Skip to main content

Product Discussions

New to Forward Networks or a seasoned professional? You found the right place!

  • 42 Topics
  • 90 Replies
42 Topics
C
Employee
ChristopherEmployee
posted in Product Discussions
How to use workspace networks to test custom commands

Some customers have asked, “How do I run a custom command on just a few devices, to test if it gives me what I need for an NQE query?” You can do this with a workspace network!First, click the Network drop down and choose Add Workspace network  Add a name for your Workspace and click Next.  Add the device or devices you want to test the custom command(s) on and click Add X devices. Then Next.  Check the custom command group you want to include in the Workspace and click Next and Done. You can also skip this step and add the custom command in the workspace later.  Make sure you are in the new Workspace network in the Network selection drop-down. Go to Settings > Collection Settings > Custom commands and enable the Custom command group.(You can also add a new custom command from this page by editing the command group or adding a new one.) Return to the main page by clicking Search, and then choose Take Snapshot from the snapshot drop-down. This will collect the data using your cust

1011
RobertWelch
Employee
7 months ago
I
imageryanRamping Up
asked in Product Discussions
Retrieval of Cisco Firepower device information

We have started to do some testing with FN. In our AWS network, we are using Cisco Firepower Threat Defense (FTD) devices managed by Firepower Management Console (FMC). FN is able to connect to an FTD and retrieve device details but does not support retrieval from FMC.In our network, for complicated routing reasons, we can’t easily enable FN to connect to our FTD instances. I can, however, provide a URL that will retrieve all the information from FMC. I would like to configure an “HTTP(S) external source” to provide that info. What I cannot figure out, however, is the required format for the data to that is returned by the URL GET. The document just states that FN will “infer” the schema. In my case, there’s no inference needed. I am writing the code that will return the info. I can format the data however FN needs it.For those who care about the details, the implementation is an AWS Lambda function that connects to the FMC REST API and returns the info. An AWS API gateway provides the

711
captainpacket
Employee
8 months ago
H
huutho5011Ramping Up
asked in Product Discussions
Error during SNOW integration

Hi all, We are getting “No processed Snapshot found. Please take a Snapshot and try again.” when trying to hook Forward Network with SNOW CMDB, anyone has any idea why this happen ? ( We do have snapshots already taken and processed) Thank you 

653
deronjohnson
Employee
8 months ago
joe
Employee
joe
posted in Product Discussions
How to provide path search snapshot when working with support

Sometimes a path search may not present the results you expect. When engaging with support regarding a path search issue, you may be asked to provide a snapshot with the relevant path search data. To capture a snapshot of a path search, first perform the path search in question. In this example, we are performing a simple path search from atl-ce01 to atl-core-pe01: Now, press and hold the Alt or Cmd key, and the icon on the far right of the query bar will change from ‘Copy Query’ to ‘Export Query’. Click on the ‘Export Query’ icon: The Export Snapshot wizard will now display all devices relevant to that path, and allow you to add any additional devices you wish to add to the snapshot (if necessary).  Finally, obfuscate the IP and MAC addresses if necessary, and export the snapshot: This will allow you to download a zip file snapshot of the path search and all devices within the path of this search. This will provide the support team with all data necessary to investigate your path sear

430
joe
Employee
10 months ago
B
BDrinkardRamping Up
asked in Product Discussions
Has anyone modeled corporate VPN?

Hey Folks!I’m looking to find out if anyone has modeled their corporate VPN access - maybe using Synthetic Devices - in such a way that allows you to search for user workflows to determine if they are allowed, and have them properly modeled as coming in through the VPN Firewall instead of at the switch VLAN. We are looking to create intent checks for access through our VPN. Happy NQEing!

892
J
Employee
11 months ago
F
FSKAJRamping Up
asked in Product Discussions
DeviceCollectionError Descrptions and sequence of PHASEs?

I am working on automated resolution of failed connections.   Two questions: (1) On this page in the documentation: /docs/nqe/data-model/type_devicecollectionerror/  there is a list of errors but no descriptions.  Can someone provide? (2) I am studying a failure report and the Connect Test Status notes each of these in PHASEs which seems to imply that each is determined in a sequence.  Is there a list of PHASE order for these? AUTHENTICATION_FAILED-AUTHENTICATION PHASEAUTHORIZATION_FAILED-AUTHORIZATION PHASECONNECTION_FAILED-CONNECTION PHASEDEVICE_IS_CHILD_CONTEXT-SETUP PHASEDEVICE_TYPE_MISMATCH-TYPE_DISCOVERY PHASEDEVICE_TYPE_UNDETECTED-TYPE_DISCOVERY PHASEGUEST_MISSING_HOST_RESULTS-SETUP PHASEJUMP_SERVER_AUTHENTICATION_FAILED-CONNECTION PHASEJUMP_SERVER_CONNECTION_FAILED-CONNECTION PHASEOTHER-AUTHORIZATION PHASEPING_FAILED-CONNECTION PHASEPORT_REACHABILITY_FAILED-CONNECTION PHASEPRIV_PASSWORD_ERROR-SETUP PHASEPROMPT_DISCOVERY_FAILED-SETUP PHASESESSION_CLOSED-TYPE_DISCOVERY PHASETIMED

