Skip to main content

Product Discussions

New to Forward Networks or a seasoned professional? You found the right place!

  • 29 Topics
  • 46 Replies
29 Topics
D
Spotter
dakotaglorySpotter
posted in Product Discussions
Unable to snapshot; no sources configured when only custom source enabled

Scenario: Disabled all classic and all but one custom source in order to speed up and test an NQE with extractJson on an endpoint for a specific device. Observation: Unable to take a snapshot without at least one Classic source enabled.

2
D
Spotter
1 day ago
D
Spotter
dakotaglorySpotter
posted in Product Discussions
Bulk edit for custom sources

The ability to include/exclude custom sources in bulk in the same way as classic sources would be useful if capability is possible. Secondary to an ability to bulk include/exclude custom sources would be the ability to bulk edit custom source profiles, basic authentication, SSL validation, and location.  I also noticed when editing custom source that I had to update in phases. I imported csv of devices.  I then attempted to update the profile and auth and location but it stated the source already existed and when I exited it only saved one of the settings. I then edited the src again and updated the location. If I recall it was unable to edit the tags at the same time as other config fields as well. No big deal for the few devices in my workspace and I have finished update but wanted to bring to your attention.

1
Tyson Henrie
Employee
1 day ago
kevinbrasher
Community Manager
kevinbrasherCommunity Manager
posted in Product Discussions
Community Highlight: AI Assist for NQE

We are thrilled to announce the release of AI Assist for NQE! Whether you're new to the platform or a seasoned NQE expert, AI Assist allows you to skip complex syntax and describe what you need in plain English, making it easier than ever to create NQE queries. Generating an NQE query using AI AssistWhat is AI Assist?AI Assist enables you to write NQE queries using everyday language. Instead of manually writing complex queries, you can simply describe what you're looking for, and AI Assist will generate the appropriate NQE query for you. For example, to create a query that lists all CVEs currently impacting devices within a network, you can type, “List CVEs impacting each device,” and NQE AI Assist will instantly translate that into a valid query. How to Use AI AssistUsing AI Assist is easy. Just follow these steps:Log in to Forward Enterprise. Navigate to the NQE Library. Open the query editor by adding a new query. Click the AI Assist button. In the Generate tab, type your natural la

0
kevinbrasher
Community Manager
3 days ago
G
gbaronRamping Up
asked in Product Discussions
Can I pull the entire CVE database

Is there a way to export all CVEs that the platform is scanning for.  We know how to get the ones that are affecting devices, but we want a list of them all, regardless of impact.

3
davetee
Community Manager
26 days ago
S
Sebastian CorosRamping Up
asked in Product Discussions
How to pull device files from multiple devices at once via the API

Hi Forward Networks team, I am looking at the API, specifically the call to get a device's data files.I can get the files for a single device at a time by just putting in the hostname in the parameters, however I was wondering if there is a parameter which will allow me to pull from multiple devices at once.For example lets say I want to pull from devices ABC, DEF, GHIorI want to pull from every device that starts with ABC*Is this something that can be done?Or would another possibility be to create a separate group of devices which includes all the devices I want to pull from and then just run the GET call on that device group. Kind regards,Sebastian

5
G
Employee
27 days ago
R
Driver
Rohit_809 KumarDriver
asked in Product Discussions
Forward Network API

How can i collect below information from Forward Network via API for Network devices. ?• IP address,• MAC address• Interface details• Device Name• Subnet details1.Which API should be used to get the above information? In the documentation, I see an API to get           networks/ Network collection/ devices  ;2.Is there a single API call that can pull the above information, or are there multiple API calls?3.If it's one API call, what's the Max pagination limit?4.Can you please provide a Sample API  or a Postman export to make an API call.

