Community

Connect with others to answer questions, gain new insights, and grow your networking knowledge.

167 Topics

natEmployee

We had a fun costume contest for Forward employees and their fur babies. Here are the winners!Our co-founder, Peyman, won Best Costume!Our infra engineer, Manuel, won Most Original Costume!Our apps engineering manager, Gayathri, won Scariest Costume!Gayathri’s dog, Nash, won Best Pet Costume!What do you think of the costumes? Do you have any fun ones to share of your own? 🎃

10 months ago

captainpacketEmployee

posted in The Paddock 💬 👋

Attaching instances to multiple VPCs

You can now attach EC2 interfaces to multiple different VPCs in AWS: https://aws.amazon.com/about-aws/whats-new/2023/10/multi-vpc-eni-attachments/ The implications of this are pretty huge - previously to control access (with a firewall, etc) between VPCs you needed to use a Transit Gateway, generally associated with a centralized applicance via a Gateway load balancer. This solution is great and scales very well, but its probably overkill for smaller environments. What if you only have 2-4 VPCs? This solution would work great - simple attach your NVA interfaces to different VPCs and modify your route tables accordingly. This eliminates the cost and complexity of TGWs, keeping all the performance benefits. What use cases can you see for this new functionality? Off the top of my head, you could also provide remote access without using a VPN gateway too. I’m sure there are more. This also models correctly out of the box in Forward as well :)

10 months ago

MikeCommunity Manager

posted in Videos

Demo Tuesday - 10/24 - It’s not dark magic — it's Forward Enterprise

WHO DARES TO INVESTIGATE THE DARK PRESENCE WITHIN THE NETWORK DURING AN AUDIT? Network modeling illuminates the dark corners of your network, so you don't have to be scared anymore. No boogeyman can derail your network audit because the 'digital twin' models all of your network devices, even the cloud, with mathematically-accurate precision. It’s the single-source of truth trusted by the world's largest networks. It’s not dark magic — it's Forward Enterprise.

10 months ago

gschmittRamping Up

asked in Product Discussions

Log into devices using an SSH jump server to connect to a telnet server

Is it possible to use a SSH jump server to log into a Telnet server, and then from there log into each of the devices?

10 months ago

GaryBEmployee

posted in NQE

Complex state parsing example using Juniper inventory Part 2

In Part 1 we introduced several techniques for dealing with semi-structured data to parse a Juniper Inventory. In Part 2 we will leverage a few more techniques to parse a more complex output. 1. Let’s setup our test by grabbing the output from the “show chassis hardware” command. remember to use the multi-string block delimiter “””We have 5 columns Item, Version, Part number, Serial number and Description, but we are only interested in three: Item, Serial number and Description. output = """Hardware inventory:Item Version Part number Serial number DescriptionChassis JN2221837ABC MX960Midplane REV 03 710-013698 TR0123 MX960 BackplaneFPM Board REV 03 710-014974 JZ1111 Front Panel DisplayPDM Rev 03 740-013110 QCS1012345U Power Distribution ModulePEM 0 Rev 07 740-029344 QCS1012346U DC 4.1kW Power Entry ModulePEM 1 Rev 07 740-029344 Q

10 months ago

GaryBEmployee

posted in NQE

Complex state parsing example using Juniper inventory Part 1

Sometimes you need to parse out information that is not in the NQE data model for various reasons. It maybe device specific information that is not generalizable across vendors, or not generally useful in dataplane analysis but maybe important for operations. Importing this data is beyond the scope of this post but you can read more about it here: Getting Custom CommandsFirst, I am going to demonstrate how you build up your parsing chops by leveraging a testing approach to NQE, then will demonstrate how this can be applied to your collection data. Setting up your testing. We need to represent the data that our custom command will import into the snapshot. We can represent this by setting a variable to a multiline string using the delimiter ”””output = """Item Version Part number Serial number FRU model numberMidplane REV 03 710-013698 TR0001 CHAS-BP-MX960-SFPM Board REV 03 710-014974 JZ2323 CRAFT-MX960-SPEM 0 Re

10 months ago

GaryBEmployee

posted in NQE

Evaluating ACL rules from configuration to find last entry

I was asked by a customer to write an NQE check that would trigger a violation if there was not an explicit deny rule at the end of an ACL list. This query breaks down the acl list by acl name leveraging the group-by qualifier. We are also leveraging the `maxBy` function to find the last entry by leveraging the lineNumber property. // /**// * @intent Find acls by name, count and last entry// * @description test if there is an explicity deny rule at end of acl list// */acl_pattern_1 = `access-list {aclName:string} {!"remark"} {action:string} {rest:(string*)}`;maxLine(l) = l.line.lineNumber;foreach device in network.deviceswhere device.platform.vendor == Vendor.CISCOlet acls = patternMatches(device.files.config, acl_pattern_1)let acl_groups = (foreach acl in acls group acl as group_acls_by_name by { deviceName: device.name, aclName: acl.data.aclName } as v select { device