862
F
11 months ago
deronjohnson
Employee
deronjohnsonEmployee
posted in Product Discussions
Background on the Jump Server for FWD Enterprise

Background on the Jump Server for FWD Enterprise Forward Enterprise obtains data for path analysis primarily using industry-standard command-line interface (CLI) access. This is typically done with secure shell (SSH) read-only credentials provided to the platform so that configuration and state can be retrieved. In certain customer instances, it is required to limit SSH access to a specific host or hosts, which will more effectively audit and maintain the security of network devices. This is commonly known as the bastion or jump server. A jump server, jump host, or jump box is a computer on a network used to access and manage devices in a separate security zone. The most common example is managing a host in a DMZ from trusted networks or computers. A jump server is a hardened and monitored device that spans two dissimilar security zones and provides a controlled means of access between them. User access should be tightly controlled and monitored OpenSSH is commonly used for configurati

650
deronjohnson
Employee
1 year ago
G
gschmittRamping Up
asked in Product Discussions
Log into devices using an SSH jump server to connect to a telnet server

Is it possible to use a SSH jump server to log into a Telnet server, and then from there log into each of the devices?

451
V
1 year ago
Kachow
KachowRamping Up
asked in Product Discussions
Splunk / SIEM Integration

I’d like to use FN APIs to integrate with Splunk and SIEM / Security systems. Has anyone else done this?

1092
GTurner
Employee
1 year ago
mrollin
mrollinRamping Up
asked in Product Discussions
Character Restrictions on Tags

Are there any character restrictions for tags? I would like to use ’ : ‘ in a tag as a namespace but want to be sure there won't be any caveats. I don't see anything in the docs.

434
mrollin
1 year ago
mrollin
mrollinRamping Up
asked in Product Discussions
How to create SSL Certs for Forward?

How do you create a custom SSL certificate for the fwd web interface?

501
Tyson Henrie
Employee
1 year ago
C
cHaRamping Up
asked in Product Discussions
How to connect external data sources?

Is there a way to connect external sources to a postgres database or consume a postgres DB backup? We cannot collect directly from type 1 encryptors but we can get a backup of the encryptor manager DB

331
Tyson Henrie
Employee
1 year ago
C
cHaRamping Up
asked in Product Discussions
Path Search Ranking

For Path Search Ranking, will devices that have a more specific subnet always rank higher than devices with a less specific subnet as the ingress device for a path?

381
rob
Employee
1 year ago
J
JenRamping Up
asked in Product Discussions
How do we license HA Active/Standby clusters?

We want to run two clusters in HA Active/Standby. We deployed one cluster yesterday and licensed it. We deployed the second cluster today. I am unclear on how we would license the second cluster. I assume we need a second deployment, but can I apply the same license to that new deployment, or would it require a new license as well?

171
m5lbenoit
Employee
1 year ago
catbanks
catbanksRamping Up
asked in Product Discussions
How to check snapshots logs?

Snapshots stopped working several days ago. Is there a way to check logs to determine the root cause?

611
deronjohnson
Employee
1 year ago
area_man
area_manRamping Up
asked in Product Discussions
What outside access does Forward need?

Can you confirm where Forward would need access to upgrades so we can add those policies to our Firewall? (Ex AWS, S3, Gitlab etc). Also, if there’s any other reason Forward Networks would need to reach externally.Thanks

331
joe
Employee
1 year ago
davetee
Community Manager
daveteeCommunity Manager
posted in Product Discussions
Watch Now - Supercharge Your SecOps with Network Insights

 Watch the recordingJoin Nikhil to learn how SecOps teams are using Forward.Why is network data your most valuable asset to ensure compliance? Join Nikhil Handigol, Co-founder of Forward Networks, to explore our integrations with Tenable and Rapid7. The demo will highlight how our solutions deliver complete attack surface visibility that empowers SecOps teams to proactively identify impacted hosts with critical vulnerabilities accessible from the Internet or other critical exposure points in seconds.

170
davetee
Community Manager
1 year ago
  • Community Champ Award
    Vladi Bhas earned the badge Community Champ Award
  • Community Champ Award
    dakotagloryhas earned the badge Community Champ Award
  • NQE Contributor
    CarlBhas earned the badge NQE Contributor
  • NQE Contributor
    gbaronhas earned the badge NQE Contributor
  • Community Contributor
    Rohit_809 Kumarhas earned the badge Community Contributor
Show all badges
Terms of UseCookie settings