Feature matrix
Everything Netronus can do
Every Netronus capability, module by module. Each heading links to the detailed module page.
15device type definitions (vendor and generic)
30+ready-made report types
9alarm action types
4discovery types
Monitoring & Alerting
Module page| Capability | Description |
|---|---|
| ICMP and SNMP monitoring | Ping for reachability, latency and packet loss; SNMP v1, v2c and v3 (noAuthNoPriv, authNoPriv, authPriv; MD5/SHA, DES/AES) for deep metrics. |
| Interface traffic and errors | Bandwidth, drop, discard, broadcast and multicast counters; interface up/down history and real-time SNMP traffic. |
| Hardware health | CPU, memory, temperature, fan and power-supply status; component performance such as FPC and Routing Engine on Juniper devices. |
| IP SLA and NBAR | IP SLA measurements and state changes on Cisco devices, plus application-level traffic with NBAR. |
| Custom OID monitoring | Poll any MIB value periodically with OID sets; each set is tested against a live device before it is saved. |
| Smart groups and inventory trees | Dynamic groups by vendor, location, tier and more; custom inventory views whose folders are populated by rules. |
| Alarm rules and triggers | Conditions, target devices or interfaces, and ordered actions. Rule chains collapse related events into one alarm. |
| Multi-channel notifications | Email (SMTP), SMS API, HTTP POST, SNMP trap and syslog message; call records assigned to specific users. |
| Automated remediation | Send an SNMP SET or run a configuration template on the device when an alarm fires; add wait steps between actions. |
| Maintenance mode | Put devices into maintenance during planned work: no false alarms, and every maintenance window is logged. |
| Widget dashboards | Live dashboards built from value, gauge, line, bar, pie, table and tree widgets, with shareable guest dashboard links. |
| Availability (SLA) tiers | Per-tier polling interval and success threshold, reflected directly in availability reports. |
| Also | Device types for Cisco, Juniper, Huawei, Fortinet, Check Point, HP ProCurve / HPE, MikroTik, Alcatel, H3C, Extreme, Brocade, 3Com and IBM, plus Generic SNMP and Generic IP |
| Also | Add devices one by one, import them in bulk, and run bulk actions |
| Also | Status filters: Up, Unreachable, In maintenance |
| Also | Latency, packet-loss and CPU columns for an at-a-glance inventory |
| Also | Device detail with overview, interfaces, performance, OID and log tabs |
| Also | Five alarm severities: Info, Warning, Minor, Major, Critical |
| Also | Alarm priorities, comments and bulk close |
| Also | Live-updating alarm and event lists with export |
| Also | Optional automatic reset when the condition clears |
| Also | Delivery logs for SMS and email notifications |
| Also | Real-time data streaming on dashboards |
| Also | Ctrl+K to search for any device, IP or page from anywhere |
Traffic Analysis (Flow)
Module page| Capability | Description |
|---|---|
| Multiple flow sources | NetFlow v5/v9, IPFIX and sFlow; define the IP and UDP port of each exporter and track traffic, packets and flows per source. |
| Top talkers | Top flow statistics ranked by source/destination IP, port and interface. |
| Applications, protocols, countries | Application and protocol breakdowns and per-country traffic, with optional DNS resolution for readable names. |
| Subnet traffic and thresholds | Organise subnets into folders and set thresholds; subnets over their limit are highlighted on the map and in the list. |
| Flow security analysis | Malicious (blacklist) traffic, DoS detection based on a packets-per-minute threshold, malformed packets and unexpected ToS/DSCP values. |
| Custom queries | IP, network, network-to-network, protocol (TCP/UDP/ICMP), port and MAC based queries, with a live query preview. |
| Traffic reports | Build flow reports with a wizard, re-run them and export the results. |
| Live and historical views | Live mode or a custom time range, with traffic history charts and source tables. |
| Also | Total traffic, packets, flows and average packet size per source |
| Also | Rankings by source/destination IP and port |
| Also | Per-country traffic distribution |
| Also | DSCP / ToS based queries |
| Also | Subnet detail panel and folder-level charts |
| Also | Configurable DoS threshold (packets per minute) |
| Also | CSV export of security findings |
| Also | Flow exporters shown on the map |
Log Management
Module page| Capability | Description |
|---|---|
| Syslog collection | Stored with receive time, source, severity, facility, tag (SysLogTag) and unit; full-text search in messages. |
| SNMP trap collection | Collect traps centrally; only traps sent with an allowed community string are accepted. |
| Live stream | Watch incoming logs in real time; your filters apply in live mode too. |
