The running configuration on the firewall comprises
all settings you have committed and that are therefore active, such
as policy rules that currently block or allow various types of traffic
in your network. The candidate configuration is a copy of the running
configuration plus any inactive changes that you made after the
last commit. Saving backup versions of the running or candidate
configuration enables you to later restore those versions. For example,
if a commit validation shows that the current candidate configuration
has more errors than you want to fix, you can restore a previous
candidate configuration. You can also revert to the current running
configuration without saving a backup first. If you need to export
specific parts of the configuration for internal review or audit,
you can
Export
Configuration Table Data.