Scan Network Devices with cnspec
Scan network devices like Cisco, Arista, Juniper, Fortinet, Palo Alto, Check Point, F5, MikroTik, and Ubiquiti against security and compliance best practices with cnspec.
Switches, routers, and firewalls enforce the boundaries of your network, and a single misconfiguration can expose everything behind them. cnspec connects to your network devices and scans their running configuration against security and compliance best practices, without installing anything on the device.
New to cnspec? Read the Quickstart to install cnspec and run your first scan.
Choose your device platform
Cisco IOS XR/XE and NX-OS
Scan Cisco routers and switches.
Cisco Catalyst Center
Discover and query devices managed by Cisco Catalyst Center.
Arista EOS
Scan Arista EOS network devices.
Juniper Junos OS
Scan Juniper devices running Junos OS.
Fortinet FortiOS
Scan FortiGate firewalls running FortiOS.
Palo Alto PAN-OS
Scan Palo Alto firewalls running PAN-OS.
Check Point
Scan Check Point Security Management servers and their gateways.
F5 BIG-IP
Scan F5 BIG-IP application delivery controllers.
MikroTik RouterOS
Scan MikroTik RouterOS routers and switches.
Ubiquiti UniFi
Scan Ubiquiti UniFi network controllers.
Looking to scan domains, IP addresses, or open ports instead of device configurations? See Scan Networks and Hosts.
Looking to scan server baseboard management controllers over IPMI or Redfish (including HPE iLO, Dell iDRAC, and Supermicro)? See Scan BMCs.
Scan a fleet of devices at once
Each device page above shows how to connect to one device at a time. Once you're ready to scan more than a handful, list every device and its credentials in an inventory file and scan them all with a single command:
cnspec scan --inventory-file network-fleet.ymlFor a worked example that mixes vendors and shared credentials, read Remote Scanning with Inventory Files.
Go further with Mondoo Platform
To continuously monitor your network devices and track posture over time, register cnspec with Mondoo Platform.