Posts

How to ensure your configurations are not altered or compromised.

Thousands of sites have been rolled out successfully since the release of our SD-WAN tool, the Profindis Deployment Portal. In this blog post, we explain the functioning of our feature “Configuration Monitoring and Surveillance” and how it can be useful to you. To become more familiar with the Profindis Deployment Portal, click here.

Monitoring your processes is key for error and incident prevention of your network. As the network becomes larger, monitoring and surveillance are inevitable.

Configurations of Network Devices Ensure Secure and Reliable Connections

Configurations are central to networking and are also potentially the most vulnerable too. It is only with the right codes and commands that devices can connect and communicate with each other to correctly perform the desired services. They contain all the information necessary to securely and reliably send data from one point to another. In practice, monitoring configurations is rarely used and its benefits are underestimated.

Compromised Configuration Files

In most cases, compromised configuration files do not suggest a malicious attempt to hack your network. More often than not, it is a result of troubleshooting or testing on-site which may have modified some configurations. Deviations in files usually go unnoticed until they start creating problems.

Start Monitoring your Configurations Periodically

With our SD-WAN solution you will be able to track each and every single configuration in your network. With the integrated Periodic Triggered Service you are able to set time intervals during which all configurations will be reviewed. You are able to customize the settings and include or exclude any device from this procedure. If a deviation is detected, the system will immediately inform you. It will tell you which device is affected, provide you with a comparison between the original configuration and the running configuration, and show you where the changes were made.

Autocorrect Altered Configurations

This tool allows for manual or automated corrections for your comprised configurations. By activating the autocorrect option, deviations found in altered configuration will automatically be replaced by the original configuration. This feature enables very quick interventions and prevents further complications by tackling potential root causes directly.

You need more Information?

For more information or to see our SD-WAN solution in action, contact us here!

How to Manage all your Configurations with a Couple of Clicks

Thousands of sites have been successfully rolled out since the release of our SD-WAN tool, the Profindis Deployment Portal. In this blog post we explain the functioning of our feature “Version Management” and how it can be useful to you. If you are not familiar with the Profindis Deployment Portal, learn more on this page.

Configuration Changes on Network Devices

When working in a midsize or large network environment with hundreds or thousands of sites, things can easily get out of hand. Protocolling during the change process is a tedious task. When it comes to configuration changes of network devices it is very difficult to maintain a systematic overview. Many devices require different versions of configurations. This can be due to differences in hardware platforms, ISP (Internet Service Provider), geographical conditions and the availability of certain WAN technologies. Additionally, some devices need to be updated to a newer version, others may need a slightly different version or maintain their old version. This can be further complicated when several changes are required at once.

How can Version Management help you with your Configuration Changes?

Version Management allows you to easily view and access all available configurations as well as track which configuration is attached to which device.

For example, in order to update a router or a switch to a newer configuration version, we start with a master (or basic) configuration, which consists of the main commands and codes that all devices have in common. Next, instead of changing the master configuration, we create a delta configuration. This delta configuration only contains commands that amount to the basic configuration without altering it. The delta configuration varies according to the individual requirements of each device or device group. The result is a new configuration which now, through a couple of clicks, can be addressed to the desired network devices. The Profindis Deployment Portal will then automatically roll out the configuration changes.

Version Management shows the history of the configuration development in form of a tree diagram.

Of course you can add as many delta or basic configurations as you want. The Version Management will always keep track and give you a clear picture of which configuration is on which device and vice versa.

Version Management maintains a Traceable Overview

Sometimes things simply do not work out the first time and new configurations might lead to complications. In a traditional setting, we would have to go through all the commands and codes in a configuration to find the error. Version Management allows for more efficiency, as it keeps a traceable overview of all configurations, allowing to easily return to the previous version by disabling the last delta configuration. The traceable system also allows for easier communication between all parties involved in a project.

Did we arouse your interest?

For more information or to see our SD-WAN solution in action, contact us here!

Most SD-WAN products lack flexibility.

Rollouts until now

Large rollouts with hundreds of locations and, as a result, hundreds of network devices such as routers, switches, or firewalls take several months or even years to complete if configured manually. The rollout costs are correspondingly high. While there are tools and SD WAN products that address this problem, the solutions are too general and have little or nothing to do with the workflow of the migration and integration of the affected network. Moreover, they are often expensive and usually oversized for the requirements of a migration.

Smart automation tool with Single Point of Management

Over the course of many major projects, we have developed the Profindis Deployment Portal, a smart automation tool. Simplicity, Security and Usability guided us through this process, allowing us to create a powerful tool that has diverse and complex modes of application, yet is very easy to use, highly secure and moulded to the customer’s needs.

With our portal, everything can be controlled through a Single point of Management. Instead of copying and pasting configurations and command lines into the interface, all the functions are accessible through the click of a mouse. That is not only more convenient, but also helps eliminate human error.

Easy and safe deployment of new devices

Unlike other portals, the Deployment Portal offers the innovative ability to provision new devices automatically. While automatic configuration of running devices was within the realm of possibility, automatic configuration of a new device has not yet been offered.

A traditional approach to deploy a new device would include a technician on-site with decent networking skills. The technician’s job is mainly to plug in the device and create an initial configuration to establish a connection to the network. After that the real configuration is executed by a network engineer who accesses the device via remote.

With our tool, network devices such as routers, switches and firewalls can be configured in a few minutes, regardless of location. The technician simply has to plug in the new device and trigger the rollout process through the Portal. Thanks to the graphical, intuitive interface, even a low-skilled technician can easily operate the tool.

During the whole process the technician never has access to configurations and passwords. Therefore, rollouts are always safe, even if a third party carries them out on your behalf.

Your way to automated rollouts

Need to speed up your rollouts? Then contact us here and we will arrange a demo appointment with you.