Skip to main content

- - Forward Knowledge Base
Product Updates
FWD.app

Home
Discussions
Community

Community

Connect with others to answer questions, gain new insights, and grow your networking knowledge.

244 Topics

daveteeCommunity Manager

published in Welcome

Forward Networks Ranks and Badges

How to earn badges and move up the ranks Recognition is given to community members for their contributions and engagement within the Community. Here are the activities that lead to the awarding of badges and rank promotion: Replies Participating in discussions and responding to questions will give you points for replies. Topics Creating new topics and asking new questions demonstrates your ability to share new ideas with other members. Answers Other members and moderators can mark your responses to questions as correct. Likes Given / Received Recognizing the contributions of others is important in every community. Ranks Ramping Up Welcome! Every new community member starts here. Ask a few questions and like a few contributions from others and you’ll be moving up the ranks. Driver You’ll receive the rank of Driver after replying to your first discussion and liking posts by others. Spotter The Spotter rank is given to community members that not only particip

daveteeCommunity Manager

published in Welcome

Welcome to the Forward Networks Community!

We created a community to support Forward Networks users in building the world's most powerful network infrastructure. The most important part of any community is the people who participate - we’re excited to have you here! I recommend you check out these discussion boards to get started:Drop by the Paddock Chat with others managing complex networks. Discuss new technologies, current events, ideas you’d like to explore to take your network to the next level. Product Discussions Connect with others on how to access all the capabilities of the Forward Networks platform. Learn about setup, configuration, integration, and using Forward as part of your network automation strategy. NQE A great space to meet the NQE movers and shakers. Connect with experts for answers to your NQE questions and share your NQE knowledge with others.If you have questions, drop us an email at community@forwardnetworks.com.

daveteeCommunity Manager

published in Welcome

User Guidelines

Our community is here for everyone. We want to make sure that the community offers a positive experience for all visitors. We have established the following guidelines so it is clear what is expected of all community members. If you have any questions, please contact us at community@forwardnetworks.com. Be friendlyLet’s treat each other with respect. Users will not post any racist, sexist, discriminatory, derogatory, threatening or otherwise insulting content. Please refrain from using profanity or other offensive language. Keep it legalUsers may not post any offensive material, share illegal or copyrighted content, attempt to distribute illegal substances, distribute viruses, or anything that is considered illegal by your country of residence.Stay on topicPlease do not change the subject of a discussion to something not intended by the original poster. Any off-topic posting on threads will result in content being removed and ultimately can lead to denied community access.Save the sell

john_hayesRamping Up

asked in NQE Discussions

Forward NQE Query to Identify Modified Firewall Rules

Is it possible to write a Forward NQE query that will produce a list of firewall rules that have been modified in the last 30 days? It would be helpful to have firewall name, the rule ID numbers, and date/time last modified if possible.

AricaFNEmployee

posted in NQE Discussions

NQE to Identify IP Subnet Utilization

This NQE uses the L3 interface info and ARP tables to find the subnets in use on your network. It lists the associated vlan, used addresses, devices, and usage statistics.An optional parameter allows you to search for an IP address, and whether the IP is in use or not, it will display the subnet it belongs to.import "@fwd/L3/Interface Utilities";numHostsInSubnetV4(maskLength) = if 2 ^ (32 - maskLength) >= 4 then 2 ^ (32 - maskLength) - 2 else 2 ^ (32 - maskLength);numHostsInSubnetV6(maskLength) = 2 ^ (128 - maskLength);@queryquery(IP_Addresses: List<IpAddress>) = foreach device in network.devices foreach interface in getL3Interfaces(device) let addresses = (foreach address in interface.ipv4.addresses select { ip: address.ip, mask: address.prefixLength }) + (foreach address in interface.ipv6.addresses select { ip: address.ip, mask: address.prefixLength }) let neighbors = (foreach address in interface.ipv4.neighbors

john_hayesRamping Up

asked in NQE Discussions

Forward NQE to Identify Unused Firewall Rules

Is it possible to write a Forward NQE query that will produce a list of firewall rules that have not been used in the last 90 / 180 / 365 days (based on hit count)? It would be helpful to have firewall name, the rule ID numbers, and last used date/time if possible.