| Time-stamped signatures | Sign filtered records with an RFC 3161 time stamp, either into a single file or one file per source. List and download signed archives. |
| Qualified time-stamp authority | Time stamps can come from the appliance’s own TSA or, where configured, from a qualified TSA such as TÜBİTAK Kamu SM. |
| Scheduled signing | Run signing jobs regularly with the Task Scheduler; the signing window is counted back from each run. |
| Log statistics | Daily syslog and trap counts for the last 30 days, share per source device, and silent sources. |
| Alarms from logs | Bind a specific log or trap message to an alarm rule, or use it to trigger configuration change detection. |
| Also | Human-readable syslog severities (Emergency – Debug) and facility codes |
| Also | Filters for time range, device, source IP/name, severity and facility |
| Also | Allow-list of SNMP trap communities |
| Also | Each signed archive keeps the time-stamp query (.tsq) and reply (.der) together |
| Also | Separate permissions for signing and for viewing signed logs |
| Also | Data retention configurable in days; expired data is purged automatically |
| Also | Export of filtered records |
Configuration Management
Module page| Capability | Description |
|---|---|
| Configuration backup | Ready-made command templates per vendor (Cisco, HP ProCurve, Juniper, Huawei, Fortinet…) plus your own; run on demand or on a schedule. |
| Success conditions | Mark a run as successful when a given text does or does not appear in the output; per-device results in the job history. |
| SNMP templates | Turn SNMP SET operations into templates and apply them to many devices at once. |
| Backup archive and diff | Keep backups in folders and compare two versions side by side or as a unified diff. |
| Compliance checks | Contains/does not contain, starts/ends with, AND/OR logic and context lines around matches; results in compliance reports. |
| Security (CVE) checks | Assign vendor, product and version to devices and generate security reports with known CVE/CWE entries, severities and scores. |
| Change detection | A configuration-change message from a device triggers a fresh backup and a change record. |
| Access control | Define per user which templates they can read and run. |
| Built-in FTP / SFTP / TFTP | Built-in servers and FTP/SFTP users so devices can push backups and download files; upload files of up to 1 GB, e.g. software images. |
| Also | Template tree with system templates and your own folders |
| Also | Device selection by inventory view |
| Also | Run templates from alarm triggers |
| Also | Case-sensitivity option for compliance filters |
| Also | Security report with total vulnerabilities, CVE count, highest and lowest scores |
| Also | Search CVE, CWE and summaries, with export |
| Also | TFTP and FTP file listings |
RADIUS / AAA
Module page| Capability | Description |
|---|---|
| Users | Password type, NAS prompt, group membership, attributes and enabled/disabled state. |
| Groups and attributes | Standard attributes and vendor-specific attributes (VSA) applied to every group member, e.g. Cisco privilege level. |
| NAS clients | Define the network devices that talk to RADIUS and their shared secrets. |
| Access control | Time-based access, concurrent use, daily session limit, session and idle timeouts. |
| Accounting | Active sessions and historical session records. |
| Authentication logs | Accept and Reject responses with user and timestamp. |
| Also | Search across users, groups and attributes |
| Also | Column selection and export on every table |
| Also | Reply message and login expiry configuration |
| Also | The RADIUS service is managed from the System Status screen |
Reporting & Scheduler
Module page| Capability | Description |
|---|---|
| Availability reports | Device and branch availability, uptime logs and SNMP sysUptime. |
| Interface reports | Table and chart reports for bandwidth, drops, discards, broadcast and multicast; interface up/down and interface properties. |
| Performance reports | Hardware (CPU, memory, fan, power), latency, packet loss and device system alarms. |
| IP SLA, NBAR and custom OID | IP SLA measurements and state changes, NBAR measurements and custom OID data. |
| System reports | Netronus login records and the log of emails and SMS messages sent. |
| Business hours and holidays | Working days, hours, excluded intervals and public holidays; business-hours filtering in reports. |
| Task scheduler | Visual schedule builder and cron editor, with task logs and results. |
| Export and distribution | Get results as CSV (Excel) or print to PDF; reports can be sent by email. |
| Also | Inventory report |
| Also | Network-wide interface traffic, error and broadcast reports |
| Also | Reports with a separate section per device |
| Also | Re-run a report with the same content over a new date range |
| Also | Today / last 7 days / last 30 days filters |
