Skip to main content

Product Discussions

New to Forward Networks or a seasoned professional? You found the right place!

  • 42 Topics
  • 90 Replies
42 Topics
H
hdrewRamping Up
asked in Product Discussions
Forward Network application (system) monitoring

can Forward Network application (itself) integrate with Grafana, or Sysdig for monitoring the system health (i.e. cpu, memory, logfile, processes, filesystem) attributes. would like to send to dashboard tier team monitoring

803
J
Employee
1 month ago
C
Employee
ChiaraEmployee
published in Product Discussions
A Deep Dive into Multicast Network Analysis with Forward Enterprise

 🌟 Revolutionize Your Multicast Network Management with Forward Enterprise 🌟Managing multicast networks can be a daunting task, but Forward Enterprise makes it seamless with its advanced visibility, analysis, and troubleshooting. This demo showcases how the platform simplifies complex operations, offering unparalleled control and insights into your multicast network infrastructure.  Forward Enterprise - Multicast BenefitsSimplified Multicast Management: With an intuitive interface and dynamic topology maps, Forward Enterprise makes it easy for both novices and experts to manage and analyze complex multicast networks efficiently. Comprehensive and Actionable Insights: The platform provides a unified view of network configurations, paths, and device states, empowering administrators with the knowledge to optimize operations and prevent issues. Proactive Troubleshooting and Time-Saving Tools: Advanced search and validation features enable quick diagnosis and resolution of network proble

130
C
Employee
1 month ago
Mike
Community Manager
MikeCommunity Manager
published in Product Discussions
Mitigating Vulnerabilities in Palo Alto Networks Devices

 Recently, two critical vulnerabilities (CVE-2024-0012 and CVE-2024-9474) were discovered in Palo Alto Networks' PanOS operating system. CVE-2024-0012 lets an attacker gain admin access and exploit other vulnerabilities like 2024-9474. These vulnerabilities allow attackers to gain admin privileges and plant malicious code, potentially giving them deeper access to company networks. The highlights are available below. Watch the video for the full story.Here’s how you can address these threats: Understand the Threat: The vulnerabilities enable unauthorized access, risking the security of your firewalls and networks. CISA has issued directive BOD 23-02. This directive outlines how organizations can reduce their attack surface from misconfigured management interfaces. Leverage Forward for Validation: Identify devices exposed to these vulnerabilities. Filter and prioritize affected devices, especially those connected to the internet The Forward platform provides a nightly update of CVE d

310
Mike
Community Manager
1 month ago
captainpacket
Employee
captainpacketEmployee
posted in Product Discussions
Automating Cloud Collection with Forward Networks Using AWS EventBridge

Keeping your network source of truth accurate is critical in cloud environments that evolve rapidly. Forward Networks’ cloud modeling capabilities make it easier to understand your network state, but manual snapshot collections for every change can be time-consuming. To solve this, I recently built an automated workflow using AWS EventBridge to trigger Forward Networks’ cloud snapshot collections for relevant AWS network changes. In this post, I’ll share how to set up this integration, including tips to limit the number of collections and keep costs within the AWS Free Tier. The Challenge AWS environments experience frequent changes, such as:• Creating or deleting VPCs.• Modifying route tables or DirectConnect links.• Updating Elastic Load Balancers. Manually capturing snapshots for every change isn’t practical, and triggering collections for every event might overwhelm your workspace. I wanted a solution that:1. Automates snapshot collection for specific, relevant changes.2. Limits un

410
captainpacket
Employee
1 month ago
R
Spotter
Rohit_809 KumarSpotter
asked in Product Discussions
Information required to add AVI ON FWN using https

How can i add AVI LB on FWN , TO use port https ,443 .?

293
V
Employee
1 month ago
C
Spotter
CarlBSpotter
asked in Product Discussions
Can a synthetic node be exported or downloaded to be recreated in a different network?

