ConfigVault — Network Configuration Backup & Compliance
ConfigVault gives you reliable, automated configuration backup, change history, compliance checks, and safe, operator-driven remediation for your network.
Who ConfigVault is For
- Enterprise network operations teams that need a safety net for change.
- Security and compliance teams that must prove backup and configuration policy coverage.
- Service providers that want a consistent approach across many tenants.
Core Capabilities
Automated Backups
Schedule nightly backups across routers, switches, firewalls, and controllers with a unified job engine and per-device visibility.
Snapshot History & Diff
Maintain a full history of configuration snapshots, with clear diff views and change summaries so you can see what changed and when.
Last Known Good & Restore
Mark stable snapshots as Last Known Good and use them as the basis for controlled restore operations on supported platforms.
Compliance Checks
ConfigVault includes lightweight compliance checks that focus on high-impact, broadly applicable controls.
Foundational Controls
- AAA policies (for example, TACACS for administrative access where applicable).
- Logging policies to ensure devices send logs to remote syslog collectors.
- NTP policies to keep devices synchronized with core time sources.
- SNMP guidance to avoid weak or legacy communities.
- Controller-centric checks such as required APIC tenants.
Multi-vendor Awareness
ConfigVault understands that real networks are multi-vendor. Sample policies cover Cisco platforms alongside additional vendors such as Juniper, Palo Alto, Fortinet, Huawei, Arista, and F5, with vendor-specific checks where appropriate.
Compliance is designed to be transparent: operators can see exactly which rules were evaluated and why a particular device passed or failed.
Operator-Driven Remediation
ConfigVault intentionally treats remediation as an operator-driven workflow. When a rule fails, authorized users can propose and apply CLI-based fixes using the same secure infrastructure that powers backup and restore.
- Remediation jobs are clearly labeled in the job history.
- RBAC ensures only permitted roles can apply changes.
- Every remediation action is logged for audit and change review.
Guardrails First
The remediation model is designed for safety. The platform provides the rails and visibility, while your engineers retain control over the exact commands applied.
Deployment & Integration
Flexible Deployment
ConfigVault can be deployed as part of an appliance alongside NetVault, connecting to your network via SSH/CLI, SNMP, and relevant APIs.
Shared Platform
ConfigVault runs on the same InfraVault platform services as NetVault, including job scheduling, RBAC, audit logging, and credential management, simplifying operations.