10
Tyson Henrie
Employee
2 months ago
V
VarunSRamping Up
asked in Product Discussions
API URL

need to get api nodes url

1
G
Employee
2 months ago
C
Employee
ChristopherEmployee
posted in Product Discussions
Permit-all behavior in path search results: GUI vs API

There is a difference in default behavior for path search results in the GUI vs the API.For example, consider this path search:f(10.100.0.101)(ipv4_dst.190.37.14.120)(tp_dst.80)Notice that in the GUI, the path is blocked on atl-edge-fw01In the API, however, the same search yields a result showing ALL the hops in the path as if the traffic were permitted through all the firewalls. In other words, the path search above entered in the API is similar to the output in the GUI for the search:f(10.100.0.101)(ipv4_dst.190.37.14.120)(tp_dst.80)m(permit_all)Notice that the forwardingOutcome is DELIVERED, while the securityOutcome is Denied. This indicates that if the traffic were permitted through all the firewalls in the path, that the packet would be delivered to the destination.There are two firewalls in the path that have a behavior of “ACL_DENY”{ "srcIpLocationType": "INTERFACE_ATTACHED_SUBNET", "dstIpLocationType": "DNAT", "info": { "paths": [ { "forwardingOutcome": "DELI

0
C
Employee
3 months ago
G
Employee
GaryBEmployee
posted in Product Discussions
Happy Thursday TwinNavigators, Looking for some feedback around you configuration automation experience.

Before we head off into the weekend I was hoping to ask the community what their stance is on schema based network configuration interfaces like NetConf and OpenConfig GNMI. Question 1: Do you currently or plan to use NetConf and/or GNMI to manage policy across your network? Do you leverage this in your automation pipeline? If so, do you find sufficient vendor support?Question 2: If you do leverage NetConf/GNMI for configuration data, do you still want to inspect the policies via CLI?Thanks for your insights.

0
G
Employee
3 months ago
Fabrizio
Employee
FabrizioEmployee
posted in Product Discussions
NetBox Integration webinar: Network Discovery, Assurance & Compliance Validation with Forward Networks and NetBox Labs

On May 21st we have shown the integration between Forward and NetBox in a joint webinar. UPDATE: The webinar recording is now available on YouTube:https://youtu.be/TSX14uke1NE.The description includes a link to the webinar slides and the GitHub repository. The integration is part of the NetBox’s Network Automation Architecture framework where Forward provides the Observability and Assurance piece, as shown in the picture below:NetBox Network Automation Architecture The first use case is about onboarding an empty NetBox instance with device data collected by Forward, such as Devices, Interfaces, Vendors, Location, and so forth.Onboarding an empty NetBox instanceThe integration is based on a Python script. It imports the data from Forward using NQE queries via REST APIs, transform the data from the Forward to the NetBox schema and then exports it to NetBoxThe process can be automated using a web-hook so that NetBox is updated every time Forward collects from the network.To run the integr

3
Fabrizio
Employee
3 months ago
C
Employee
ChristopherEmployee
posted in Product Discussions
What is the difference in Uplink and Gateway interface when configuring a Synthetic node?

A synthetic node is a user-configured device in the Forward Networks model. A synthetic node represents a device or group of devices that Forward Networks cannot collect data from. Most often a synthetic node represents a private service provider network (such as a layer-3 VPN) or the public Internet itself. You can create or edit synthetic nodes under Sources > Synthetic. Note that there is always one Internet synthetic node.Suppose you have a connection from your network on a device called atl-internet on port ge-0/0/0, which connects to the service provider’s router. This interface has a public IP address, and you exchange BGP routes with the service provider over the link.To add a link to the Internet synthetic node, click on the edit button under Sources > Synthetic > internetUnder Uplink interface, type the name of the device and the physical interface (a list of available interfaces will appear after you type the device name, and you can select one).Because you exchange

0
C
Employee
3 months ago
C
Employee
ChristopherEmployee
posted in Product Discussions
Deleting links from the Topology view. Where do they go?