MikeCommunity Manager

published in Videos

Prevent the Network Blame Game with Forward Networks

Picture this…Your phone buzzes on a Saturday morning. "The app is down... it's probably the network." Sound familiar? We all have been there WAY too many times. I had a great conversation with Ethan Banks from #PacketPushers on how Forward Networks can help you get the network insights you need to in order to stop the blame game!. Imagine having the evidence to confidently say, "Nope, not us!" and actually enjoy your weekend. #StopTheNetworkBlameGame Questions about stopping the Network Blame Game? Ask below!

AricaFNEmployee

published in NQE Discussions

From CLI to NQE: How I Use Forward to Be a More Efficient Network OperatorBeginner

Before I started using Forward Networks, I was deep in the weeds of daily network operations. Like many of you, I relied on the CLI to do everything—whether it was compliance checks, interface audits, or config validation. It worked, but it was slow, manual, and honestly, a bit exhausting. Then I discovered Network Query Engine (NQE), and everything changed. My Background: Life in the CLI Before discovering NQE, I managed networks using CLI commands across dozens or hundreds of devices every day.Logging into individual devices—one at a time Running the same commands repeatedly (show run | include, show run | section, etc.) Copying results into spreadsheets to figure out what was going on Trying to get ahead of issues, but always feeling like I was behind This approach worked for a while, but it became clear that it couldn’t scale with the needs of a modern network. The Breakthrough: Pattern and Block MatchingWhen I began exploring NQE, I realized I didn’t need to learn everythin

DannyRRamping Up

asked in Forward API

API Path Searching with FQDNs

Hello Forward Networks!I have a question regarding if it's possible to add support to resolve FQDNs in the Path Search API? Or would we have to rely on our own DNS servers to make the resolutions first to then add the discovered IP Address to the source or destination. Can it be possible for Forward Networks to model FQDNs as independent objects? Apologies if this seems like a silly ask!Thank you

ChristopherEmployee

posted in NQE Discussions

NQE Query to list prefixes advertised to public BGP peers

This query returns a list of devices, their public BGP peers, and the prefixes advertised to each peer.Note that the line where neighbor.neighborAddress not in nonPublicIps limits the output to peers whose IP is not an RFC 1918 or link-local IP address./*** @intent Lists public BGP peers and what prefixes are advertised to them*/import "@fwd/L3/IpAddressUtils";// The prefixes that are advertised from device to neighborAddressgetAdvRoutes(device, neighborAddress) = foreach x in [1] where isPresent(device.bgpRib) let bgpRib = device.bgpRib foreach afiSafi in bgpRib.afiSafis foreach neighbor in afiSafi.neighbors where neighbor.neighborAddress == neighborAddress where isPresent(neighbor.adjRibOutPost) let adjRibOutPost = neighbor.adjRibOutPost foreach route in adjRibOutPost.routes select distinct route.prefix;// List of IP subnets to excludenonPublicIps = ipAddressSet(privateSubnets + [ipSubnet("169.254.0.0/16")]);foreach device in network.devicesforeach networkInstance in de

GTurnerEmployee

posted in NQE Discussions

Normalized Ranking Without Sorting in NQE

Motivation A customer recently approached me with a challenge: they wanted to feed downstream systems with ordered and banded firewall data. Specifically, they had the following use cases:Identify Top-N firewalls based on configuration complexity and other attributes like greatest number of permissive or shadow rules. Flag percentile-based thresholds for various attributes (e.g., top 10%, bottom 25%) Enable dynamic device selection for exhaustive, compute-heavy rule analysis The challenge? NQE is designed for efficient set-based analysis, therefore it doesn’t require sorting or ranking functions in general. Nevertheless, this customer’s use case called for an approach to simulate these behaviors without external processing.So instead of relying on a built-in sort function, we can create a lightweight, math-driven approach that simulates ranking behavior. It’s fast, deterministic, and works entirely inside the NQE layer so that no external processing or comparisons are required.In th

IvanRamping Up

asked in NQE Discussions

Is it possible to use regex in a pattern block?

