Symptom
following default configuration is added to running-configure after policy deploy,
and will be deleted when next policy deploy.
1.
interface Ethernet1/1
cts manual
propagate sgt preserve-untag
policy static sgt disabled trusted
2.
user-identity default-domain LOCAL
3.
class-map class_snmp
match port udp eq 4161
policy-map global_policy
class class_snmp
inspect snmp
Workaround
Do a dummy edit on any policy. Then deploy will clear the default config added in the previous deploy
