We use the Policy Reporting function extensively.
I would however like to see some enhancements to make the feature more powerful.
In particular we have issues when attempting to perform policy compliance on individual interfaces (in our case QOS compliance). Rather than just enabling policy reporting on the configuration files, I would like to be able to generate similar reports on information held within the Cirrus database (particularly the interface table).
When creating a policy currently I only have the option of selecting a node/s to apply the policy. It would be useful to be able to determine criteria based upon both the existing node criteria and interface criteria.
The interface table could also have another field added for the interface configuration (perhapes parsed from the configuration held in the node table). If we could then apply a regex expression against this field, it would enable us to produce Policy Reports down to the interface level.
If/then/else logic within the rule definitions would also be a major benefit.
Dave.