If you click on a link in the Topology view, you will have the option to Remove the link. Be Careful! This operation doesn’t just apply to the Topology view. It also removes the link from the model. This will necessitate the application reprocessing the snapshot, and path searches will no longer include paths through the deleted link!If you delete a link by mistake. It can be added back. You can see a list of manually added and deleted links by using the API call /api/snapshots/{snapshotId}/topology/overrides from the https://fwd.app/api-doc page:You can undo the deletion of a link by using the /api/snapshots/{snapshotId}/topology/overrides API call.The format to add back the port that was removed above (ie, to delete the entry for the removal) would be:(Note that having to enter the fields you aren’t changing with empty brackets [ ] won’t be required on version 24.5 or higher) 

0
C
Employee
4 months ago
C
Employee
ChristopherEmployee
posted in Product Discussions
How to use workspace networks to test custom commands

Some customers have asked, “How do I run a custom command on just a few devices, to test if it gives me what I need for an NQE query?” You can do this with a workspace network!First, click the Network drop down and choose Add Workspace network  Add a name for your Workspace and click Next.  Add the device or devices you want to test the custom command(s) on and click Add X devices. Then Next.  Check the custom command group you want to include in the Workspace and click Next and Done. You can also skip this step and add the custom command in the workspace later.  Make sure you are in the new Workspace network in the Network selection drop-down. Go to Settings > Collection Settings > Custom commands and enable the Custom command group.(You can also add a new custom command from this page by editing the command group or adding a new one.) Return to the main page by clicking Search, and then choose Take Snapshot from the snapshot drop-down. This will collect the data using your cust

1
RobertWelch
Employee
4 months ago
C
Employee
ChristopherEmployee
posted in Product Discussions
How to get a list of devices using the API and Python.

The same data that can be found in the Forward Enterprise GUI can also be accessed via the API. Here is an example to pull a JSON formatted list of all the devices in a Network using the API and Python.Start by generating an API key from Settings > Account API Tokens. You will have to re-enter your password. Write down the API password. It will not be shown again!  Go to the API docs (https://fwd.app/api-doc) If you have an on-prem deployment of Forward Networks, the domain name in the URL will be specific to your company. Enter the API Access Key and Secret Key that you created.Go to the Network Devices section of the same page (https://fwd.app/api-doc#network-devices)Click Try it out. Note that this button will only work if you have already entered your API credentials. Enter the Network ID that you want to pull a list of devices from. (This is the number in the URL when you are in the App on the search tab: fwd.app/?/settings/account?networkId=12346&snapshotId=91011)Click Exe

0
C
Employee
4 months ago
H
huutho5011Ramping Up
asked in Product Discussions
Error during SNOW integration

Hi all, We are getting “No processed Snapshot found. Please take a Snapshot and try again.” when trying to hook Forward Network with SNOW CMDB, anyone has any idea why this happen ? ( We do have snapshots already taken and processed) Thank you 

3
deronjohnson
Employee
5 months ago
joe
Employee
joe
posted in Product Discussions
How to provide path search snapshot when working with support

Sometimes a path search may not present the results you expect. When engaging with support regarding a path search issue, you may be asked to provide a snapshot with the relevant path search data. To capture a snapshot of a path search, first perform the path search in question. In this example, we are performing a simple path search from atl-ce01 to atl-core-pe01: Now, press and hold the Alt or Cmd key, and the icon on the far right of the query bar will change from ‘Copy Query’ to ‘Export Query’. Click on the ‘Export Query’ icon: The Export Snapshot wizard will now display all devices relevant to that path, and allow you to add any additional devices you wish to add to the snapshot (if necessary).  Finally, obfuscate the IP and MAC addresses if necessary, and export the snapshot: This will allow you to download a zip file snapshot of the path search and all devices within the path of this search. This will provide the support team with all data necessary to investigate your path sear

0
joe
Employee
7 months ago
B
BDrinkardRamping Up
asked in Product Discussions
Has anyone modeled corporate VPN?

Hey Folks!I’m looking to find out if anyone has modeled their corporate VPN access - maybe using Synthetic Devices - in such a way that allows you to search for user workflows to determine if they are allowed, and have them properly modeled as coming in through the VPN Firewall instead of at the switch VLAN. We are looking to create intent checks for access through our VPN. Happy NQEing!

2
J
Employee
8 months ago
F
FSKAJRamping Up
asked in Product Discussions
DeviceCollectionError Descrptions and sequence of PHASEs?

