, the manual modification takes priority by default. That is, the manually modified asset information cannot be updated by subsequent scanning or passive traffic learning. If you want the manually modified asset information to be updated by subsequent scanning or traffic learning, run the auto-update enable command to enable the automatic update function.

Modifying canning parameter settings during asset scanning is not allowed.

Example

# Set the conflict solution to proactive scanning.

<sysname> system-view
[sysname] network-scan
[sysname-network-scan] conflict-resolve keep-scan-result