What does it do?

Open-AudIT is an application to tell you exactly what is on your network, how it is configured and when it changes.

Open-AudIT is designed to be run on a server (Windows or Linux) and to scan your networks for devices. Once a device is found, Open-AudIT runs a series of commands upon it and stores the resulting data in a database. This data is then available for various reporting purposes. Open-AudIT comes with a list of over 50 reports with any number of additional reports able to be created by the user.

But Why?

Why would you want to go to the trouble (“trouble”, hah, see the blog post about downloading, installing and discovering in under 10 minutes here) of keeping track of every device and its configuration? Well, here are some contrived examples…

Would you know if someone installed a bitcoin miner program on their desktop PC and left it running every night? With Open-AudIT, you would not only be alerted when this new software was found, but you would also know which user account installed it and exactly when.

What about if someone bought their laptop into the office and plugged in – would you know? That laptop could be a security nightmare and now it’s sitting on your network. Open-AudIT will see this new device and the “New Devices found in the last 7 days” report will show you. The Dashboard in Professional and Enterprise will also populate its graph. You will know. Your network will be safer.

And then there’s software licensing – that’s a given. Naturally, Open-AudIT can report on exactly what software packages are installed. It’s simple and easy to see if you have bought the required number of licenses.

Features?

As a result of Open-AudIT storing the data about a device, it also recognizes and stores and changes affected upon a device. If software was added or removed, for example, Open-AudIT stores this and can report upon it. This is taken even further by the concept of a Baseline, which exists in Open-AudIT Enterprise. Baselines enable you to compare one device against another and report the differences.

Open-AudIT has an extensive role-based access control mechanism which allows administrator-level users to define the access rights of other application users. If you have multiple departments in your company and would like John from Finance to be able to view all assets, but not be able to change them, for example, this is simply and easily achievable. Open-AudIT can also leverage Active Directory and OpenLDAP for authentication and authorization.

In addition to the standard array of attributes retrieved, Open-AudIT can also be configured to retrieve and store the details of files and/or entire directories of files.

As a benefit of being open-source, users can add specific attributes for retrieval to the audit scripts. Opmantek is always open to including more attributes – all you need to do is ask! There is also the feature to be able to define “custom fields” which users can populate manually. If you need to store some piece of information about a device, Open-AudIT likely already does so, but if not, can be made to do so in a few mouse clicks.

Once you have the data, you can use the Restful JSON API to export it – or CSV, XML, HTML – whatever you like, because it’s your data. The API supports the standard create, read, update and delete functions on all endpoints.

When Open-AudIT scans a network, it is called a “Discovery”. Discoveries can be scheduled and hence automated. Set and forget. Along with automating discoveries, you can automate reports to be run and emailed to you on whatever schedule you choose. Why not send yourself a report containing all new devices found on your network in the last 7 days? This can be done in just a few mouse clicks.

The feature list is extensive and enables tracking of all IT assets, whether they be on your network or not. Need to record the details of a phone given to a user – not an issue. Open-AudIT can do that. What about the PC that’s not physically connected to the network – Open-AudIT still has the ability to audit the machine and store the details. From their location, to how they’re configured, to who is in the Administrators group, to when a piece of software was installed, to ensuring file changes (/etc/htpasswd ?) are recorded. Open-AudIT can tell you exactly WHAT is on your network, HOW it is configured and WHEN it changes. Easily. Automatically. Simple.

How does it work?

Open-AudIT works best when you supply a list of credentials that it then uses to query devices. Open-AudIT makes use of Nmap to scan a network and report any responding devices. These devices are then queried to determine their attributes. Even if you don’t have the credentials for a device on your network, Open-AudIT will still have a record of it thanks to Nmap. If a device is found, working credentials determined and it is a ‘computer’, an “audit script” is copied to the device and run. The script gathers extensive information and sends it back to the Open-AudIT server. If the device is a switch, router, printer, etc and it has SNMP enabled and Open-AudIT has working credentials, it’s attributes will be queried using SNMP and no audit scripts will be used.

Once the data is in Open-AudIT, it is yours to query at will. The database structure is open and documented with examples to get you started (if one of the built-in 50 reports don’t do just what you need).

How is it built?

Open-Audit Community is built using free and cross-platform tools such as PHP, MySQL, and Apache. In addition, Open-AudIT uses VBscript and Bash for its audit scripts. Both Professional and Enterprise use the same codebase with available features enabled by the license. Both Professional and Enterprise are compiled binary code with support offered to users by Opmantek.

Licensing

Open-AudIT started as a free software project. To this day it remains so. In recent years Opmantek Software has become the owners of the codebase and monetize this by creating add-ons in the form of Open-AudIT Professional and Open-AudIT Enterprise.

The original Open-AudIT is referred to as Open-AudIT Community.

Open-AudIT Community is the “engine” of Professional and Enterprise. It is Afferro GPL licensed and will always remain free software.

Open-AudIT Professional and Enterprise are commercial closed source programs, licensed by Opmantek to customers and users. Opmantek supply a free 20 device license to users. Professional and Enterprise build upon the foundation of Community and offer extra features and benefits. These can be seen in the table below.