I have created a synthetic node inside a workspace to run down the various connections for a complex multibranch setup with multiple MPLS vpns and Internet VPNs. Is there a way to move or download the synthetic nodes so I can recreate them inside the parent network now that I have confirmed the accuracy inside the workspace? Note that I am trying to move it from a workspace back to the parent network - otherwise I would just recreate the workspace from the parent and include the synthetic.

264
C
Employee
2 months ago
R
Spotter
Rohit_809 KumarSpotter
asked in Product Discussions
How can i add Custom command on FWN for fortinet firewall

How can i add Custom command for fortinet. command that i am looking. show system dns. show system ntp. show system central-management config system central-management. 

17318
R
Spotter
2 months ago
B
BillWRamping Up
asked in Product Discussions
run nqe immediately after snapshot completes

is it possible to run NQEs immediately after a snapshot completes?  If Forward can baseline what NQEs are always run after a snapshot completes (possibly this data baseline is based upon a period of time such as 30 days or some admin defined time period).  Administrators can use this baseline data to flag those NQEs of priority to run immediately after the snapshot completes.  in this way, results from priority NQEs are immediately available (from cached results) for applications to use with minimal delay.

251
RobertWelch
Employee
2 months ago
elyor_khakimov
Employee
elyor_khakimov
published in Product Discussions
Submit Your Ideas for Network Configurations to Analyze in the Forward Networks Net3 Lab!

Hey, Forward Community Members!We're thrilled to invite you to submit your ideas for network configurations you’d like to see analyzed within our Net3 lab network. Whether it's testing new scenarios, troubleshooting common issues, or exploring unique configurations, we want to know what network setups you’re interested in. Example lab scenarios include:Layer 2  Host-to-Host communication in VXLAN EVPN  fabric based on  Arista STP/RSTP Layer2 pods built  with Cisco or  Arista switches Layer 3 MPBGP with VXLAN EVPN forwarding (Arista vEOS) IPv6/IPv4 Dual stack forwarding using routers/switches by Cisco and Arista, as well as Palo Alto firewalls SD-WAN Viptela/Catalyst SD-WAN As well as other configurations including Network Services - Load-balancer single-arm (SNAT/DNAT): A10 And many others!  What network configuration would you like to see? Our Net3 lab network is constantly expanding with a diverse set of devices, offering a robust environment for analysis and experimentation. H

340
elyor_khakimov
Employee
2 months ago
R
Spotter
Rohit_809 KumarSpotter
asked in Product Discussions
Custom command format for Foritnet

we are using below format to collect the data from Fortinet firewall for custom command. endconfig globalshow system dnsshow system ntp can anyone check and confirm ,these will not impact anything ,if i remove config gloabl , than command will not run. 

292
R
Spotter
2 months ago
G
Spotter
gbaronSpotter
asked in Product Discussions
Collecting custom command "show configuratation" within a a Cisco FPR running on FXOS

For reference - we recently were able to get Cisco Firepower ASA operating as FTD and FPRs on IOS FXOS, for the first time.  With that…. Since none of the default commands produce any data in the state files, we are trying to use custom commands.  Right now, when performing a show run, it comes back with 25 lines of configs, but then stops at --More--, which is when a user via cli would would push a button.  We have lots of other devices running custom commands that do not do this, so why is it happening with FXOS and how can we work around it? Also, the FTD devices reporting all state files properly, its just the FPRs that are having issues.

491
V
Employee
2 months ago
D
Employee
DawnForwardNetworksEmployee
published in Product Discussions
We Value Your Feedback! Share Your Experience and Receive a $25 Gift Card

As a valued customer, your insights play a crucial role in helping us continually enhance the Forward platform. We would appreciate it if you could take a few minutes to share your experience by leaving a review on Gartner Peer Insights™.Your feedback is completely anonymous, and the review process takes only about 10 minutes. As a thank you, the first 50 reviewers with an approved review will receive a $25 USD gift card from Gartner. The Gartner Peer Insights team will send your gift card once your review is published.To be eligible for this promotion, please submit your review by October 31, 2024, at 11:59 PM EST.Thank you for being an integral part of the Forward Networks community and for providing a review. Review us on Gartner

400
D
Employee
3 months ago
G
Spotter
gbaronSpotter
asked in Product Discussions
how to find postgress version

What command can be ran from the CLI to find the postgres version?

