11.7. Compliance Management¶

NCM Compliance management module is accessible by selecting NCM Compliance from the menu as below. It will lead you to NCM Compliance Management Module Dashboard.

Accessing NCM Compliance Management Module¶

NCM Compliance Dashboards

NCM Compliance module provides intuitive dashboard to get a quick insight on the compliance status of NCM across the Network. Dashboard with appropriate rules and policies will allow admin to easily focus on actual parameters of compliance and remediation, and reduce the efforts on how to search, record, and report. It also offers access to other actions and interface.

NCM Compliance Dashboards¶

It offers below widgets.

Compliance Status by devices.

NCM Compliance by Device¶

Compliance status by Vendors.

NCM Compliance by Vendors¶

Compliance status by Device Report Category

NCM Compliance by Device Report Category¶

Critical Violations

Critical violation against defined rules and policies are listed below:

Device Name: Displays Device Name
Report Name: Displays Report Name
Policy Name: Displays Effective Policy Name
Rule Name: Displays Enforced Rule Name
Config Type: Displays the Config type of the alert (i.e. Startup or running)
Backup Version: Displays the Backup version of NCM Backup
Message: Displays the Message
Execution Time: Displays the execution time

List of Critical Violations¶

Rules for NCM Compliance

Various rules related to desired control in NCM can be defined along with categorisation as per business/functional requirement.

NCM Compliance Rules¶

Compliance configurations related to rules is carried out at two levels:

Rules category: Based on various functional requirement, user can create the Rules category to group the NCM compliance rules. For e.g. SNMP baseline, session time, password rules.
Rules: Rules are the various conditions required to verify the configuration items like passwords, port no. commands etc.

11.7.1. Creating Rules category¶

For effective management it is advisable to create appropriate Rules Category:

Rule Category can be added by clicking + button on top right corner.
For quick search, Category search bar can be used.
Each category is listed on left side.
Each category can be edited to deleted from the rightside action buttons of each category

Creating Rule Category¶

Creating Rule Category 2¶

All added Rule category can be viewed in the Rule category list on left.

Note: Category can be deleted only if there is No rule attached to it.

11.7.2. Creating Rules¶

Rule creation is one of the essential steps for implementing NCM compliance. A specific string must be mentioned which should be present in the Configuration of the device. NCM Engine will look for that string in the Device configuration for qualification.

Add the rule name.
Add Description Relevant to rule.
Select the rule Category for this rule. All Rules related categories will be listed for selection.
To Add condition for this rule, User must select appropriate condition set from here
Assign the appropriate severity for the output.
Add the Action for the rule. You can create a new action using a + New button.
Select the Device Vendor and Acion accordingly.
Hit Save button to save or Reset to fill up the fields again.

Creating Rule¶

11.7.3. Listing and Managing Rules¶

All Configured Rules can be seen on Rules main page as shown below. Respective action can be applied on each or multiple rules from here.

Rule Name: Shows the Rule Name as per configuration
Description: Shows the Description as per configuration
Severity: Shows Severity as per configuration
Creation time: Shows Rule Creation time
Policy Count: Shows nos. of policies where the rule is used. On clicking it will open a list of policies with this rule.
Report Count: Shows nos. of Reports with this rule. On clicking, it will expand and display the list of Report in which this rule is used.
Status: Display the status of a rule as Enable/Disable
Action Buttons: List of buttons allows actions like Status change, Edit or delete.

Listing and Managing Rule¶

Listing and Managing Rule 2¶

All the Actions like status change, Edit or delete can be carried out in single or multiple rule Action button

Listing and Managing Rule 3¶

NCM Compliance Policy

Based on compliance requirement, User can apply the Configured Rule to devices by creating policies as needed.

NCM Policy Category¶

11.7.4. Creating Policy Category¶

Compliance configurations related to Policy is carried out at two level.

Policy category: Based on various functional requirement, User can create the Policy category to group the NCM compliance Policies. For e.g. Edge Device, Cisco Access switches, Core routers.
Policy: Policy is the deployment of various rules towards set of devices on which respective rules to be applied. E.g Cisco ASR, CatalystCore etc.

11.7.5. Creating policy category¶

Policy categories can be created as shown below:

Policy Category can be added by clicking + button on top right corner.
For quick search, Category search bar can be used.
Each category is listed on left side.
Each category can be edited and deleted from the rightside action buttons of each category

Creating Policy Category¶

Creating Policy Category 2¶

All created policy categories are listed on the left side of the Policy tab and can be edited from the action button with that policy tab.