I am trying to match against a Palo Alto configuration looking for rules that are using a specific destination object. Rules are under this structure:config devices {string} vsys {string} rulebase security rules {rule_name: (string)*} and an example of what I am trying to match is: "Example Rule" e32ff2ab-a82f-43b6-953e-7e113v624779 { destination [ non-client "External SRC EDL" "Another EDL-wehave"]; First line would be the rule name and the second is where I would really want to do the regex match. The items past “destination” can be a single entry or multiples within []’s. If there are spaces in the names then the whole name is confined in “’s. My goal is to find all rules which have “External SRC EDL” in the destination and I can’t quite figure out how to do it. Any help would be appreciated.

Rohit_809 KumarSpotter

asked in NQE Discussions

How can i get output in single coloum

How can i get output in single coloum . team , i am using below query to get the NTP Server data , however is tried all option to get the output in single coloum , but i am not sucess. NQE Query ciscontppattern=```ntp server {server:string}```;ciscontppattern2=```ntp server {vrf:string} {dir:string} {ser:ipv4Address}```;patternf5 = ```sys ntp servers { server1:string} {server2:string}```;cisco1(device) =foreach command in device.outputs.commands let response = parseConfigBlocks(device.platform.os, command.response) foreach match in blockMatches(response, ciscontppattern) select match.data.server;cisco2(device) =foreach command in device.outputs.commands let response = parseConfigBlocks(device.platform.os, command.response) foreach match in blockMatches(response, ciscontppattern2) select match.data.ser;getServers(device) =foreach command in device.outputs.commands where command.commandText == "list sys ntp"let filtered_response = replace(command.response, "{", "")let filtered_

ChristopherEmployee

posted in Integrations

How to Integrate ServiceNow (SNOW) with Forward Enterprise

Forward Enterprise can integrate with ServiceNow in the following ways: Incident Management - Opening or updating a ServiceNow ticket based on an intent verification failure or change:Forward Docs - Create ServiceNow Incidents CMDB Integration - Pushing updates to the CMBD database with data from Forward Enterprise:Forward Docs - CMDB Integration As a Data Connector with NQE - Extracting data from ServiceNow using an NQE query for use in the NQE Library, Inventory+, or a Decorator by configuring ServiceNow as a Data Connector:Forward Docs - Data Connectors From ServiceNow - By using Flow Designer or Business Rules to access the Forward API. Consult ServiceNow documentation and access one of Forward Enterprise’s API endpoints listed here:Forward Docs - API----The first two integration types above are enabled under Settings > Integrations: The following article shows how to use the Forward API to automate workspace network creation, collection, and diff comparison for Change Control

asked in Forward API

need to get api nodes url

Rohit_809 KumarSpotter

asked in General Discussions

How can i remove some static values for output.

we are using below NQE Query to get the NTP Server details , i need to remove some static value in server coloum, ciscontppattern=``` ntp server {server:string}```;getServers(device) = foreach match in blockMatches(device.files.config, ciscontppattern) select { serverIP: match.data.server}; foreach device in network.deviceslet platform = device.platformwhere device.platform.vendor == Vendor.CISCO select { device: device.name, vendor: device.platform.vendor, tags: device.tagNames, os: device.platform.os, OSVersion :platform.osVersion, servers: (foreach server in getServers(device) select server.serverIP)} Example : i dont want to show entry those have server value - “Inte”

SteveBamfordDriver

asked in General Discussions

Hi allHas anyone onboarded Arista WIFI yet, the models we have are managed centrally via CV-CUE the Wifi version of cloudvision, although you can extract some commands via SSH.Had a quick look around and couldn’t find anything, I will in the meantime dig around about custom devices 😀Thanks

SteveBamfordDriver

asked in NQE Discussions

Arista APs Validate only authorised SSIDs have been configured.