10 months ago

cariddirSpotter

posted in NQE

BFD Checks - Arista & Cisco-IOSXE

This is a check I wrote to check BFD Status on Arista and IOS-XE as a single combined query. Unfortunately, I can’t change the name of the title to include Arista && IOS-XEscreenShot /*** @intent BFD State Arista & IOS-XE* @description Add Command 'show bfd neighbors || peers' and report status - apply to EOS and IOX-XE Devices**/EOS_BFDPattern = ```{DstAddr:ipv4Address} {MyDisc:number} {YourDisc:string} {Interface:string} {Type:string} {LastUp:string} {LastDown:string} {LastDiag:string} {State1:string} {State2:string} {State3:string} {State4:string} ```;iosXE_BFDPattern = ```{ip:ipv4Address} {LD:string} {RD:string} {State:string} {Int1:string}```;// Define EOS FunctionArista_BFD = foreach Device in network.deviceslet Platform = Device.platformwhere Platform.os == OS.ARISTA_EOSlet Outputs = Device.outputsforeach Command in Outputs.commandswhere Command.commandText == "show bfd peers"let parsed = parseConfigBlocks(OS.ARISTA_EOS, Command.response)let matchData = blockMatche

10 months ago

matthoneaEmployee

posted in Security

Cisco IOS XE CVE-2023-20198 Check

Hello, Cisco rececently annouced CVE-2023-20198 with a CVSS critical rated vulnerability for IOS XE systems with a hardcoded default password in the web gui. There is no fix available.https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z Companies need to ensure this feature is set to OFF. Even with the rapid advisory, it takes security companies and aggregators a little bit of time to input new external data into the database, ourselves included. But maybe you need to know right now. The good news is that we already have the data, we just need to do a quick check. Check out the following NQE that you can search right now /* CVE-2023-20198 NQE check 16OCT2023 ForwardNetworks Community Portal*/http = `ip http server`;http_active_none = `ip http active-session-modules none`;https = `ip http secure-server`;https_active_none = `ip http secure-active-session-modules none`;foreach d in network.deviceswhere d.platform.os ==

10 months ago

GTurnerEmployee

posted in NQE

Fun with NQE parsing and data extraction.

Many customers often ask me about digging into data, especially when it involves sifting through device status or custom command outputs. Sometimes, it's a piece of cake to handle because the data is nicely structured, but other times, it's like solving a puzzle. Just last week, I was helping out a customer who needed to extract security policy data from their enforcement points to keep tabs on various compliance matters. The data they had to deal with was all over the place – lines of varying lengths, multiple strings scattered within the lines, and positional changes for the data we needed.This got me thinking, and I wanted to share some techniques for handling these tricky data chunks. I can't share the exact customer query with you, but I've thrown together a sample query to show one way of tackling this.Imagine you've got data like this:"Don't teach me how to extract stuff with IP address 10.1.1.1 and float 10 from string." "Please teach me how not to extract stuff with IP addres

10 months ago

cariddirSpotter

posted in NQE

NQE Validate DNS Configuration on Arista & Cisco

Audit our DNS configuration on Arista Devices and Cisco Devices - Would like to be able to combine the script as a single check, and started it (Second Code Script), but it’s not working yet, I need a little tutoring. /** * @intent Audit DNS Configuration on Arista * @description Searches through the running configuration for a pattern match. */DNS_Standard = ["name-server 1.7.7.7 & 1.7.7.8", "dns domain net.xyz.com ", "ip domain lookup source-interface Loopback0"];AristaPatternDNS =```ip domain lookup source-interface Loopback0dns domain net.xyz.comip name-server vrf default {ipv4Address} ip name-server vrf default {ipv4Address} ```;/* Select a list of devices by vendor */foreach device in network.deviceswhere device.platform.vendor == Vendor.ARISTA || device.platform.os == OS.ARISTA_EOSlet outputs = device.outputsforeach command in outputs.commandswhere command.commandType == CommandType.CONFIGlet response = command.response/* parse out the pattern defined above from the respons

10 months ago

MikeCommunity Manager

published in Videos

Demo Tuesday 9/26 - Blast Radius

I’m taking the show on the road! Watch how the Blast Radius feature can localize a compromised host in seconds, even while on vacation, with Forward Enterprise. Live from Forward Networks HQ in sunny Santa Clara, California.

311

10 months ago

MikeCommunity Manager

published in Videos

Demo Tuesday 10/10 - No one can hear you scream in outer space

No one can hear you scream in outer space when the network is down! Join me to see where forward can help!

110

10 months ago

MikeCommunity Manager

published in Videos

Demo Tuesday 9/12 - Root Canal? Missing SME? Can Forward Help?

