Netshot - Network Configuration Backup and Compliance

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Overview

Netshot is an open source platform for automated network device configuration backup, inventory, and compliance management. It connects to routers, switches, firewalls, and load balancers across more than one hundred device families, including Cisco IOS, NX-OS, IOS-XR, ASA, Juniper, Arista, and Fortinet, periodically archiving running and startup configurations, maintaining a full change history with diffs, tracking hardware and software versions, and continuously checking your estate against compliance rules you define. This image delivers Netshot 0.24.0 fully installed and serving its web UI over HTTPS within minutes of launch.

Configuration Backup and Compliance

Schedule regular configuration snapshots of every managed device and browse the full history with side-by-side diffs to see exactly what changed and when. Group devices into dynamic domains, track hardware and software-version inventory across the fleet, and define compliance rules that flag devices running out-of-date software or configurations that drift from your standard. Change-detection listeners for syslog and SNMP traps let Netshot snapshot a device the moment its configuration is altered, giving your network operations team immediate visibility into unauthorized changes.

Application Stack

Netshot runs as a dedicated, non-root service on a GraalVM runtime, serving its web UI and REST API from an embedded web server over HTTPS on the standard secure port. A local PostgreSQL server holds the device inventory, configuration snapshots, compliance results, and users; the database schema is created and migrated automatically on first start. systemd starts the service and its database on boot and restarts them on failure.

Secure First Boot

The built-in administrator password, database password, credential-encryption key, and TLS keystore are all rotated to fresh, unique values on the first boot of your instance, before the service accepts any traffic. The generated administrator password is written to a file that only the root user can read. No shared or default credentials ship in the image.

Ready To Use

Open the web UI in your browser over HTTPS, read the generated administrator password, sign in, and start adding devices. The image uses a self-signed certificate that you replace with your own trusted certificate; the paired deployment guide walks through this and through onboarding your first devices.

Use Cases

• Multi-site retail or branch networks: automatically back up switch and firewall configurations across all locations, detect drift from golden templates, and generate compliance reports for audits.
• Managed service providers: maintain per-customer device inventories and configuration histories, with compliance rules tailored to each client's security policy.
• Regulated environments such as financial services and healthcare: enforce configuration standards across routers and firewalls, trigger instant snapshots on change via syslog and SNMP traps, and provide auditors with timestamped diff evidence.

cloudimg Support

24/7 technical support by email and chat. Help with deployment, replacing the self-signed certificate, device onboarding and driver selection, compliance-rule authoring, storage and upgrade planning.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.