NetBrain Administration & Domain Management

Hi Support Team,As most of our customers is running in mission critical environment, sometime with air-gapped network, so using public AI LLM like OpenAI or ChatGPT etc. will be a challenge. I understand that NetBrain can also integrate with local deployed AI inferencing servers, however an enterprise grade inferencing server also costs very high.One possible option is to use AI API proxy servers like LiteLLM Proxy or Apache APISIX or Kong AI Gateway etc., the dual home proxy server could be located in restricted DMZ zone which has limited internet connection to Open AI platforms, while NetBrain can point the AI proxy to the API server.I am wondering if NetBrain has any similar deployment cases in your customer’s environment. It will be appreciated if you could provide some references or ideas for this type of deployment. Best Regards,Andong  

Is there an issue with downloading a newer version of the Golden Intent library on ACE R12.1?I believe there is a newer version. 

Hi,Is Cisco FMC supported in NetBrain? We are using NetBrain version 12.1 and FMC version 7.4.2.1., I can see in the NetBrain API server manager there is a built-in API source type called Cisco FMC, but there are no specific instructions nor a guide how to discover the device. Is it necessary after discovering the Cisco FMC to again discover the Cisco FTD devices separately?Would appreciate a step-by-step guide similarly like the one for Check Point management and firewalls.Regards,Hrvoje

We have multiple ISR4300 series routers with login on-failure and on-success set up. When I do show logging I see that there are multiple login attempts by NetBrain. That is ok when NetBrain is using the UN and PASS that is setup in the shared device settings. The problem is NetBrain is also using the other 2 username and passwords that are set up in the Network Settings under Telnet/SSH Login. I can see the failed attempts in the logs of the ISR4300. The question is WHY is NetBrain using those when in the shared device settings in the CLI tab I have the correct username and password and when I [Tune] everything check out. I see the login success in the log on the Router. How do I get NetBrain to stop using the other 2 entries on the Network Settings tab and only use what I set up in the Shared Devies???

In order to filter out One-IP Tables for duplicate IP addresses, there is the Domain Option to filter DHCP entries. The issue is that the logic removes all non-unique entries. Rather than only removing duplicate IP entries, it removes duplicate MAC entries.While I should only ever have a single MAC for a given IP, I can have the same MAC do multiple IP addresses. The DHCP remove option should only mess with same IP for multiple MAC addresses, but not multiple IP addresses for the same MAC.

Improve the collaboration experience with the new NetBrain 10.1 MS Teams integration!NetBrain’ s latest release allows NetBrain incident objects to post real time updates into designated MS Teams channels.For details about requisites and setup, please access the attached document!As usual, for any questions or assistance, please do not hesitate to reach out!CDP

Hello, has anybody found out, if there is a way to setup Netbrain to lock device “Shared Device Settings” flags right after successful discovery? for now I have to do it manually. Thanks

It seems there is also vulnerability in 2.17.0, is there already testing or recommendation on moving to the 2.17.1 version?

Hello Everyone, I am looking at the devices under Fine Tune/ CLI Configurations failed.  I have over 1400 devices that can pull CLI Configurations and a few are failing to pull information due to 111 errors.   I tried the setup that worked for the other devices and manually added my own login credentials under the tune process and it fails. I also verified I am able to login to the device with my credentials.   Does anyone know what are the causes for the 111 error? Does Netbrain have a list of error codes and possible fixes? 2023-03-20 09:09:37 Begin tune process via Worker NETBRA11(pid: 6668)..2023-03-20 09:10:12 Connecting failed, error code: 111, error description: [111] Connection refused.2023-03-20 09:10:12 Can not Telnet/SSH to the device.2023-03-20 09:10:12 End tune process

Hello there, I am trying to see if there is suggested practices when doing API calls for Meraki from the Netbrain Server. I get the rate-limit issues and have to wait for sometime before it clears. How does Netbrain usually avoid this when monitoring via API calls? Is the polling cycles longer time? Is it a grab all and then sort the data instead of an api call per device? 

We are looking at deploying NetBrain and managing multiple customer networks from it.My question is, for optimum separation from a security standpoint, must there be a separate front server per customer (tenant)? Or can each front server service multiple tenants whilst maintaining separation?The biggest risk we are concerned with is that if a vulnerability exists in the front server, could an attacker on one customer network leverage a front server to gain access to another customer network?It would be a simple matter to have a separate front server for each tenant, but costly where we have lots of customers with small networks.

