01 Scheduled and event-aligned configuration backup
Capture on-demand, scheduled and pre/post-change backups through supported device interfaces. Protected versions and visible job results give engineers a reliable comparison point and a relevant recovery artifact before they act.
02 Version history, search and differences
Search configurations under sensitive-field controls and compare running, startup and historical versions. Raw differences are available, with semantic comparison where the device parser supports it, to show what changed in operational terms.
03 Golden state and recurring drift checks
Define desired configurations, inherited baselines and justified exceptions. Detect recurring deviations and distinguish compliant, noncompliant and unknown results so engineering standards can be reviewed consistently across sites and vendors.
04 Configuration policy and lifecycle context
Evaluate deterministic operational and applicable CIS/STIG-oriented rule content against configuration evidence. Combine violations with firmware and EOS/EOL context to prioritize work, while keeping rule checks distinct from an organizational compliance certification.
05 Versioned plans, templates and preflight
Prepare a change from controlled templates, exact targets and a defined window. Validate compatibility, access, configuration state and required preconditions before execution so the approved plan has a concrete operational scope.
06 Topology impact and explainable change risk
Use the affected interfaces, routes, dependencies and business services to assess potential blast radius. Present the factors and assumptions behind deterministic risk, including existing degradation or lost resilience that may make a rollout unsafe.
07 Maker-checker and ITSM approval binding
Bind approval to the specific change plan, configuration, target set and window. Material changes invalidate stale approval, and local permissions and current preconditions remain authoritative when execution begins.
08 Canary and staged execution
Roll out through an approved canary or fixed stages with bounded concurrency and explicit stop criteria. Keep job and batch results visible, and prevent configuration work from consuming the resources reserved for routine monitoring.
09 Post-change validation and recovery
Check device, protocol, path and service behavior through the stabilization period after execution. Roll back through the supported adapter and verified artifact where safe, or escalate with the failed checks and affected scope intact.
10 One Change Assurance Record
Connect the plan, configuration versions, risk evidence, approval, ITSM Change, job, CLI references, incidents and audit. Firmware workflows also retain approved image provenance, integrity and compatibility checks, rollout results and validated recovery behavior.