Ticket
If you want to configure security devices with Cisco Security Manager a ticket is created, after you have made changes to the security devices you must submit the ticket to make it effective.
Example: Add virtual sensor
When I wanted to add a virtual sensor Cisco Security Manager will automatically popup a ticket creation window.
After the sensor is added you click save, then you need to submit the ticket.
Workflow
Tools -> Security Manager Administration.
You can define the workflow, by default the workflow is disabled.
If you enabled workflow then you can enforce configuration approval by the manager. So whenever you want to start configuring with Workflow enabled an email will be sent to the manager for review and approval.
Conclusion
Documentation and accounting is enforced, everything you want to configure on the security devices with CSM you need to have a ticket, after you have finished configuration you will need to submit the ticket and include your description of the work, it is not compulsory to write any comments in the submit ticket form. If ticket is not submitted you are not allowed to do any more reverse changes until you have submitted the ticket for the job. For example if I added a sensor but did not submit then ticket the CSM will never allow you to delete the sensor until you have submitted the ticket.
cyruslab 