This NQE will validate that only the SSID’s in allowedSSID’s can be used, if it does not exists in the list it will fail the query.Taking advice from an earlier post I have used blockMatches this time, there is some tuning required to remove the duplicates as a result of the table have the entry for each /** * @intent Validate that the arista AP's have only the approved SSID's configured * @description This will check each arista AP for the approved SSIDs and violate when ther SSID does not match * the allowedSSID list. * * You will get multiple entries due to the VAPS list having an entry for each frequency. This will be a future * fix to show only once when the unauthoirised SSID exists */pattern = ```VAP-ID : {VAPId:string} ESSID : {SSID:string}```;// Replace the SSID's with your own.allowedSSID = ["ssid1","ssid2","ssid3"];foreach endpoint in network.endpointswhere endpoint.profileName == "Arista Wireless AP's"foreach command in endpoint.cliCommandRespons

SteveBamfordDriver

asked in NQE Discussions

Arista WIFI Validate AP Version

Following on from I thought I would share this NQE if others are using Arista AP’s and want to maintain version numbers across their estate. /** * @intent List all Arista AP's and there software version. * @description List all Arista AP End Points and there software version. */allowedVersion = "18.0.0";foreach endpoint in network.endpointswhere endpoint.profileName == "Arista Wireless AP's"foreach command in endpoint.cliCommandResponseswhere command.command == "show device info"let ParsedResponse = parseConfigBlocks(OS.UNKNOWN,command.response)foreach line in ParsedResponselet modelNo = patternMatch(line.text,`Device Model : {string}`)foreach line in ParsedResponselet software = patternMatch(line.text, `Device Version : {string}`)foreach line in ParsedResponselet serialNo = patternMatch(line.text,`Serial Number : {string}`)where isPresent(modelNo)where isPresent(software)where isPresent(serialNo)select { violation: software != allowedVersion, name: endpoint.name, location

cariddirSpotter

posted in NQE Discussions

Enhancing Inventory with NQE

I have put together a query to enhance inventory by adding LDoS dates and ‘approved software’. It has greatly improved our Life Cycle Mgmt. conversations. The CSV Files reside separately in a ‘standards’ folder. (there are just too many fields to keep in the same script).The resulting output provides:Vendor | Hostname | Model | Location | Vendor LDoS Date | HW Compliance Date | Current OS | Approved OS | Compliance to OS | Replacement Mode | And more /** * @intent Inventory of all devices in FN * @description Take inventory and then cross check them against the CSV Files for SW/HW info**/ import "Home/Network Standards/01_NetworkVars/99_Support_Detailed";foreach device in network.deviceslet platform = device.platformlet snapshotInfo = device.snapshotInfoforeach entry in deviceSupportDetailwhere entry.Model == platform.modellet LDOS = entry.HW_LDoSlet STATUS = entry.LCMlet comma = ", "let ApprovedSW = entry.SW_N + comma + entry.SW_N1 + comma + entry.SW_N2let Replacement = entry.HW_Repl

Tyson HenrieEmployee

asked in Koan Challenges

Play our NQE Koan Challenge - Group People by Age

Hello NQE Enthusiasts, I’ll try to post a new Koan Challenge every two months. ChallengeThis task is to take the following table and group people by age. Input [{ Name: "Bob", Age: 21 }, { Name: "Sam", Age: 19 }, { Name: "Jill", Age: 18 }, { Name: "Jim", Age: 21 }, { Name: "Sally", Age: 19 } ]; Example Result[{Age: 21, Count: 2}...] Hinthttps://fwd.app/docs/nqe/guides/comprehensions/#group-by-qualifier Contributions: Unclaimed