I am working on automated resolution of failed connections.   Two questions: (1) On this page in the documentation: /docs/nqe/data-model/type_devicecollectionerror/  there is a list of errors but no descriptions.  Can someone provide? (2) I am studying a failure report and the Connect Test Status notes each of these in PHASEs which seems to imply that each is determined in a sequence.  Is there a list of PHASE order for these? AUTHENTICATION_FAILED-AUTHENTICATION PHASEAUTHORIZATION_FAILED-AUTHORIZATION PHASECONNECTION_FAILED-CONNECTION PHASEDEVICE_IS_CHILD_CONTEXT-SETUP PHASEDEVICE_TYPE_MISMATCH-TYPE_DISCOVERY PHASEDEVICE_TYPE_UNDETECTED-TYPE_DISCOVERY PHASEGUEST_MISSING_HOST_RESULTS-SETUP PHASEJUMP_SERVER_AUTHENTICATION_FAILED-CONNECTION PHASEJUMP_SERVER_CONNECTION_FAILED-CONNECTION PHASEOTHER-AUTHORIZATION PHASEPING_FAILED-CONNECTION PHASEPORT_REACHABILITY_FAILED-CONNECTION PHASEPRIV_PASSWORD_ERROR-SETUP PHASEPROMPT_DISCOVERY_FAILED-SETUP PHASESESSION_CLOSED-TYPE_DISCOVERY PHASETIMED

2
F
8 months ago
deronjohnson
Employee
deronjohnsonEmployee
posted in Product Discussions
Background on the Jump Server for FWD Enterprise

Background on the Jump Server for FWD Enterprise Forward Enterprise obtains data for path analysis primarily using industry-standard command-line interface (CLI) access. This is typically done with secure shell (SSH) read-only credentials provided to the platform so that configuration and state can be retrieved. In certain customer instances, it is required to limit SSH access to a specific host or hosts, which will more effectively audit and maintain the security of network devices. This is commonly known as the bastion or jump server. A jump server, jump host, or jump box is a computer on a network used to access and manage devices in a separate security zone. The most common example is managing a host in a DMZ from trusted networks or computers. A jump server is a hardened and monitored device that spans two dissimilar security zones and provides a controlled means of access between them. User access should be tightly controlled and monitored OpenSSH is commonly used for configurati

0
deronjohnson
Employee
9 months ago
G
gschmittRamping Up
asked in Product Discussions
Log into devices using an SSH jump server to connect to a telnet server

Is it possible to use a SSH jump server to log into a Telnet server, and then from there log into each of the devices?

1
V
10 months ago
Kachow
KachowRamping Up
asked in Product Discussions
Splunk / SIEM Integration

I’d like to use FN APIs to integrate with Splunk and SIEM / Security systems. Has anyone else done this?

2
GTurner
Employee
11 months ago
mrollin
mrollinRamping Up
asked in Product Discussions
Character Restrictions on Tags

Are there any character restrictions for tags? I would like to use ’ : ‘ in a tag as a namespace but want to be sure there won't be any caveats. I don't see anything in the docs.

4
mrollin
11 months ago
mrollin
mrollinRamping Up
asked in Product Discussions
How to create SSL Certs for Forward?

How do you create a custom SSL certificate for the fwd web interface?

1
Tyson Henrie
Employee
11 months ago
C
cHaRamping Up
asked in Product Discussions
How to connect external data sources?

Is there a way to connect external sources to a postgres database or consume a postgres DB backup? We cannot collect directly from type 1 encryptors but we can get a backup of the encryptor manager DB

1
Tyson Henrie
Employee
11 months ago
C
cHaRamping Up
asked in Product Discussions
Path Search Ranking

For Path Search Ranking, will devices that have a more specific subnet always rank higher than devices with a less specific subnet as the ingress device for a path?

1
rob
Employee
11 months ago
  • NQE Contributor
    dakotagloryhas earned the badge NQE Contributor
  • Community Champ Award
    GaryBhas earned the badge Community Champ Award
  • Community Champ Award
    AndyLhas earned the badge Community Champ Award
  • NQE Contributor
    Christopherhas earned the badge NQE Contributor
  • NQE Contributor
    Tyson Henriehas earned the badge NQE Contributor
Show all badges
Terms of UseCookie settings