One of the current roles I have is to oversee our network infrastructure. While working on some of the VPNs, I realized that our network engineers would actually configure the device directly. I immediately realized how dangerous this is to our environment. Surely there are tools out there that can help make this a safer process. The whole idea of working directly on any device (Trial and error) is just a faulty concept. Tools such as ASDM and CNA help to a certain level by making things easy, but they also add a lot of junk to the device configuration. After a lot of thought, I was wondering if we could use TFS to push configuration to our devices. What I planned was to download the configs from the various devices using ORION. I then checked them all into TFS. Going forward, any change can be made in TFS first, and then reviewed before being pushed to the device. Currently we still push those changes to the device by configuring it directly (configure terminal command), but there is no reason to not use something like TFTP to push the change you made to the device. It would be interesting to see how this works out in the long run.