414
G
Spotter
3 months ago
D
DannyRRamping Up
asked in Product Discussions
How do I add a device from the parent network to an existing workspace network?

I was helping some folks in getting familiar with Forward Networks, we were having trouble in adding in new devices (that already exist in the parent network) in to the already created workspace. The existing options to add devices in the workspace looks to only include ways to create new connections to those devices. But I did not see any way for me to pull in existing devices from the parent network, after the workspace was already created. Does anyone have any insight into this?

583
davetee
Community Manager
3 months ago
G
Spotter
gbaronSpotter
asked in Product Discussions
SSO Error

We were finally able to configure and get SSO online and operational this past week in our Dev environment, and pushed it in to the production world yesterday.  After running fine for about 10-12 hours, we came in this morning to the following error: SAML validation failed.  Invalid assertion [insert a bunch of random letters and numbers] for SAML response [insert more random letters and numbers]: Assertion IssueInstant was invalid, expiredContact your Org Admin to resolve the issue. I check with the in group that manages SSO and they claim nothing has changed on their end, so now I must ask:  How do we get past this so I can turn SSO back on? P.S. we are on base 11 app version 24.8 (rolling to 24.9 in a couple hours)

672
G
Spotter
4 months ago
D
Spotter
dakotaglorySpotter
posted in Product Discussions
Unable to snapshot; no sources configured when only custom source enabled

Scenario: Disabled all classic and all but one custom source in order to speed up and test an NQE with extractJson on an endpoint for a specific device. Observation: Unable to take a snapshot without at least one Classic source enabled.

272
D
Spotter
4 months ago
D
Spotter
dakotaglorySpotter
posted in Product Discussions
Bulk edit for custom sources

The ability to include/exclude custom sources in bulk in the same way as classic sources would be useful if capability is possible. Secondary to an ability to bulk include/exclude custom sources would be the ability to bulk edit custom source profiles, basic authentication, SSL validation, and location.  I also noticed when editing custom source that I had to update in phases. I imported csv of devices.  I then attempted to update the profile and auth and location but it stated the source already existed and when I exited it only saved one of the settings. I then edited the src again and updated the location. If I recall it was unable to edit the tags at the same time as other config fields as well. No big deal for the few devices in my workspace and I have finished update but wanted to bring to your attention.

261
Tyson Henrie
Employee
4 months ago
kevinbrasher
Community Manager
kevinbrasherCommunity Manager
posted in Product Discussions
Community Highlight: AI Assist for NQE

We are thrilled to announce the release of AI Assist for NQE! Whether you're new to the platform or a seasoned NQE expert, AI Assist allows you to skip complex syntax and describe what you need in plain English, making it easier than ever to create NQE queries. Generating an NQE query using AI AssistWhat is AI Assist?AI Assist enables you to write NQE queries using everyday language. Instead of manually writing complex queries, you can simply describe what you're looking for, and AI Assist will generate the appropriate NQE query for you. For example, to create a query that lists all CVEs currently impacting devices within a network, you can type, “List CVEs impacting each device,” and NQE AI Assist will instantly translate that into a valid query. How to Use AI AssistUsing AI Assist is easy. Just follow these steps:Log in to Forward Enterprise. Navigate to the NQE Library. Open the query editor by adding a new query. Click the AI Assist button. In the Generate tab, type your natural la

230
kevinbrasher
Community Manager
4 months ago
G
Spotter
gbaronSpotter
asked in Product Discussions
Can I pull the entire CVE database

Is there a way to export all CVEs that the platform is scanning for.  We know how to get the ones that are affecting devices, but we want a list of them all, regardless of impact.

