What is Network Configuration Management (NCM)?

Network configuration management (NCM) is a process that every device on the network is subjected to throughout its life cycle. It spans over device discovery, inventory maintenance, configuration backup, monitoring configuration changes and compliance, tracking user activity and troubleshooting, by executing appropriate network operations, whenever necessary. If your network environment is handled manually, network configuration management becomes a tedious task for admins. But, if network configuration management can be automated according to one's needs and specifications, it will enhance the efficency of your network infrastructure many-fold and also reduces management overhead of admins.

 

What is Network Configuration Manager?

Network Configuration Manager, which acts as a network configuration management tool, provides comprehensive network configuration management solutions that help you manage the entire life cycle of your network devices and configurations. It provides solutions for network configuration, change and compliance management. Network Configuration Manager also assists you with crucial network operations like automating complex network operations, scheduling backups, tracking user activity, generating detailed reports and a lot more.

What is NCM? - ManageEngine Network Configuration Manager

Let's look into some of the major functions of Network Configuration Manager that fall under network configuration management (NCM).

Network Configuration Manager functions:

Network Configuration Manager functions include, but is not limited to, the following:

1. Network device discovery

Discovering your device and adding it on to the inventory is the first step in network configuration management. It is important to keep records of your network devices and their hardware properties. Besides improving the network admin's visibility into the network devices, an informative inventory will help the admin conduct regular audits. The inventory gives a detailed view into the device specifics such as the serial numbers, interface details, port configurations and hardware specifics of the device which will all prove useful while compiling audit reports.

2. Configuration backup

A network operator must always be ready for a network mishap and the most fundamental element in becoming disaster-ready is taking network backups. A faulty change or update can cause problems like a network outage or a security breach. Any such events can immediately be dealt under network configuration management (NCM) with by overwriting the faulty configuration with a trusted version from the backup.

Most organizations manually take backups and save them as flat files. This is not recommended as it increases the risk and chances of being hacked. Remember to always encrypt and save your configurations.

3. Configuration change management

It is recommended that you keep a record of your users to facilitate easier identification of configuration changes. In a network that houses multiple operators, it is crucial to avoid any unauthorized change that might bring about an unfavorable output. While these only cut down the chances of something going wrong on the network, they don't entirely eliminate the chances of it happening. This is where the configuration backups come into a play. You can readily upload a trusted version of the configuration and restore the device and ensure business continuity using Network Configuration Manager.

4. Executing complex network operations

Network Configuration Manager includes the execution of many network operations and sometimes these can also be automated. For instance, if you need to change the password of all cisco routers on a network, applying the change to every device individually would be a tedious process. This is where configuration templates that are commonly called 'Configlets' come into play. You can centrally execute this operation to all the devices using configlets. They also come with the added advantage of scheduling, which does not require the user to be around while the operation is being executed.

5. Network compliance to industry standards

There are some industry standards to which your network devices must comply to. This is to ensure that your data is secure and to keep your business away from the risk of disreputation.
Let's look into a few examples of compliance requirements and their respective actions below:

CIS Cisco ASA Policy:

This policy applies to all network devices that run on Cisco Adaptive Security Appliance (ASA) operating system.

  • Condition: A rule in the CIS Cisco ASA Policy requires to check if there is a local username and password in the configuration.
  • Action Required: The network admin has to add a local username and password to the configuration.

PCI Compliance:

This applies to any company that accepts card payments, stores, processes and transmits cardholder data.

  • Condition: There is a condition in the PCI Compliance Policy that requires the password of all devices to be reset every 6 months. 
  • Action Required: The network admin has to check if the password has been changed on time.

Sox Compliance:

The role of Sox Compliance is to majorly reform the financial disclosures and prevent accounting fraud in corporations. 

  • Condition: A clause in the Sox compliance requires the user to be locked out once there is a particular number of failed login attempts.
  • Action Required: The admin is supposed to set the maximum number of failed login attempts.

HIPAA Compliance:

HIPAA Compliance mandates the protection sensitive patient records. Any establishment that holds with it sensitive health information must comply with the HIPAA Act.

  • Condition: HIPAA Compliance requires NBAR to be used to track traffic and block unwanted protocols. (NBAR is a mechanism that regulates and classifies bandwidth for network applications.)
  • Action Required: The admin is supposed to check and enable NBAR.

Benefits of using Network Configuration Manager: A comprehensive network configuration management (NCM) software

  1. Built-in multi-vendor device configurations.
  2. Take automated backups of your configuration files.
  3. Encrypt and store configuration files.
  4. Track configuration changes in real-time.
  5. Record a history of configuration changes.
  6. Recover from network disasters instantaneously.
  7. Enhanced network security by preventing unauthorized configuration changes and notifying the admin.
  8. Reduce configuration errors by regulating changes with change management.
  9. Automate both simple and complex network operations.
  10. Ensure device configuration compliance to industry standards.
  11. Save time spent on repetitive tasks.
  12. Roll-back mechanism when configuration changes are unsatisfactory.
  13. Generate insightful reports on changes, compliance, inventory and other vital network parameters.

So, what are you waiting for? Download Network Configuration Manager and get a 30-day free trial!

To get an overview of what is network configuration management (NCM), click here.

Learn how network device management works with Network Configuration Manager.

FAQs

1. What is NCM in networking?

+

2. What does a Network Configuration Manager do?

+

3. How does NCM work?

+