Cyber Monday is here and we are getting excited for some bargains!

While Opmantek are offering 25% off an Open-AudIT Professional 100 device subscription with the promo code ‘CYBER17” until 5^th December 2017, we have also been trawling the internet for the best deals for technology products and services our small business customers will love.  Here are our top 5:

Adobe

Mirroring their sale from last year, Adobe has on offer a 20% discount off a year’s subscription to Creative Cloud. The offer is available via Adobe’s website until 1st December 2017.

CISCO

CISCO are offering an online Black Friday and Cyber Monday deal buy 2, save 55% off the list price of books, eBooks, video training, practice tests, and simulators with promo code ‘BF2017’.

VMware

VMware have up to 25% discount on a number of their virtualization products as well as their training and certification programs designed to grow skills so you can exploit the opportunities made possible by VMware technology.

Envato Marketplace

Envato Marketplace are offering 50% off 500 of their digital assets, templates and files.  If you are looking to replace your old wordpress theme, rebrand some documents or purchase stock videos and images for your marketing stash, check it out!

Udemy

Lastly, Learn a new skill with massive savings on all online courses until tomorrow night.  Get your IT team up to speed with NMIS core with basic courses in Perl starting from $15 and loads of other development, marketing and business courses available.

Happy shopping!

Introduction

Open-AudIT provides many useful reports about your network, the devices that exist on it and many other items.

Three quick and easy reports that will provide you with an invaluable insight to your network are: Daily Discovered Devices, Daily Discovered Software, and Devices Not Seen.

You can schedule these to run each week and to email you the report for the previous week’s items. This simple action will give you an essential view of what’s happening with devices on your network. All automated. Set and forget. Easy.

We have a quick video showing these reports, here:

Daily Discovered Devices

When you run this report you will see a list of the devices discovered each day. You will also see any devices that are “unknown”. These might be devices you do not have credentials to access or devices that do not respond to the normal discovery tests. This is a very quick and easy way to discover any unauthorized devices that have been plugged in.

Daily Discovered Software

Now you can easily see if new software has been installed. Was it authorized? Is it on the list of allowed software? Who installed it? When? Easily get a report each week that you can quickly skim through and know what’s happening.

Devices Not Seen

How would you know if a device has not been on your network for an extended amount of time? Because Open-AudIT records when it has seen devices, calculating how long since it has seen a device is easy. You might expect to not see a salesman’s laptop for a couple of weeks – but what about a couple of months? What about a desktop – why would it not have been seen? With this report, you can quickly get to the bottom of missing devices – including even who is responsible for the device in question. Quick. Simple. Easy.

Simply scheduling these three simple reports will provide you much more visibility on your network, and will even make your network safer!

Introduction

Adding fields that are specific to your requirements is an extremely simple process with Open-AudIT. You can then populate these fields with whatever data you would like recorded. Asset Numbers, Cost Codes, specific attributes, etc.

Fields can be one of two types. A freeform text field or a selectable list of values. A log is kept of any changes to a field – when it was changed, what it previously was and who changed it.

We have a quick video showing this process, here:

Community Requests

As always, if you have a field that is not already in Open-AudIT and you think would be useful to the community at large, please do send us your idea. We’re only too happy to incorporate new fields into Open-AudIT when the community requests them.

The GUI

Creating a field is simply a matter of menu -> Manage -> Fields -> Create Fields. Provide it with a name (as a minimum) and you’re done. Easy! Now the field will appear on the Device Details pages.

You can change the type to

The API

As with all collections within Open-AudIT, fields are also accessible via the JSON API. Simply send a GET request to /fields for a list. The standard POST, DELETE and PATCH requests also work as expected.

More specific details are available on the Open-AudIT wiki, https://community.opmantek.com/display/OA/Fields.

Updating the value of a device’s custom field is also available via the API. Send a PATCH to /devices/{id} with a JSON formatted, URL encoded payload of data.

data=%7B%22data%22%3A%7B%22id%22%3A%221%22%2C%22type%22%3A%22devices%22%2C%22attributes
%22%3A%7B%22My+select+field%22%3A%226%22%7D%7D%7D

An example of the JSON formatted, URL encoded data payload is below. In this instance, we are changing the value of “My select field” for device #1.

When it’s not URL encoded, it looks thus:

{“data”:{“id”:”1″,”type”:”devices”,”attributes”:{“My select field”:”6″}}}

And nicely formatted for human consumption, it looks thus:

{
“data”: {
“id”: “1”,
“type”: “devices”,
“attributes”: {
“My select field”: “6”
}
}
}

Gartner have just released their 2017 Market Guide for Network Automation with Opmantek featured for the second year in a row.

The annual market review assesses sentiment and trends as well as key developments in the platforms and tools that automate the maintenance of virtual and physical network device configurations, providing an opportunity to lower costs, reduce human error and improve compliance with configuration policies.

opConfig and Open-AudIT have long been regarded as some of the most powerful, easy to use products on the market. Check out the video below on automated configuration comparisons to see one of the many ways that you can use opConfig to reduce manual network tasks.