ChristopherEmployee

posted in NQE Discussions

Using an NQE Query in Inventory+ with Diffs

It is possible to compare the output of an NQE query using the Diffs feature by first adding the NQE query to Inventory+.Consider the following NQE query, which lists all the static routes on all devices. (Note that the next hop is listed in this example provided that the next hop is an IP address. The query could be expanded to handle other types of next hops). getStaticRoutes(routingTable) = foreach ipEntry in routingTable.ipEntries foreach nextHop in ipEntry.nextHops where nextHop.originProtocol == OriginProtocol.STATIC select { prefix: ipEntry.prefix, nextHopType: nextHop.nextHopType, nextHop: ipEntry.nextHops };foreach device in network.devicesforeach networkInstance in device.networkInstanceslet afts = networkInstance.aftswhere isPresent(afts.ipv4Unicast)let ipv4Unicast = afts.ipv4Unicastlet staticRouteCount = length(getStaticRoutes(ipv4Unicast))where staticRouteCount > 0foreach entry in getStaticRoutes(ipv4Unicast)select { Device: device.name, "Network Instanc

Tyson HenrieEmployee

posted in NQE Discussions

Input device under maintenance. Get back the BGP peers and outbound interfaces between the devices.

I provided a query for doing this some time ago. However, it was written for running where the Data Model did not have as many BGP elements as the current Data Model. Now that there are more BGP elements in the data model it makes this query much simpler. Which also means it runs faster.The inspiration for this query was a customer that run BGP between pretty much all devices. This is why it is only based on BGP peers./** * @intent Input the device under maintenance. get the list of BGP peers and outbound interfaces * @description This is a Parameterized Query. You input the devicename string. * it will look for the BGP peers of that devices, plus determine the interfaces that connect the * devices together. This way you can mute the alarms for the BGP peers and links before a maintenance window. */import "@fwd/L3/Interface Utilities"; //getL3Interfaces(device: Device)getPeerInfo(neighbor, sourceRouterId) = max(foreach device in network.devices where device.name == neighbor.

RenataBudkoEmployee

published in NQE Discussions

Enhancing STIG Compliance Checks with Parameterized QueriesIntermediate

When working with STIG compliance checks, a common challenge is that many checks only verify the existence of a control—not whether the configured values align with site-specific requirements. This can be a problem when compliance policies vary across different data centers and locations.With a little work, it is easy to customize the queries. Benefits are apparent. You get: more precision to verify your specific ACL and group names Verifying differing configuration policies across multiple data centers or locations Improved compliance and governance across a variety of configurations and regionsThere are two approaches you can use to customize queries.Copy the query and modify the block match to include the value of your parameter Parametrize the query and use your location-specific string value as a query parameter. Parameterized queries are slightly more complex but make existing STIG checks - and other NQEs - more flexible.Let’s use an example of a library STIG query /Forward Libra

Rohit_809 KumarSpotter

asked in NQE Discussions

Merge multiple NQE Query in single view.

we are using 4 different query to get some information in FWD , is their any way to merge these queries into one and get the output in single file.Query 1 for NTP Fortinet :- pattern_fmg = ```config system ntp config ntpserver edit 1 set server {ntp1:string}```;pattern_servers = ```config system ntp config ntpserver edit 2 set server {ntp2:string} ```;pattern_servers2 = ```config system ntp config ntpserver edit 3 set server {ntp3:string}```;// Loop through list of devices finding those that are Fortinet// and store outputs of commands in the 'outputs' variable// Loop through list of devices finding those that are Fortinetforeach device in network.devices/* where device.platform.vendor == Vendor.FORTINET */let outputs = device.outputs// Loop through the commands in the outputs var, looking for custom// commands that are from 'show system ntp' and store in a variable called central_mgmtforeach command in outputs.com

1
2
3
4
...
10

Page 1 / 10

AricaFNhas earned the badge NQE Contributor
CarlBhas earned the badge Community Champ Award
Christopherhas earned the badge Community Champ Award
Rohit_809 Kumarhas earned the badge NQE Collaborator
Vladi Bhas earned the badge Community Champ Award

Show all badges

Powered by Gainsight

Terms of Use Cookie settings

Sign up

Already have an account? Login

Select a login option:

Register / Login Forward Employee Login

Welcome to the Forward Networks Community

Select a login option:

Register / Login Forward Employee Login

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK