Roll back to a known-good configuration
Current and past backups of every device in the archive, with side-by-side or unified diffs.
Backups, templates, compliance, CVE
Configuration backup, compliance and security auditing
Back up or change the configuration of hundreds of devices in one run with command and SNMP templates. The backup archive shows exactly what changed between versions, compliance filters check your corporate rules, and security checks match device software versions against known CVEs.
Problems it solves
What this module brings to your team
Who changed what?
Change detection triggered by syslog messages captures and records every change.
Audits and security
Compliance with your configuration standards and known vulnerabilities in device software, reported on a schedule.
Capabilities
What Configuration Management can do
Configuration backup
Ready-made command templates per vendor (Cisco, HP ProCurve, Juniper, Huawei, Fortinet…) plus your own; run on demand or on a schedule.
Success conditions
Mark a run as successful when a given text does or does not appear in the output; per-device results in the job history.
SNMP templates
Turn SNMP SET operations into templates and apply them to many devices at once.
Backup archive and diff
Keep backups in folders and compare two versions side by side or as a unified diff.
Compliance checks
Contains/does not contain, starts/ends with, AND/OR logic and context lines around matches; results in compliance reports.
Security (CVE) checks
Assign vendor, product and version to devices and generate security reports with known CVE/CWE entries, severities and scores.
Change detection
A configuration-change message from a device triggers a fresh backup and a change record.
Access control
Define per user which templates they can read and run.
Built-in FTP / SFTP / TFTP
Built-in servers and FTP/SFTP users so devices can push backups and download files; upload files of up to 1 GB, e.g. software images.
Detailed feature list
Also included
- Template tree with system templates and your own folders
- Device selection by inventory view
- Run templates from alarm triggers
- Case-sensitivity option for compliance filters
- Security report with total vulnerabilities, CVE count, highest and lowest scores
- Search CVE, CWE and summaries, with export
- TFTP and FTP file listings
Related modules
Better together
RADIUS / AAA
Manage administrator access to your network devices with central RADIUS, and keep a record of who connected to which device and when.
Explore the moduleLog Management
Centrally collect, filter and live-tail syslog and SNMP trap messages, and keep them tamper-evident with time-stamped signatures.
Explore the moduleReporting & Scheduler
Produce availability, interface, hardware, IP SLA and system reports from ready-made templates, calculate them over business hours, and run them on a schedule.
Explore the moduleSee your network with Netronus
Let’s schedule a demo in your own environment or prepare a quote for your needs. Pricing depends on the number of devices and the modules you choose.