Discussions | Community

CISA's "CI Fortify" Guidance on Isolating Vital Systems: What It Means and How Forward Can Help

On July 28, 2026, CISA, the Australian Signals Directorate's Australian Cyber Security Centre (ACSC), the FBI, and international partners released "CI Fortify – Advice for Isolating Vital Systems." The guidance gives critical infrastructure (CI) oper

1 day ago

captainpacketEmployee

What Building Skyforge Taught Me About AI and Build vs. Buy

A few weeks ago I wrote about what building Skyforge taught me about network emulation and digital twins. If you haven’t read it, you can find it here: The response was much larger than I expected, but one conversation afterwards stuck with me.An col

411

8 days ago

cariddirSpotter

Get results of custom commands

Sometimes you just want to get the results of custom commands quickly.Here is what the command group contains for collection:show ip bgp summaryshow environmentshow interface statusshow ip routeshow port-channel summaryshow lldp neighborsshow ip arp

301

13 days ago

chrisnaishEmployee

Russian State-Sponsored Actors Are Still Getting In Through Bad Router Hygiene: Here's What to Check

Some cyberattacks need a zero-day to make headlines. This one didn't. For years, Russian intelligence has simply walked through open doors: default SNMP community strings left unchanged, Cisco's Smart Install left switched on, routers nobody got arou

560

30 days ago

ak-atosRamping Up

ServiceNow CMDB Integration — Choice Field Type Mismatch for System Criticality

Environment:Forward Networks (self-hosted) ServiceNow CMDB integration via NQE query Target class: cmdb_ci_ip_firewallIssue:When mapping System Criticality (a ServiceNow choice field) from an NQE query to ServiceNow via Forward's native CMDB integrat

671

AndyRamping Up

Integrations

Servicenow Integration

Does anyone know if there is a log or export for the push to service now? We are having an issue with service now processing the model_id (ref). It looks like forward is mapping “model” to both snow’s model_number and model_id. However, it looks like

572

chrisnaishEmployee

Could We Have Seen FortiBleed Coming? What Network Digital Twins Reveal About the Attack

On June 18, 2026, CISA issued an urgent advisory warning that malicious cyber actors — believed to be a Russian-speaking criminal group — have compromised nearly 74,000 Fortinet firewall and VPN devices across 194 countries in a campaign now dubbed F

3130

captainpacketEmployee

What Building a Network Emulation Platform Taught Me About Digital Twins

A discussion at Cisco Live this year got me thinking about network emulation and digital twins. About six months ago, I started building Skyforge, an internal network emulation platform at Forward. The project started as an attempt to solve a practic

900

cariddirSpotter

Network Audit Scripts - NTP NXOS, IOS, EOS

As part of a network initiative, I’m sharing all the scripts that I have worked on to create an audit program. These files feed are then fed into PowerBi for better visualization by engineers and mgmt.First step is create a utility called, “tag_var_u

320

ak-atosRamping Up

ServiceNow CMDB Integration — Choice Field Type Mismatch for System Criticality

671

AndyRamping Up

Integrations

Servicenow Integration

572

cariddirSpotter

Network Audit Scripts - AAA NXOS, IOS, EOS

280

2 months ago

Rohit_809 KumarSpotter

Custom Commands

Custom command format for Foritnet

we are using below format to collect the data from Fortinet firewall for custom command. endconfig globalshow system dnsshow system ntp can anyone check and confirm ,these will not impact anything ,if i remove config gloabl , than command will not ru

43010

2 months ago

SteveBamfordSpotter

Check the default action of an F5 AFM Policy

There is a specific section of the AFM config which refers to the default action of the firewall, the below query checks that the default action is Drop.F5 AFM Config to check for.}sys db tm.fw.defaultaction { value "drop"} /** * @intent Check tha

240

2 months ago

Rymarti2Ramping Up

Unable to access the vulnerabilities page

When attempting to access the Vulnerabilities page I get the following errors.Jakarta.servlet.servletexception:request processing failed:java.util.concurrent.completionexception:java.util.nosuchelementexception:no value presentThis error has accord s

321

3 months ago

mayur.ladRamping Up

Workplace which will auto execute by every 30mins

Hi TeamI am looking for some help to create a workplace in FN.This workplace will contain only CISCO devices and NQEs (BGP status and Interface Status). I want to auto execute this workspace (snapshot) by every 30 mins so that I can fetch interface a

872

4 months ago

Suriya subbiah CTRamping Up

Forward API

API logs

Hi team,Is there a way to see or get API logs to know which user has performed what kind of api calls & actions ( read / view / change) using thier account?

1112

4 months ago

cariddirSpotter

More Functionality with Filtering in the GUI

I’ve brought this up a few times on calls with our account team. It would be really helpful if we could filter with a bit more flexibility in Sources & Inventories.Currently, if I’m searching for a Tag the logic is a “OR” so if I want a device in

250

4 months ago

Suriya subbiah CTRamping Up