General Discussions

Sometimes a path search may not present the results you expect. When engaging with support regarding a path search issue, you may be asked to provide a snapshot with the relevant path search data. To capture a snapshot of a path search, first perform the path search in question. In this example, we are performing a simple path search from atl-ce01 to atl-core-pe01: Now, press and hold the Alt or Cmd key, and the icon on the far right of the query bar will change from ‘Copy Query’ to ‘Export Query’. Click on the ‘Export Query’ icon: The Export Snapshot wizard will now display all devices relevant to that path, and allow you to add any additional devices you wish

I am working on automated resolution of failed connections.   Two questions: (1) On this page in the documentation: /docs/nqe/data-model/type_devicecollectionerror/  there is a list of errors but no descriptions.  Can someone provide? (2) I am studying a failure report and the Connect Test Status notes each of these in PHASEs which seems to imply that each is determined in a sequence.  Is there a list of PHASE order for these? AUTHENTICATION_FAILED-AUTHENTICATION PHASEAUTHORIZATION_FAILED-AUTHORIZATION PHASECONNECTION_FAILED-CONNECTION PHASEDEVICE_IS_CHILD_CONTEXT-SETUP PHASEDEVICE_TYPE_MISMATCH-TYPE_DISCOVERY PHASEDEVICE_TYPE_UNDETECTED-TYPE_DISCOVERY PHASEGUEST_MISSING_HOST_RESULTS-SETUP PHASEJUMP_SERVER_AUTHENTICATION_FAILED-CONNECTION PHASEJUMP_SERVER_CONNECTION_FAILED-CONNECTION PHASEOTHER-AUTHORIZATION PHASEPING_FAILED-CONNECTION PHASEPORT_REACHABILITY_FAILED-CONNECTION PHASEPRIV_PASSWORD_ERROR-SETU

Background on the Jump Server for FWD Enterprise Forward Enterprise obtains data for path analysis primarily using industry-standard command-line interface (CLI) access. This is typically done with secure shell (SSH) read-only credentials provided to the platform so that configuration and state can be retrieved. In certain customer instances, it is required to limit SSH access to a specific host or hosts, which will more effectively audit and maintain the security of network devices. This is commonly known as the bastion or jump server. A jump server, jump host, or jump box is a computer on a network used to access and manage devices in a separate security zone. The most common example is managing a host in a DMZ from trusted networks or computers. A jump server is a hardened and monitored device that spans two dissimilar security zones and provides a controlled means of access between them. User access should

This is both incredibly amazing and absolutely frightening. The cat is extremely out of the bag now.Boston Dynamics put a generative AI into the robot dog Spot. And there are different personalities.  

If you are in/near the Atlanta area on Nov 14, please join me at this Optm event where I will presenting with other executives from Optm, Infoblox, BigPanda, and LogicMonitor.  I’d love to connect in person, and happy to have additional conversations. Event Registration

We had a fun costume contest for Forward employees and their fur babies. Here are the winners!Our co-founder, Peyman, won Best Costume!Our infra engineer, Manuel, won Most Original Costume!Our apps engineering manager, Gayathri, won Scariest Costume!Gayathri’s dog, Nash, won Best Pet Costume!What do you t

You can now attach EC2 interfaces to multiple different VPCs in AWS: https://aws.amazon.com/about-aws/whats-new/2023/10/multi-vpc-eni-attachments/ The implications of this are pretty huge - previously to control access (with a firewall, etc) between VPCs you needed to use a Transit Gateway, generally associated with a centralized applicance via a Gateway load balancer.  This solution is great and scales very well, but its probably overkill for smaller environments. What if you only have 2-4 VPCs?  This solution would work great - simple attach your NVA interfaces to different VPCs and modify your route tables accordingly.  This eliminates the cost and complexity of TGWs, keeping all the performance benefits. What use cases can you see for this new functionality?  Off the top of my he

Is it possible to use a SSH jump server to log into a Telnet server, and then from there log into each of the devices?

I’d like to use FN APIs to integrate with Splunk and SIEM / Security systems. Has anyone else done this?

Are there any character restrictions for tags? I would like to use ’ : ‘ in a tag as a namespace but want to be sure there won't be any caveats. I don't see anything in the docs.

How do you create a custom SSL certificate for the fwd web interface?

Is there a way to connect external sources to a postgres database or consume a postgres DB backup? We cannot collect directly from type 1 encryptors but we can get a backup of the encryptor manager DB

For Path Search Ranking, will devices that have a more specific subnet always rank higher than devices with a less specific subnet as the ingress device for a path?

We want to run two clusters in HA Active/Standby. We deployed one cluster yesterday and licensed it. We deployed the second cluster today. I am unclear on how we would license the second cluster. I assume we need a second deployment, but can I apply the same license to that new deployment, or would it require a new license as well?

Snapshots stopped working several days ago. Is there a way to check logs to determine the root cause?

Can you confirm where Forward would need access to upgrades so we can add those policies to our Firewall? (Ex AWS, S3, Gitlab etc). Also, if there’s any other reason Forward Networks would need to reach externally.Thanks