What happens when you are the sole subject matter expert on a part of the network, and something happens to it while you are in the middle of a root canal? Can Forward Enterprise help? Watch to find out!

10 months ago

MikeCommunity Manager

published in Videos

Demo Tuesday 8/29 - Attack Surface Management, Zero Trust, and Vulnerability Management

Tuesday, Tuesday, Tuesday! It's a DEMO-lition derby of Attack Surface Management, Zero Trust, and Vulnerability Management-- all with the world's most extreme network digital twin, Forward Enterprise. I am, n the driver's seat, so buckle up and tune in!

120

10 months ago

MikeCommunity Manager

published in Videos

Demo Tuesday - 8/15 - Forward Demo

Grab a fistful of tacos and watch me show you what Forward Enterprise can really do.

140

10 months ago

daveteeCommunity Manager

posted in The Paddock 💬 👋

👋 Welcome to the Paddock - an open space for conversation! 🗣️

We're excited you’ve joined our community where meaningful discussions, varied perspectives, and open dialogue take center stage. While creating the community, we asked future members what was important to them. The resounding response was a place to share not only networking questions, but also a place to share a wide variety of ideas and connect with others. The Paddock is all about sharing ideas and exploring the possibilities for networking and beyond. So, jump right in, share what’s interesting to you and let's get this conversation started!

10 months ago

KachowRamping Up

asked in Product Discussions

Splunk / SIEM Integration

I’d like to use FN APIs to integrate with Splunk and SIEM / Security systems. Has anyone else done this?

11 months ago

captainpacketEmployee

published in Cloud

From Network to Cloud Engineer: How to Develop Your Cloud Networking Skills

After 20 years of working as a networking engineer, Craig transitioned his skills to become Forward Networks' cloud engineering expert. The transition was anything but intuitive because things work differently in the cloud.Learn how Craig made the journey, and how you can leverage your traditional networking skills in the three major public cloud environments (AWS, Google Cloud Platform, Azure). Craig will also offer advice on connecting your home lab to the public cloud for a deeper dive into cloud networking.Watch the webinar

250

11 months ago

mrollinRamping Up

asked in Product Discussions

Character Restrictions on Tags

Are there any character restrictions for tags? I would like to use ’ : ‘ in a tag as a namespace but want to be sure there won't be any caveats. I don't see anything in the docs.

11 months ago

NovakRamping Up

asked in NQE

Building new NQE dashboards

Is there a reference to building new dashboards using NQE derived values as inputs?

11 months ago

mrollinRamping Up

asked in Product Discussions

How to create SSL Certs for Forward?

How do you create a custom SSL certificate for the fwd web interface?

11 months ago

KachowRamping Up

asked in NQE

Adding additional values as columns

Hello Team, we have an NQE thatsearches all L2 switches obtains each interface status obtains speed obtains sfp informationfor all ports in up state. So far, we have the following:foreach device in network.devicesforeach item in device.platform.componentswhere item.partType == DevicePartType.TRANSCEIVERlet interface = (foreach interface in device.interfaces where isPresent(findInterface(device, item.name)) where interface.name == findInterface(device, item.name).interface.name select interface)where length(interface) == 1let int = min(interface)select { deviceName: device.name, iface: int.name, speed: int.ethernet.negotiatedPortSpeed, partType: item.partType, partName: item.name,} Is there a way we could extract and add the below underlined in BLUE as additional columns as well? Thanks in advance for your time and help

11 months ago

cHaRamping Up

asked in Product Discussions

How to connect external data sources?

Is there a way to connect external sources to a postgres database or consume a postgres DB backup? We cannot collect directly from type 1 encryptors but we can get a backup of the encryptor manager DB

11 months ago

gschmittRamping Up

asked in NQE

Collecting device info based on CSV of IP addresses

I want to feed a list of ~5K IP addresses into forward and track the IP down to whatever info is available (device interface, standby address, device interface neighbor, host).I have two functions that build the lists of records that I need to join by ip address.FromCSV (~5K records) and allKnownIps (~200-300K records)What is the most efficient / elegant way to join essentially join these tables?I tried to build the smaller list first and then build the known IP list only if there is a match and then ran a nested loopcsvListIPs = (foreach ip in FromCSV select ip.ipAddr);// List of ~5K IPsallknownIpList = (foreach knownIp in allKnownIps where knownIp.ipAddr in csvListIPs select ip);//Filter for only known IPs in CSVlistforeach knownIp in allknownIpListforeach csvIP in FromCSVwhere knownIp.ipAddr == csvIP.ipaddrselect{};So I have two questions:Is there a more elegant way to do this? 5K IP's trying to match against the 250K Potential IP's (I have normalized everything so that it's ipv4

11 months ago

Page 6 / 7

Community

Sign up

Select a login option:

Welcome to the Forward Networks Community

Select a login option:

Scanning file for viruses.

This file cannot be downloaded