Skip to main content

Platform Discussions

Get answers to your questions about the Forward Enterprise platform, APIs, Integrations, Custom Commands, Synthetic Nodes, and more.

  • 55 Topics
  • 0 Replies
55 Topics
D
DannyRRamping Up
asked in Forward API
API Path Searching with FQDNs

Hello Forward Networks!I have a question regarding if it's possible to add support to resolve FQDNs in the Path Search API? Or would we have to rely on our own DNS servers to make the resolutions first to then add the discovered IP Address to the source or destination. Can it be possible for Forward Networks to model FQDNs as independent objects? Apologies if this seems like a silly ask!Thank you

252
D
Christopher
Employee
ChristopherEmployee
posted in Integrations
How to Integrate ServiceNow (SNOW) with Forward Enterprise

Forward Enterprise can integrate with ServiceNow in the following ways: Incident Management - Opening or updating a ServiceNow ticket based on an intent verification failure or change:Forward Docs - Create ServiceNow Incidents CMDB Integration - Pushing updates to the CMBD database with data from Forward Enterprise:Forward Docs - CMDB Integration As a Data Connector with NQE - Extracting data from ServiceNow using an NQE query for use in the NQE Library, Inventory+, or a Decorator by configuring ServiceNow as a Data Connector:Forward Docs - Data Connectors From ServiceNow - By using Flow Designer or Business Rules to access the Forward API. Consult ServiceNow documentation and access one of Forward Enterprise’s API endpoints listed here:Forward Docs - API----The first two integration types above are enabled under Settings > Integrations:  

703
L
V
Spotter
VarunS
asked in Forward API
API URL

need to get api nodes url

602
L
R
Spotter
Rohit_809 KumarSpotter
asked in General Discussions
How can i remove some static values for output.

we are using below NQE Query to get the NTP Server details , i need to remove some static value in  server coloum, ciscontppattern=``` ntp server {server:string}```;getServers(device) =  foreach match in blockMatches(device.files.config, ciscontppattern)   select { serverIP: match.data.server}; foreach device in network.deviceslet platform = device.platformwhere device.platform.vendor == Vendor.CISCO  select {  device: device.name,   vendor: device.platform.vendor,    tags: device.tagNames,    os: device.platform.os,    OSVersion :platform.osVersion,  servers: (foreach server in getServers(device)            select server.serverIP)}  Example : i dont want to show entry those have server value - “Inte”

152
Tyson Henrie
Employee
S
Driver
SteveBamfordDriver
asked in General Discussions
Arista WIFI

Hi allHas anyone onboarded Arista WIFI yet, the models we have are managed centrally via CV-CUE the Wifi version of cloudvision, although you can extract some commands via SSH.Had a quick look around and couldn’t find anything, I will in the meantime dig around about custom devices 😀Thanks

605
S
Driver
D
DanORamping Up
asked in Forward API
Adding/Deleting devices with API

We currently use Ansible playbooks to add or delete network devices to our various NMS tools. I want to add Forward Networks to this job so newly added devices or old devices being removed are part of this automation. When FN discovers a device it appears to use sysName for the “Name” of the device. The API however requires me to provide the name value. Is there anyway to just use the management IP to add it to FN and have FN set the name like it does during its own discovery?

371
Christopher
Employee
seanreuter
Employee
seanreuterEmployee
posted in General Discussions
My Networking Journey - Evolution from Coffee to Code

In the early days of my Air Force career, the tech control facility was filled with the aroma of coffee and the buzz of technology. Each morning, my role was clear: brew the perfect cup for my boss and run countless validation checks through the CLI, ensuring each day started on the right note. Does this sound familiar? Maybe not the coffee but certainly hunched over the keyboard staring at a CRT screen using the CLI to search across hundreds of devices. These were monotonous tasks, logging in to each device one after the next, looking for significant events and up/down statuses, then documenting that information to provide an update to the division chief. It made me wonder if there was a way to automate this drudgery.  It has been 20 years since then and I am now an intern with Forward. It has been a fantastic opportunity to advance my skills in Linux, Python, and deepen my understanding of the role of DevOps in technology organizations.  Key takeaways I have observed at Forward: Coll

440
seanreuter
Employee
H
hdrewRamping Up
asked in Integrations
Forward Network application (system) monitoring

can Forward Network application (itself) integrate with Grafana, or Sysdig for monitoring the system health (i.e. cpu, memory, logfile, processes, filesystem) attributes. would like to send to dashboard tier team monitoring

1163
J
Employee
C
Employee
ChiaraEmployee
published in General Discussions
A Deep Dive into Multicast Network Analysis with Forward Enterprise

 🌟 Revolutionize Your Multicast Network Management with Forward Enterprise 🌟Managing multicast networks can be a daunting task, but Forward Enterprise makes it seamless with its advanced visibility, analysis, and troubleshooting. This demo showcases how the platform simplifies complex operations, offering unparalleled control and insights into your multicast network infrastructure.  Forward Enterprise - Multicast BenefitsSimplified Multicast Management: With an intuitive interface and dynamic topology maps, Forward Enterprise makes it easy for both novices and experts to manage and analyze complex multicast networks efficiently. Comprehensive and Actionable Insights: The platform provides a unified view of network configurations, paths, and device states, empowering administrators with the knowledge to optimize operations and prevent issues. Proactive Troubleshooting and Time-Saving Tools: Advanced search and validation features enable quick diagnosis and resolution of network proble

