Taking you to the next level on your Forward journey
Forward Enterprise - Intermediate Topics 🟦
NQE - Finding and Visualizing Config Junk in Large-Scale Networks
The Problem with “It Doesn’t Hurt Anything”Over time, stale configuration creates real friction:Configs become harder to read and reason about Enginee...
Automating Network Compliance with NQE: The Power of Intent-Based Validation
Manually auditing DNS configuration across a large network is slow, tedious, and error-prone. Engineers are often forced to comb through thousands of...
510
Intermediate
Mastering Ordered Collections: Find and Organize Your Top Results
The new ordered collections feature streamlines how you pull, organize, and present data from your inventory. It helps you quickly surface results—lik...
Create an exportable function to validate a device setting for any device type
Is often necessary to audit the same setting across multiple vendors.For example, the NTP server setting differs across vendors.You can write an expor...
2453
Intermediate
Using NQE to Perform Configuration Benchmarks
Often you need to verify that the configuration of your network matches certain requirements. These could be standard benchmarks, such as CIS benchmar...
3102
Intermediate
Check for Unused Firewall Rules (and Catch New Ones Too)
1130
Intermediate
How to read the new CVE Detection statuses in 25.4+
I have been getting questions about interpreting the new CVE detection status in the Forward Networks Vulnerabilities application. This post explains...
This NQE uses the L3 interface info and ARP tables to find the subnets in use on your network. It lists the associated vlan, used addresses, devices,...
1690
Intermediate
SSO - How to connect Forward to LDAP/S
Integrating Forward Networks with LDAP or LDAPS streamlines user authentication, enhances security, and simplifies access control management. By lever...
It is possible to use the Forward Enterprise API to automate integration with your change control process. For example, suppose you manage Change Cont...
3340
Intermediate
Keep CVE Data Current in Air-Gapped Forward Enterprise Instances
For Forward Enterprise on-prem customers running air-gapped instances, maintaining up-to-date security data can offer challenges. This Python script a...
1651
Intermediate
Using Intent Checks to Verify a Change Control
Intent checks can be used to verify that the network is working as intended following a network change.Suppose we are performing a Change Control to r...
1610
Intermediate
Enhancing STIG Compliance Checks with Parameterized Queries
When working with STIG compliance checks, a common challenge is that many checks only verify the existence of a control—not whether the configured val...
Extract Windows PFX certificate and key with openssl
Extracting a Windows PFX certificate and key using OpenSSL is done for several reasons:Migration – Moving a certificate from Windows IIS to another se...
Path Search - Understanding the Difference Between Destination IP and To
In Forward Networks' path search feature, the two queries “from IP with Destination IP” and “from IP To IP” may look similar, but perform very differe...
