360-FAAR (Firewall Analysis Audit and Repair) is an offline, command line, Perl firewall policy manipulation tool to filter, compare to logs, merge, translate, and output firewall commands for new policies, in Checkpoint dbedit, Cisco ASA, or ScreenOS commands. It is all contained in one file. It can read policy and logs for: Checkpoint FW1 (in odumper.csv / logexport format), Netscreen ScreenOS (in get config / syslog format), and Cisco ASA (show run / syslog format). It uses both inclusive and exclusive CIDR and text filters, permitting you to split large policies into smaller ones for virutalization at the same time as removing unused connectivity. It supports policy to log association, object translation, rulebase reordering and simplification, rule moves, and duplicate matching automatically. It allows you to seamlessly move rules to where you need them. 'print' mode creates a spreadsheet for your audit needs with one command.
KVpnc is a KDE frontend for various VPN clients. It supports Cisco VPN (vpnc, vpnclient (a proprietary client from Cisco)), IPSec (FreeS/WAN, Openswan, strongSwan, racoon), PPTP (pptpclient), OpenVPN, L2TP over IPSec (l2tpd, xl2ltpd, openl2tp) (usable with FreeS/WAN, Openswan, strongSwan, and racoon), Vtun, and OpenSSH. Smartcards will be supported within OpenVPN and strongSwan. vpnc is a replacement for the Cisco VPN client, and is used as a client for the Cisco3000 VPN Concentrator. FreeS/WAN, Openswan, and strongSwan are IPSec clients for Linux 2.4.x/2.6.x, and racoon is an IPSec client for Linux 2.6.x and *BSD. l2tpd, xl2tpd, and openl2tp are Linux L2TP VPN clients/servers.
The klish is a framework for implementing Cisco-like command-line interfaces on Unix systems. It is configurable through XML files. "Klish" stands for "Kommand Line Interface SHell". The klish is a fork of clish 0.7.3 developed by Graeme McKerrell. The klish has some new features, but it's as compatible as possible with clish's XML configuration files.
chan-sccp-b is an extension of the original chan-sccp implementation for the Asterisk soft-PBX. It lets you hook up a Cisco/SCCP Phone to your Asterisk server using the SCCP protocol, which works a lot better than the SIP firmware on the same phone. It provides full phone functionality instead of just a simple SIP channel provider. It offers functionality like shared lines, hotline functionality, guest login, dynamic speeddials, private line automatic ring-down (PLAR), personal softkey configurations, Dundi support, SCCP extended dialplan functions, manager support, and custom device state buttons.
Cisco Template Manager (CTM) is a set of tools that make it easy to manage Cisco configurations over a whole network based on your self-defined templates. With CTM you will have a unified configuration in your entire network, which is the basic building block of operational stability and security. The pre-defined templates support regular expressions. It supports the C760x, C730x, C37xx, C35xx, C29xx, C28xx, C18xx, and C17xx family series.
Counters.pl collects the CLI counters from network devices and produces custom reports. These counters can be reset independently of the SNMP counters, and when collected weekly, can highlight issues such as connection errors that you will not see looking at graphs produced from SNMP counters. They also contain information that is not available via SNMP. The reports can be viewed on a Web site and/or sent via email. There is a flexible configuration language in which reports can be specified. The format and style of the HTML reports are controlled by Template Toolkit templates and CSS. Currently only Cisco network equipment is supported.
Andrisoft WANSIGHT is a fully featured network traffic analyzer and collector. It provides in-depth traffic analysis, traffic accounting, and bandwidth monitoring, and enables you to generate complex traffic reports, graphs, and tops, instantly pin down the cause of network incidents, understand patterns in application performance, and make the right capacity planning decisions. It supports 10GbE packet sniffing and NetFlow, sFlow, and IPFIX.
check_nwc_health is a plugin for the Shinken (or Nagios/Icinga) monitoring system. It is used to check hardware health, environment, interfaces, pools, uptime, etc. of a great range of the most popular network components like switches, routers, firewalls, proxies, load balancers, etc. Currently it can monitor: Cisco IOS, Cisco Nexus, F5 BIG-IP, CheckPoint Firewall1, Juniper NetScreen, HP Procurve, Nortel, Brocade 4100/4900, EMC DS 4700, EMC DS 24, Allied Telesyn, and Blue Coat SG600.
Archivist is a network device configuration archiving and versioning program. It uses Subversion as its revision control system. Its multithreaded design makes it quite fast and thus suitable for operation on large networks with thousands of network devices. It supports Cisco IOS, Cisco CatOS, Juniper JUNOS, and Brocade/Foundry MLX series, but it can be easily extended to support any SSH or telnet-based network device by creating your own config download and post-processing scripts.