| Also | Schedule discovery jobs straight from the discovery screen |
| Also | Separate report wizard for flow (traffic) reports |
Discovery, Topology & Maps
Module page| Capability | Description |
|---|---|
| Quick discovery | Quickly finds reachable IP addresses and host names on a network. |
| Topology discovery | Discovers devices over SNMP together with their LLDP/CDP links and draws the topology. |
| Vendor discovery | Collects IP, MAC, vendor and open-port information. |
| Interface discovery | Scans interfaces, MAC and IP counts of devices already in the inventory. |
| SNMP profiles | Multiple SNMP profiles are tried in order during discovery; each device is added with the first profile that answers. |
| Topology editor | Draw buildings, cabinets and inventory devices with their links, and watch them with live status and traffic. |
| Geographic maps | OpenStreetMap-based map of devices and flow exporters, with clustering, drag-to-place and bulk location settings. |
| Link maps | Draw interface links on the map and click through to link and device details. |
| Also | Add selected discovery results to the inventory |
| Also | Define SNMP for supported devices discovered without SNMP details |
| Also | Discovery states: running, completed, failed |
| Also | Export discovery and topology lists |
| Also | Up / unreachable filters on the map |
| Also | Alternative map layers (OpenStreetMap, CARTO) |
Network Tools
Module page| Capability | Description |
|---|---|
| Ping and traceroute | Reachability and path analysis from the Netronus appliance. |
| DNS lookup | Name and record lookups. |
| Port scan and port test | Scan a host or network for open ports, or test a single port. |
| SNMP test | Verify access and credentials with SNMP v2c and v3. |
| IP – MAC history | Which IP–MAC pairs were seen, and when. |
| IP to switch port | Find the switch and interface an IP address is connected to. |
| Packet capture | Capture packets on the Netronus appliance, with its own permission. |
| Web Shell (SSH) | SSH sessions to devices from the browser, with its own permission. |
| Also | Tool access can be restricted through the permission matrix |
| Also | Results in tables, with one-click copy of technical values |
Administration & Security
Module page| Capability | Description |
|---|---|
| Users and groups | Group-based device visibility; group members inherit the group’s permissions. |
| Permission matrix | Separate permissions for inventory, discovery, traffic, logs, configuration management, RADIUS, scheduler, tools and system administration. |
| Active Directory / LDAP | Authentication: local, Active Directory/LDAP, or both. |
| Session security | Session timeout, password reset and user profiles. |
| Signed automatic updates | Update packages are published signed and verified with a public key before installation; automatic updates can be switched on or off in the UI. |
| Licence management | Licence key, device limit and expiry date in the interface. |
| Maintenance and backup | Back up and restore the Netronus configuration and set data retention periods. |
| Network, time and certificates | IP, DNS, gateway, hostname, NTP and time zone; upload your own HTTPS certificate (PEM). |
| System status | See, start and stop Netronus services; CPU, memory and disk information. |
| Customisation | Custom OID sets, dynamic inventory filters, data collection and retention settings, and alarm rules. |
| Also | On-premises deployment: your data never leaves your organisation |
| Also | Turkish and English user interface |
| Also | Light theme by default, optional dark theme |
| Also | Email (SMTP) accounts and SMS API configuration with test sends |
| Also | Server log records |
| Also | Branding with your organisation name and logo |
Ready-made report types
- Inventory
- Device Availability
- Device Uptime Log
- Device Last Uptime (SNMP sysUptime)
- Branch Availability
- Branch Uptime Log
- Device Hardware (CPU, memory, fan, power)
- Device Latency
- Device Packet Loss
- Device System Alarms
- Interface Traffic Chart (bandwidth)
- Interface Error Chart (drops)
- Interface Discard Chart
- Interface Broadcast Chart
- Interface Multicast Chart
- Interface Traffic (bandwidth)
- Interface Errors (drops)
- Interface Discards
- Interface Broadcast
- Interface Multicast
- Interface Availability (up/down)
- Interface Properties
- IP SLA Measurements
- IP SLA State Changes
- IP SLA (downloadable data)
- NBAR Measurements
- Custom OID
- Network Interface Traffic
- Network Interface Errors
- Network Interface Discards
- Network Interface Broadcast
- Network Interface Multicast
- System Access Log (logins)
- System Email / SMS Log
In addition, the Traffic Analysis module includes flow reports built with a wizard.
See your network with Netronus
Let’s schedule a demo in your own environment or prepare a quote for your needs. Pricing depends on the number of devices and the modules you choose.