Enhance Infrastructure Automation with Indeni 7.4
Notice: This blog post was originally published on Indeni before its acquisition by BlueCat.
The content reflects the expertise and perspectives of the Indeni team at the time of writing. While some references may be outdated, the insights remain valuable. For the latest updates and solutions, explore the rest of our blog
Knowledge Enhancements
Indeni supports infrastructure automation by alerting you to important issues in your environment. Today, we have added a few Auto-Detect Elements for Check Point firewalls to help you get on top of these events.
- Monitor if OSPF routes not in routing table
- Alert when Log Exporter process go down
The support for Check Point now extends from earlier versions of GAiA to the latest release Check Point GAiA R80.40.
The support for Palo Alto Networks now extends from earlier versions of PAN-OS to the latest release Palo Alto Networks 10.0.
Grafana Integration
Grafana is a popular open source tool with advanced visualization capabilities for reporting and dashboarding. It is used by many companies to monitor any metrics from countless data sources. We are pleased to announce our new plugin that lets you integrate Indeni and Grafana. You will find the instructions to install the plugin on our Bitbucket page.
RADIUS Integration
You can leverage the RADIUS authentication for user access bypassing the local authentication provided by Indeni. Through this you will have one point of contact for user management when it comes to authentication, authorization, and password management.
For information about the configurations involved in integrating RADIUS server with Indeni, please refer to the Indeni 7.0 User Guide – RADIUS Authentication Integration.
Migration Considerations:
If you are migrating from local users to using an external RADIUS server, you should be aware of the followings:
- Once the integration is active, all authentication requests will be sent to the external RADIUS server. Indeni will no longer use the local database for authentication. You should notify your users to switch to their RADIUS credentials.
- To facilitate a smooth migration, the only change from an existing user perspective is the password. When an existing user logs in to Indeni, Indeni forwards the request to the RADIUS server for authentication and authorization. If the request is accepted, Indeni retrieves the role for that user from its local database.
Summary
When businesses grow, the importance of system integration grows with it. We will continue to integrate with other systems to enhance infrastructure automation, helping you maximize your investment in firewalls while reducing your workload.
To see a complete list of features and bug fixes, refer to the release notes page on our website. As always, if you have questions or comments, we’re here to help.
Key takeawaysThis key takeaway was generated through LLMs crawling the page and coming up with an overview of the content.This article announces Indeni enhancements that improve infrastructure automation and system integration for network security environments. It introduces Auto-Detect Elements for Check Point firewalls (including GAiA R80.40) to monitor OSPF routing omissions and Log Exporter process failures, extends Palo Alto Networks support to PAN-OS 10.0, and adds integrations with Grafana for visualization and RADIUS for centralized authentication. The outcomes include better alerting on critical device events, unified user authentication via RADIUS during migration, and improved reporting through a Grafana plugin to reduce operational workload and maximize firewall investments.
What new Check Point monitoring capabilities were added and which GAiA release is supported?
The article describes new Auto-Detect Elements for Check Point firewalls that alert when OSPF routes are missing from the routing table and when the Log Exporter process goes down. Support for Check Point has been extended to include the latest GAiA release mentioned in the article, Check Point GAiA R80.40, in addition to earlier GAiA versions. These additions enable Indeni to surface specific operational faults that can affect routing and logging/exporting functionality on Check Point devices.
How does the Grafana integration work and where can I find installation instructions?
Indeni now offers a Grafana plugin to integrate Indeni metrics with Grafana’s advanced visualization and dashboarding capabilities. The integration allows Grafana to consume Indeni data sources so organizations can report and monitor Indeni metrics alongside other observability data. The article states that installation instructions for the plugin are available on Indeni’s Bitbucket page, which is referenced as the place to find the plugin and setup guidance.
What should administrators consider when migrating from local Indeni users to RADIUS authentication?
When enabling RADIUS integration, all authentication requests are forwarded to the external RADIUS server and Indeni stops using its local user database for authentication. Administrators should notify users to start using their RADIUS credentials because the only visible change for existing users is their password. During login, Indeni forwards credentials to the RADIUS server; if authentication/authorization succeeds, Indeni will still retrieve the user’s role from its local database. The article advises reviewing the Indeni 7.0 User Guide section on RADIUS Authentication Integration for configuration details.
Published in:
Ulrica de Fort-Menares is the Vice President of Product Management for Infrastructure Assurance.
Related content
How to map your network with user-defined links in Integrity X
Map your network with user-defined links in Integrity X to define and manage custom relationships, such as dual-stack and NAT environments.
Automate your DDI modernization path by migrating with Micetro
Automate cross-platform DNS and DHCP migration with Micetro to reduce risk, eliminate manual effort, and modernize infrastructure faster.
Your journey to intelligent NetOps begins at Cisco Live
Visit BlueCat’s booth or book a meeting now to learn more about how our solutions can help you build a network that supports constant change.
Replace BIND and ISC with Micetro DNS/DHCP Server (MDDS)
Tired of patching and manually configuring BIND DNS and ISC DHCP? Discover how Micetro MDDS appliances can replace them for modern DDI.