513
davetee
Community Manager
5 months ago
S
Sebastian CorosRamping Up
asked in Product Discussions
How to pull device files from multiple devices at once via the API

Hi Forward Networks team, I am looking at the API, specifically the call to get a device's data files.I can get the files for a single device at a time by just putting in the hostname in the parameters, however I was wondering if there is a parameter which will allow me to pull from multiple devices at once.For example lets say I want to pull from devices ABC, DEF, GHIorI want to pull from every device that starts with ABC*Is this something that can be done?Or would another possibility be to create a separate group of devices which includes all the devices I want to pull from and then just run the GET call on that device group. Kind regards,Sebastian

905
G
Employee
5 months ago
D
DannyRRamping Up
asked in Product Discussions
DELIVERED_TO_INCORRECT_LOCATION API Status Clarification

Hello,I have a question when using the Search Path API.Could we get an elaboration on the meaning of that “DELIVERED_TO_INCORRECT_LOCATION” forward outcome status, such as why it appears and if there’s anything we can do to address the “INCORRECT_LOCATION” part, if it’s necessary?I presume the status means that somewhere along the routing, it somehow ended up at a destination Forward Networks didn’t expect. But I just wanted to know if there was any more to it.Thanks!

282
C
Employee
5 months ago
R
Spotter
Rohit_809 KumarSpotter
asked in Product Discussions
Forward Network API

How can i collect below information from Forward Network via API for Network devices. ?• IP address,• MAC address• Interface details• Device Name• Subnet details1.Which API should be used to get the above information? In the documentation, I see an API to get           networks/ Network collection/ devices  ;2.Is there a single API call that can pull the above information, or are there multiple API calls?3.If it's one API call, what's the Max pagination limit?4.Can you please provide a Sample API  or a Postman export to make an API call.

33010
Tyson Henrie
Employee
6 months ago
V
Spotter
VarunS
asked in Product Discussions
API URL

need to get api nodes url

301
G
Employee
6 months ago
G
Employee
GaryBEmployee
posted in Product Discussions
Happy Thursday TwinNavigators, Looking for some feedback around you configuration automation experience.

Before we head off into the weekend I was hoping to ask the community what their stance is on schema based network configuration interfaces like NetConf and OpenConfig GNMI. Question 1: Do you currently or plan to use NetConf and/or GNMI to manage policy across your network? Do you leverage this in your automation pipeline? If so, do you find sufficient vendor support?Question 2: If you do leverage NetConf/GNMI for configuration data, do you still want to inspect the policies via CLI?Thanks for your insights.

170
G
Employee
7 months ago
Fabrizio
Employee
FabrizioEmployee
posted in Product Discussions
NetBox Integration webinar: Network Discovery, Assurance & Compliance Validation with Forward Networks and NetBox Labs

On May 21st we have shown the integration between Forward and NetBox in a joint webinar. UPDATE: The webinar recording is now available on YouTube:https://youtu.be/TSX14uke1NE.The description includes a link to the webinar slides and the GitHub repository. The integration is part of the NetBox’s Network Automation Architecture framework where Forward provides the Observability and Assurance piece, as shown in the picture below:NetBox Network Automation Architecture The first use case is about onboarding an empty NetBox instance with device data collected by Forward, such as Devices, Interfaces, Vendors, Location, and so forth.Onboarding an empty NetBox instanceThe integration is based on a Python script. It imports the data from Forward using NQE queries via REST APIs, transform the data from the Forward to the NetBox schema and then exports it to NetBoxThe process can be automated using a web-hook so that NetBox is updated every time Forward collects from the network.To run the integr

2223
Fabrizio
Employee
7 months ago
  • Community Champ Award
    Vladi Bhas earned the badge Community Champ Award
  • Community Champ Award
    dakotagloryhas earned the badge Community Champ Award
  • NQE Contributor
    CarlBhas earned the badge NQE Contributor
  • NQE Contributor
    gbaronhas earned the badge NQE Contributor
  • Community Contributor
    Rohit_809 Kumarhas earned the badge Community Contributor
Show all badges
Terms of UseCookie settings