North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: enterprise change/configuration management and compliance software?

  • From: Matthew Petach
  • Date: Tue Apr 15 16:38:16 2008
  • Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; bh=EQDFNe05SmPXFrziHqkQZMuRzqMiOgmsikVJBCAiLuY=; b=xhZ5BYzRboUDXPxmn/P6caeUbEhVIwI73ODi73+XlUfvdlk0p4DbXNfp+Mah7+62vF9em4HqvfW92EEXMW+PWBHXt1Q07RgczRqTnTe2sJxjF4ebEN8X7uLO1k3stseSt3VHPXZ402+tH0MZarkXUzixaNJ1e1Wogfkju3uSlb8=
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=LtnmB56UCpmfDMGSLkIowX8p5YuyNrQ/TXOdwiABwCjmjqQjw4uvkicSTL7wvJbzPPqEHyZJPvFgjkRD0PdsS3qgBV6M53idpnkwDxG9Zlm0o6BarRMtLj45MNtw9Cd6X3bBIDy3QsZjLJEsv15RbWLCebqK/QYkYaS/hCHYy7o=
On Mon, Apr 14, 2008 at 9:13 PM, jamie <[email protected]> wrote:
>   Gentlemen (and Ren!):    ;-)
>
>   I'm currently investigating options w.r.t. enterprise-wide (over 250
> device, and by 'device' i mean router and/or switch) configuration
> management (and (ideally) compliance-auditing_and_assurance) software.
>
>   We currently use Voyence (now EMC) and are looking into other options for
> various reasons, support being in the top-3 ...
>
>   So, I pose:  To you operators of multi-hundred-device networks : what do
> you use for such purposes(*) ?
>                                                       (*)see subject

We have several thousand network devices currently in play:

[email protected]:/tftp/conf/latest> ls *.conf | wc -l
    7419
[email protected]:/tftp/conf/latest>

I hand read each device configuration check-in email that goes past
to see if there's errors in the configs, security violations, or other WTF-ish
elements in the config check-in, and mail back a nag notice to the
person who changed the config.

Currently, I received between 1900 and 3000 email messages a day.

I sleep 3 hours a night.

> jamie rishaw

Hope that helps answer your question.

Matt