Configuration Agent Workflows
Validate configuration changes, detect policy conflicts, and track configuration
drift using the Configuration Expert Agent in Strata Cloud Manager.
| Where Can I Use This? | What Do I Need? |
|---|
|
|
- This feature is currently in Beta and available on request.
Contact your account team to enable the feature.
- Superuser role (for agent administration, onboarding, and
managing permissions)
- Network Administrator or Security Administrator role (for agent
interaction)
|
This feature leverages a large language model or generative
AI, and may contain errors. Double-check for accuracy before applying changes.
The Configuration Expert Agent helps you maintain configuration integrity across your
network security infrastructure. It validates proposed changes before you commit
them, identifies conflicts between overlapping rules, and tracks configuration drift
from established baselines or best practices.
When you plan a configuration change—whether adding a new policy rule, modifying
an existing security profile, or restructuring your rule base—this agent analyzes
the impact against your current running configuration. It detects shadow rules,
identifies potential policy conflicts, and verifies that the change does not
inadvertently weaken your security posture.
The Configuration Agent also supports rollback verification, allowing you to confirm that
a reverted configuration returns your environment to the expected state without residual
inconsistencies.
Common Invocation Examples
| Query | What It Does |
|---|
| @agent/config Validate my pending commit for policy
conflicts | Analyzes your staged configuration changes against the running config
to detect shadow rules or conflicting actions. |
| @agent/config Has my firewall config drifted from the
baseline? | Compares the current running configuration against the approved
baseline and reports any discrepancies. |
| @agent/config What would happen if I remove rule
X? | Performs impact analysis to determine which traffic flows would be
affected by the proposed rule removal. |