Hi,My ssh from the Front Server to a network switch fails because the switch responds with a message: Your password has exceeded the maximum lifetime. Please change the password for better protection of your network. Do you want to change it now (Y/N) [N]  ?As the task cannot answer this question, it just times-out the connection.Using the CLI, I can type N and get CLI access.But how can that be done in a discover task? I do not want to change the password.Kind regards,Declan Watts, BT  

Can someone assist me with the best way of cleaning up the ‘Latest CLI Configuration Retrieval Failed’ section under Fine Tune in Domain Management? All efforts to rediscover the devices in that section within my Domain have proved futile. Thanks!

Hi,Does anyone know how to use the API to return the name and ip address of all the devices held in the database for a single domain?I have no problem using the API to connect, select the tenant & domain, and so on. I can see API calls for returning individual devices (if you provide the name and/or ip address).But what if you want to return all of them.For example:Say my NetBrain has 500 devices against a domain. And I have another IP address source (my company’s single truth list), which has 480. I need to get the list of 500 to compare against the 480 so that I can delete the (now obsolete) 20.Yes, I could manually do the deletion, but that is laborious.regardsDeclan  

I am trying to see if there is a why to update/change the management IP of devices via API calls. I’ve looked over the documentation online and can’t find it or it doesn’t exist. ThanksNetBrain-REST-API-R10

Is there some other way to stop a Running scheduled task.Clicking on the ‘hidden’ Stop to the right of the ‘Running’ under Current Status...Stop asks “ This task is running. Do you want to stop it anyway? “ and clicking on Yesdoesn’t seem to work.  Please advise...

My NetBrain server is already synchronized NetBrain with TACACS. If TACACS is already running correctly with NetBrain, do I need to set up manually the user in NetBrain "Users" menu? I think this is not necessary. Could somebody please confirm? Thanks.

I have a bunch of devices in the "Unknown SNMP SysObjectID" section of Fine Tune page. Looking for ways to reduce the count of devices in this section. Looking forward to get some support on this. Thanks !

I have started using NB recently and working on drafting a solution to multiple customers. Here I am getting confused between use case for tenant / domains. To ensure complete isolation of data of different clients, which should i prefer. It seems both are logical separation , utilising same backend components. Looking at it from Administration perspective which solution offers better benefit.  Moreover what are advantages of using Tenant over domain.

Just to inform you, I stumbled across this little issue.When you change the password for the SSH user in the Network Settings, the credential in the Network Settings is username + new password. However, the credential saved in the Shared Device Setting of the devices is still username + old password.This means you have to proceed like this:Before changing the password you need to create a Device Group containing all devices using the specific credentials. Change the password. Open the Shared Device Settings of one of the devices and reapply the user to the device AND the Device Group.When you did not create the Device Group before changing the password, that Device Group will be empty.

I inherited a Netbrain installation when I was hired and am now coming to the realization that it was setup incorrectly. We are a large company of companies. Currently we have 1 domain under 1 tenant. If I’m wanting to limit the scope that I.T. teams from sub-companies would have to other sub-companies devices and data, I should have multiple domains for each sub-company correct?

Is there a QApp or something else I need to run after discovering the Fortinet SDWAN firewalls to pull the SDWAN VPN tunnels?

Hello!I’ve taken a look at the NetBrain online help and it doesn’t appear as though you guys document how to delete devices from the domain?   How do I do this?  Can this be added to the product documentation?Hopefully someone out there can give me an answer...

All, This is a good resource link below.  The table below describes the device vendors and types supported in the system and their discovery methods (via SNMP, CLI and API). For more details about support levels, refer to Tier Support Levels. NetBrain is always updating support for new vendors.  https://www.netbraintech.com/docs/ie100/help/index.html?multi-vendor-support-list.htm

I just tried to discover a new device in my NetBrain system and I’m getting an error that looks like NetBrain can’t connect to the device with a timeout error.  I’ve confirmed my NetBrain Windows 2012 R2 box can ping it and I can log in with PuTTy, but I just don’t get it.  Should I open a support case?