11.7.6. Creating Policy¶

Policy creation is requried to apply the configuration realted rules to respective devices. Policies can be created as shown below. No duplicate Rules can be selected.

Add the policy name.
Add Description Relevant to policy
Select the policy Category for this policy. All policies related categories will be listed for selection.
Select the Appropriate Config type (startup or running) for this policy.
Select the Device tag from the list of tags.
Select the device from the list of devices to apply this policy.
Select the Rule category from the list of Rule categories.
Select the Rule to be applied from the list of rules for this Policy.
Add more rule as required for that policy. (please note.. each rule can be selected only once in that policy)
Click add button to save this policy.

Create Policy¶

11.7.7. Viewing and managing Policy¶

All Created policies are displayed as shown below and can be edited from here:

Policy Name: Shows the Policy Name as per configuration
Description: Shows the Description as per configuration
Created time: Shows Rule Creation time
Report Count: Shows nos. of Reports with this policy. On clocking it will expand and display the list of Report in which this policy.
Rule Count: Shows nos. of rules used in this policies. On clicking it will open a list of rules with their status.
Status: Display the status of a policy as Enable/Disable
Action Buttons: List of buttons allows actions like Status change, Edit or delete.

View Manage Policy¶

View Manage Policy 2¶

All the Actions like status change, Edit or delete can be carried out in single or multiple policies using Action button also.

Policy Actions¶

NCM Compliance Report

Various audit requirements for compliance adherence makes the reporting an inevitable part for any compliance management solution. Motadata allows creation of various reports for the implemented policies through this interface.

NCM Compliance Report Screen¶

Compliance configurations related to Reports is carried out at two level.

Report category: Based on various functional requirement, User can create the Report category to group the NCM compliance Reports. For e.g. Well known SNMP policy, common password, interface with ICMP block etc.
Report: Report is the snapshot of NCM Compliance status of deployment of policy towards set of devices on which respective rules to be applied.

11.7.8. Creating report category¶

Functional categories of the reports can be created for effective management as shown below:

Report Category can be added by clicking + button on top right corner.
For quick search, Category search bar can be used.
Each category is listed on left side.
Each category can be edited to deleted from the rightside action buttons of each category

Create Report Category¶

Create Report Category 2¶

11.7.9. Creating Report¶

NCM Compliance Management Module offers to create various reports as needed based on configured policies as shown below. By Clicking New button on the Report page new reports can be configured.

Add the report name.
Add Description Relevant to report
Select the report Category for this report.
Select the Appropriate policy category of the policy used in this report.
Select appropriate policy from the list.
Click add button to save this report

Create Report¶

11.7.10. View and Manage Report¶

All created reports are visible and can be edited from the main report page as shown below:

Report Name: Shows the Report Name as per configuration
Description: Shows the Description as per configuration
Created time: Shows Report Creation time
Policy Count: Shows nos. of policies used in this report. On clicking it will open a list of policies with its status.
Rule Count: Shows nos. of rules used in this report. On clicking it will open a list of rules with their status.
Status: Display the status of a report as Enable/Disable
Action Buttons: List of buttons allows actions like Status change, Edit or delete.

View and Manage Report¶

View and Manage Report 2¶

All the Actions like status change, Edit or delete can be carried out in single or multiple reports using Action button also.

Rule base Report View¶

Motadata NCM Compliance module also provide detailed view for reports and export to CSV and pdf as shown below:

Rules for each report with last three execution details.

Rule base Report View¶

Violated, nonviolating and total devices with detailed view for each violation per device No.

Violated/NonViolated Device View¶

Violated/NonViolated Device View 2¶

For effective usage of above reports, it is requried to create scheduler for the reports created here.

11.7.11. Scheduling of NCM Compliance reports¶

Once reports are created in NCM Complinace module create the shcdule for the same as below:

Follow the scheduling process and click to add new job in the scheduler.
Search for NCM related jobs. All NCM related schedulled job will be displayed.
Select the NCM Compliance job as shown below.

Scheduling Report¶

Create appropriate schedule and select the required report from the list of compliance report created under report section earlier.

Scheduling Report 2¶

Below is the sample output of the Report job execution over email.

Sample Output¶