530
C
Employee
Mike
Community Manager
MikeCommunity Manager
published in General Discussions
Mitigating Vulnerabilities in Palo Alto Networks DevicesBeginner

 Recently, two critical vulnerabilities (CVE-2024-0012 and CVE-2024-9474) were discovered in Palo Alto Networks' PanOS operating system. CVE-2024-0012 lets an attacker gain admin access and exploit other vulnerabilities like 2024-9474. These vulnerabilities allow attackers to gain admin privileges and plant malicious code, potentially giving them deeper access to company networks. The highlights are available below. Watch the video for the full story.Here’s how you can address these threats: Understand the Threat: The vulnerabilities enable unauthorized access, risking the security of your firewalls and networks. CISA has issued directive BOD 23-02. This directive outlines how organizations can reduce their attack surface from misconfigured management interfaces. Leverage Forward for Validation: Identify devices exposed to these vulnerabilities. Filter and prioritize affected devices, especially those connected to the internet The Forward platform provides a nightly update of CVE d

400
Mike
Community Manager
captainpacket
Employee
captainpacketEmployee
posted in Forward API
Automating Cloud Collection with Forward Networks Using AWS EventBridge

Keeping your network source of truth accurate is critical in cloud environments that evolve rapidly. Forward Networks’ cloud modeling capabilities make it easier to understand your network state, but manual snapshot collections for every change can be time-consuming. To solve this, I recently built an automated workflow using AWS EventBridge to trigger Forward Networks’ cloud snapshot collections for relevant AWS network changes. In this post, I’ll share how to set up this integration, including tips to limit the number of collections and keep costs within the AWS Free Tier. The Challenge AWS environments experience frequent changes, such as:• Creating or deleting VPCs.• Modifying route tables or DirectConnect links.• Updating Elastic Load Balancers. Manually capturing snapshots for every change isn’t practical, and triggering collections for every event might overwhelm your workspace. I wanted a solution that:1. Automates snapshot collection for specific, relevant changes.2. Limits un

530
captainpacket
Employee
R
Spotter
Rohit_809 KumarSpotter
asked in General Discussions
Information required to add AVI ON FWN using https

How can i add AVI LB on FWN , TO use port https ,443 .?

373
V
Employee
C
Spotter
CarlBSpotter
asked in Synthetic Nodes
Can a synthetic node be exported or downloaded to be recreated in a different network?

I have created a synthetic node inside a workspace to run down the various connections for a complex multibranch setup with multiple MPLS vpns and Internet VPNs. Is there a way to move or download the synthetic nodes so I can recreate them inside the parent network now that I have confirmed the accuracy inside the workspace? Note that I am trying to move it from a workspace back to the parent network - otherwise I would just recreate the workspace from the parent and include the synthetic.

374
Christopher
Employee
R
Spotter
Rohit_809 KumarSpotter
asked in Custom Commands
How can i add Custom command on FWN for fortinet firewall

How can i add Custom command for fortinet. command that i am looking. show system dns. show system ntp. show system central-management config system central-management. 

19018
R
Spotter
B
BillWRamping Up
asked in General Discussions
run nqe immediately after snapshot completes

is it possible to run NQEs immediately after a snapshot completes?  If Forward can baseline what NQEs are always run after a snapshot completes (possibly this data baseline is based upon a period of time such as 30 days or some admin defined time period).  Administrators can use this baseline data to flag those NQEs of priority to run immediately after the snapshot completes.  in this way, results from priority NQEs are immediately available (from cached results) for applications to use with minimal delay.

301
RobertWelch
Employee
elyor_khakimov
Employee
elyor_khakimov
published in General Discussions
Submit Your Ideas for Network Configurations to Analyze in the Forward Networks Net3 Lab!

Hey, Forward Community Members!We're thrilled to invite you to submit your ideas for network configurations you’d like to see analyzed within our Net3 lab network. Whether it's testing new scenarios, troubleshooting common issues, or exploring unique configurations, we want to know what network setups you’re interested in. Example lab scenarios include:Layer 2  Host-to-Host communication in VXLAN EVPN  fabric based on  Arista STP/RSTP Layer2 pods built  with Cisco or  Arista switches Layer 3 MPBGP with VXLAN EVPN forwarding (Arista vEOS) IPv6/IPv4 Dual stack forwarding using routers/switches by Cisco and Arista, as well as Palo Alto firewalls SD-WAN Viptela/Catalyst SD-WAN As well as other configurations including Network Services - Load-balancer single-arm (SNAT/DNAT): A10 And many others!  What network configuration would you like to see? Our Net3 lab network is constantly expanding with a diverse set of devices, offering a robust environment for analysis and experimentation. H

380
elyor_khakimov
Employee
R
Spotter
Rohit_809 KumarSpotter
asked in Custom Commands
Custom command format for Foritnet

we are using below format to collect the data from Fortinet firewall for custom command. endconfig globalshow system dnsshow system ntp can anyone check and confirm ,these will not impact anything ,if i remove config gloabl , than command will not run. 

