30 days on your network, with your own devices
NacTrack reads the configuration and state of your network devices over SSH and turns them into inventory, topology, compliance gaps and CVE exposure, on your own server. The trial gives you the product on 25 devices, for 30 days from activation.
The trial at a glance
- Length30 days from activation, at first boot.
- Scope25 devices, 1 tenant, every module except the AI copilot.
- PriceFree, with no card and no commitment.
- Who answersA person, by ticket and by email.
Request the trial
This information does not filter your request: we use it to check coverage of your devices before sending you the image.
How the request works
What you need
What the trial image needs, with what leaves the machine and what you can switch off.
- A dedicated machine
- Physical or virtual: 4 CPUs, 13 GB of memory and 50 GB of disk at least, and a DHCP server on its network. The installation is unattended and erases the machine's largest disk, other than the install media: do not run it on a server used for anything else.
- A download of a few GB
- The image is specific to your trial, and the email gives its size. Keep a copy if you may reinstall: it is deleted from our server as soon as the installation starts.
- SSH access to your devices
- From the machine, port 22 to your devices' management addresses, and a read account on each. Telnet (23) only on a device where you turn it on.
- One HTTPS path out (443)
- On first boot, the machine needs to reach licensing.yuften.com and support.yuften.com. Then, every night: licence validation and the CVE and end-of-life catalogues, which receive vendor, model, version and device count, never a configuration. The appliance must reach our licence authority at least once every 30 days; without it the application turns read-only. The detail is on the what leaves your server page.
- What else leaves, and can be switched off
- Automatic tickets to our support, on an application error (message, trace, page without its parameters, user, client address) and on an attack detected on the web interface, are on until an administrator refuses them: a panel asks them on first use, and the choice is changed later in Administration, Automatic tickets. The support tunnel (WireGuard, UDP 51820) stays off until you turn it on. Each flow, what it sends and how to stop it, is listed on the what leaves your server page.
- A browser on your workstation
- Port 443 of the machine open from your administration workstation. The default certificate is self signed: the browser says so, which is expected.
Verify the image before you install it
The image is signed with our release key. If an image fails the check, do not install it: write to us.
- Key fingerprint
- D6AB B5A7 6A7E 801F 15D4 5FCD F8D9 CB1F 9035 C4A5, RSA 4096 key "NacTrack Appliance Signing", releases@yuften.com.
- Public key
- nactrack-release-pubkey.asc, imported with gpg --import nactrack-release-pubkey.asc. Then gpg --fingerprint releases@yuften.com must show exactly the fingerprint above.
- Check the SHA256
- Compare with the checksum given in the email: sha256sum (Linux), shasum -a 256 (macOS) or Get-FileHash -Algorithm SHA256 (Windows PowerShell), followed by the downloaded file name.
- Check the signature
- Download the .asc file from the email as well, then run gpg --verify followed by the .iso.asc file and the .iso file. The expected result is "Good signature", with the fingerprint above.
Three installation steps
- 1
Boot the machine from the image
From your hypervisor's virtual drive, a USB stick or a DVD. The system installs by itself, with no questions, and encrypts the disk with LUKS2; with a TPM 2.0 chip the unlock is bound to it, without one the disk unlocks by itself at boot. The machine then restarts from its disk.
- 2
Let NacTrack install itself
On first boot, the application installs from the media, in about fifteen minutes. The machine then needs HTTPS access to licensing.yuften.com and support.yuften.com. This boot activates the licence: the 30 days start here.
- 3
Get the address and the administrator account
Sign in at the console or over SSH as nactrack-admin with the password specific to your image, given in the email. sudo cat /root/nactrack-install.log gives the web interface address and the administrator account. Also copy the encrypted disk's recovery key, /root/nactrack-luks-recovery.txt, off the machine, then follow the Get started guide: credentials, devices, first collection.
Is your device not supported?
Open a ticket: we add the parser free of charge within 5 working days. Even before installing, reply to the acknowledgement with the show version or display version output of your devices: we tell you what will be read and what will not.
What happens next
Do the 30 days start when the email arrives?
No. They start at activation, on the appliance's first boot.
And at the end of the 30 days?
Your data is on your server and stays there. Before the trial ends, Mehdi contacts you to agree with you on what follows.
What does it cost afterwards?
On request, depending on the device count. The trial itself is free, with no commitment. The licence model is explained on the pricing page.
Can I go beyond 25 devices?
Not during the trial. Pick 25 representative devices: one of each platform, a core, a distribution, an access switch.
Does NacTrack change my devices?
No. Collection connects over SSH and runs read commands (show, display). If a device asks for a confirmation, the collector does not answer "yes" and drops the command; the one exception is a Huawei read command that warns it will take long.
Who answers if something gets stuck?
A person, by ticket, Monday to Friday, 9:00 to 18:00 Morocco time, in French and English. No remote access is opened during installation: if you want our help on the machine, you are the one who turns the support tunnel on.
Who are you?
Yuften, a Moroccan company. NacTrack has run in production for four years at a West African incumbent operator, a social security fund and Moroccan groups. See who builds NacTrack.