EFROS Config Inspector

Russian software package EFROS Config Inspector - A tool for monitoring the configuration of network equipment to ensure information security. This is a highly configurable monitoring of network device configurations of Cisco Systems, 3Com, RKCC, Huawei, and others. It also provides configuration monitoring for server platforms based on vSphere and UNIXLinux servers.

Software EFROS Config Inspector is intended for active auditing of network devices of manufacturers Cisco Systems, 3Com, RKSS, etc. Processes of devices audit provide:

• control changes in configurations, commands (version, list of interfaces, routes, etc.) and lists (ARP and MAC tables, process list);
• control the integrity of local files;
• monitoring of messages and device parameters;
• receiving messages from devices (Syslog, SNMP).

EFROS Config Inspector Architecture

EFROS Config Inspector has a client-server architecture. The server part is installed on a dedicated PC, and the client part is deployed on the server computer or other workstations, can be connected to the server part over the network. Server EFROS Config Inspector interacts with network devices, downloads configuration files and monitored lists, checks their consistency. The checks are run automatically or on demand.

The server can receive Syslog and SNMP messages and allows you to configure the start of checks when certain messages are received from the system log. If changes are detected in the configuration files or lists, the new value is saved, the Syslog message is sent to the management tool, and the administrator receives an email notification. Control EFROS Config Inspector is carried out from the client console. These programs are stored in an external DBMS (MySQL 5.5 or Microsoft SQL Server 2008) or in an embedded database (SQLite).

Monitoring and managing network device configurations:

• Download configurations on demand or automatically.
• Detection of changes, checking the consistency of the working and boot configurations.
• Harmonization of working and boot configurations.
• Configuring the search for new configurations in real time.
• Restore the boot configuration.

Monitoring of network devices:

• Restore the boot configuration.
• Control of changes in commands (version, list of interfaces, routes, etc.).
• Control of change of lists (ARP and MAC-tables, the list of processes).
• Manage the integrity of local files.

Virtual Infrastructure Control:

• Loading and monitoring hypervisor configurations and files.
• Download and control changes to virtual infrastructure settings (when connecting to vCenter).
• Loading vCenter events.

Maintain configuration and command history:

• Automatic saving of new configurations.
• Display configurations with syntax highlighting.
• Comparison of configuration texts.

Sending notifications:

• Changes in device states in the client console in real time.
• Sending notifications about the performed operations using the Syslog protocol.
• Sending mail messages about modifications of configurations with the text of changes.

Managing Local Users:

• Building a list of users when loading configurations.
• Add, delete, change users.
• Check the frequency of changing user passwords.
• Prepare a list of command privileges when loading configurations.