NacTrack
FRRequest access

Policy

What your devices apply to traffic and access, read from their configuration.

Manual contents

At a glance

  1. WherePolicy menu.
  2. AccessThe beta module, plus the QoS, access list or ISE module depending on the page.
  3. DataCollected QoS policies, ACLs or ISE sessions.
/qos
The demo estate's service rates.

What the screen shows

Service Rates

Policed circuits, their contracted rate, and those over or near it.

QoS per interface and catalogue

Every interface in both directions, including those without QoS, exportable as CSV; and the catalogue of defined policies.

Access Control

ACLs defined never applied, applied never defined, permit any, unfiltered vty and SNMP, unreachable rules, and management plane exposure.

Network Access (ISE)

Sessions, endpoints, access devices, TACACS and TrustSec.

Limits and things to know

The Policy menu does not appear

All its pages are BETA and need their data: without the beta module or without QoS, ACL or ISE data, the menu stays hidden.

Read next

How-to guide

How to read a device's management access posture

Management exposure is not one setting. Read which services answer, whether they are encrypted, confined to a VRF and centrally authenticated.

How-to guide

How to find devices using default or version 1 and 2c SNMP communities

An SNMP community is a password in clear text, and v1 and v2c have nothing else. Find the devices still carrying public, private or no better.

Manual

Compliance

How to run rule evaluation, read the estate and per device scores, set a waiver on a check, and export the findings as PDF, XLSX or CSV.

Next chapter

Compliance

ContinueManual contents