382
R
Spotter
G
Spotter
gbaronSpotter
asked in Custom Commands
Collecting custom command "show configuratation" within a a Cisco FPR running on FXOS

For reference - we recently were able to get Cisco Firepower ASA operating as FTD and FPRs on IOS FXOS, for the first time.  With that…. Since none of the default commands produce any data in the state files, we are trying to use custom commands.  Right now, when performing a show run, it comes back with 25 lines of configs, but then stops at --More--, which is when a user via cli would would push a button.  We have lots of other devices running custom commands that do not do this, so why is it happening with FXOS and how can we work around it? Also, the FTD devices reporting all state files properly, its just the FPRs that are having issues.

631
V
Employee
G
Spotter
gbaronSpotter
asked in General Discussions
how to find postgress version

What command can be ran from the CLI to find the postgres version?

504
G
Spotter
D
DannyRRamping Up
asked in General Discussions
How do I add a device from the parent network to an existing workspace network?

I was helping some folks in getting familiar with Forward Networks, we were having trouble in adding in new devices (that already exist in the parent network) in to the already created workspace. The existing options to add devices in the workspace looks to only include ways to create new connections to those devices. But I did not see any way for me to pull in existing devices from the parent network, after the workspace was already created. Does anyone have any insight into this?

853
davetee
Community Manager
G
Spotter
gbaronSpotter
asked in General Discussions
SSO Error

We were finally able to configure and get SSO online and operational this past week in our Dev environment, and pushed it in to the production world yesterday.  After running fine for about 10-12 hours, we came in this morning to the following error: SAML validation failed.  Invalid assertion [insert a bunch of random letters and numbers] for SAML response [insert more random letters and numbers]: Assertion IssueInstant was invalid, expiredContact your Org Admin to resolve the issue. I check with the in group that manages SSO and they claim nothing has changed on their end, so now I must ask:  How do we get past this so I can turn SSO back on? P.S. we are on base 11 app version 24.8 (rolling to 24.9 in a couple hours)

792
G
Spotter
D
Spotter
dakotaglorySpotter
posted in General Discussions
Unable to snapshot; no sources configured when only custom source enabled

Scenario: Disabled all classic and all but one custom source in order to speed up and test an NQE with extractJson on an endpoint for a specific device. Observation: Unable to take a snapshot without at least one Classic source enabled.

302
D
Spotter
D
Spotter
dakotaglorySpotter
posted in General Discussions
Bulk edit for custom sources

The ability to include/exclude custom sources in bulk in the same way as classic sources would be useful if capability is possible. Secondary to an ability to bulk include/exclude custom sources would be the ability to bulk edit custom source profiles, basic authentication, SSL validation, and location.  I also noticed when editing custom source that I had to update in phases. I imported csv of devices.  I then attempted to update the profile and auth and location but it stated the source already existed and when I exited it only saved one of the settings. I then edited the src again and updated the location. If I recall it was unable to edit the tags at the same time as other config fields as well. No big deal for the few devices in my workspace and I have finished update but wanted to bring to your attention.

271
Tyson Henrie
Employee
kevinbrasher
Community Manager
kevinbrasherCommunity Manager
posted in General Discussions
Community Highlight: AI Assist for NQE

We are thrilled to announce the release of AI Assist for NQE! Whether you're new to the platform or a seasoned NQE expert, AI Assist allows you to skip complex syntax and describe what you need in plain English, making it easier than ever to create NQE queries. Generating an NQE query using AI AssistWhat is AI Assist?AI Assist enables you to write NQE queries using everyday language. Instead of manually writing complex queries, you can simply describe what you're looking for, and AI Assist will generate the appropriate NQE query for you. For example, to create a query that lists all CVEs currently impacting devices within a network, you can type, “List CVEs impacting each device,” and NQE AI Assist will instantly translate that into a valid query. How to Use AI AssistUsing AI Assist is easy. Just follow these steps:Log in to Forward Enterprise. Navigate to the NQE Library. Open the query editor by adding a new query. Click the AI Assist button. In the Generate tab, type your natural la

290
kevinbrasher
Community Manager
G
Spotter
gbaronSpotter
asked in General Discussions
Can I pull the entire CVE database

Is there a way to export all CVEs that the platform is scanning for.  We know how to get the ones that are affecting devices, but we want a list of them all, regardless of impact.

593
davetee
Community Manager
  • NQE Contributor
    AricaFNhas earned the badge NQE Contributor
  • Community Champ Award
    CarlBhas earned the badge Community Champ Award
  • Community Champ Award
    Christopherhas earned the badge Community Champ Award
  • NQE Collaborator
    Rohit_809 Kumarhas earned the badge NQE Collaborator
  • Community Champ Award
    Vladi Bhas earned the badge Community Champ Award
Show all badges
Terms of UseCookie settings