IOS Security Alerts

FormerIdeaCreator

Hey,

It would be nice if NCM could run the IOS versions it collects from the inventory through the IOS Security Checker and give a report or even an alert when it finds an IOS version with known security issues.  Similar to an EOL alert.  You can check the IOS version for know vulnerabilities here.

http://tools.cisco.com/security/center/selectIOSVersion.x

I don't know of anything similar for other vendors.

dcoder

We have been using Infoblox Network Automation (formerly Infoblox NetMRI, formerly Netcordia NetMRI) for this purpose as it checks device versions against published vendor lists of known vulnerable releases, or releases with serious flaws. Since vendors publish this information (at least Cisco does), this kind of check would be very valuable since a competitor's product would not be needed to provide this information.