Ping and Traceroute are great utilities for making a quick check on network connection statuses. However, you can’t sit and issue those commands repeatedly. Automated tools perform monitoring tasks around the clock – they don’t sleep or need bathroom breaks.

There are so many tasks that technicians need to perform every day in order to keep a network running smoothly and just about all of them can be automated.

Here is our list of the five best network automation tools:

  • SolarWinds Network Configuration Manager EDITOR’S CHOICE This tool includes automated processes to fully manage network devices. It is able to create a standard setup, backup that configuration, and roll it out to all other devices of the same make and model. Start a 30-day free trial.
  • ManageEngine Network Configuration Manager A full network device management package that includes configuration backup and centralized control of all device settings.
  • TrueSight Network Automation A network automation system that includes workflows to manage network devices.
  • rConfig A free, open-source package that manages network configurations.
  • Progress WhatsUp Gold Network Configuration Management A device configuration system add-on for a network monitoring package.

Benefits of network automation

Key areas where network monitoring is improved by automation include:

  • Device health monitoring
  • Traffic flows and network capacity checks
  • Connection efficiency
  • Security monitoring

As well as launching searches and tests repetitively, automation tools have a big advantage over manual implementation because they eliminate human error.

Network management automation

Just as standard monitoring methods can be performed with greater dexterity through automation, management tasks can also benefit by implementing them through automated tools. Examples in the management category include on-boarding of equipment and users, patch management, capacity management through the clearing of temporary resource holders, such as temporary files and abandoned processes, and the management of IP address allocation.

Key areas of network management that are improved by automation include:

  • Access rights management
  • Capacity planning
  • Incident response
  • Continuity management
  • Configuration management
  • IP address management
  • System maintenance

Network automation tools can repeat the same task over and over again, rippling out changes to many devices, updating cross-references in different systems. An example of where automation helps in network management lies with Device configuration management. Most networks have all of their nodes run by the same make and model of the device. There is an optimal setup for any device and having to log into the management console of each switch or router and go through all of its settings is laborious.

A technician working on setting up a network device can get distracted or interrupted, sometimes leaving the configuration incomplete, or clicking on the wrong option while trying to perform several tasks simultaneously.

Manual efforts to perform these tasks can result in half-completed rollouts, due to the technician responsible being interrupted in mid-task. Human error can result in transposition mistakes and paper-based notes can easily get destroyed or misplaced. Automated processes instantly update records and databases to reflect each change, creating a closed-loop system that greatly improves on the hazard-prone manual workflows.

The best network automation tools

Looking after network devices requires setup standardization, performance optimization, operation monitoring, and security enforcement. Automating all of those tasks introduces a greater level of coordination between tasks and responsibilities than a human mind can track. Automating device management tasks is a very worthwhile move.

You can find out more about each of these tools in the following sections.

Our methodology for selecting a network automation tool 

We reviewed the market for network systems and analyzed tools based on the following criteria:

  • A management tool for network devices
  • Automated process to rollout device configurations
  • A constantly-updating asset inventory
  • Alerts for device problems or unexpected configuration changes
  • Automatic settings restoration
  • A free trial or a demo system that creates the opportunity for a no-obligation assessment
  • A good price for a tool that provides several functions

With these selection criteria in mind, we identified some great network automation tools that will reduce your network management workload.

1. SolarWinds Network Configuration Manager (FREE TRIAL)

SolarWinds Network Configuration Manager provides a series of task automation workflows for managing network devices. The software includes a system that enables a standard setup for a specific device make and model to be saved. This is stored as an image. It can then be applied to all other devices of the same model automatically – those currently on the network and any new devices added.

Key Features

  • Create a standard setup for each device type
  • Enables new devices to be automatically configured
  • Watches for unauthorized changes
  • Stores the standard configuration
  • Restores configuration on tampering

The Network Configuration Manager monitors the settings of each of the devices enrolled in the system. If any unauthorized changes occur, the service reapplies the original image. This is a vital security service because altering device settings can weaken network security, making it easier for intruders to move around the network undetected.

An unauthorized change in the configuration of a device also raises an alert. This makes the network manager aware of the alteration even though the threat already gets locked down by the configuration reset. The knowledge of an unauthorized change and the log of what happened enables the event to be investigated further.

Those configuration change logs contribute towards a document base to show data security standard compliance. The Network Configuration Manager receives security feeds from the National Vulnerability Database. This enables network managers to close down exploits in network devices as soon as they are discovered. Thanks to process automation, any configuration changes can be applied in bulk to all devices from one central location.

The SolarWinds Network Configuration Manager installs on Windows Server. You can access it on a 30-day free trial.

Pros:

  • Supports vulnerability scanning and lists action steps to correct issues
  • Can automatically detect when configuration changes are made or are incorrect based on standards you set
  • Can push out firmware updates automatically on a schedule
  • Enterprise levels reporting and scalability
  • Alerting is flexible, and can be set to notify recipients when configuration changes are made

Cons:

  • Not designed for home users – designed for businesses environments operated by network professionals

2. ManageEngine Network Configuration Manager

EDITOR’S CHOICE

SolarWinds Network Configuration Manager is our top choice for a network automation tool because it automates the management of the key infrastructure on networks: its switches and routers. This tool enables a network manager to create a standard configuration for each device make and model and then store it as a backup image. The Network Configuration Manager monitors all devices for unauthorized changes and automatically restores the original settings should any alteration occur.

Start 30-day Free Trial: solarwinds.com/network-configuration-manager/

OS: Windows Server

ManageEngine Network Configuration Manager has a similar set of automated functions to those in the SolarWinds tool. It manages configurations for switches, routers, and firewalls. This tool backs up the settings of a device as an image. These backups can be restored on-demand or automatically, according to a trigger event.

  • Runs on Windows Server and Linux
  • Backs up and standardizes device configurations
  • Monitors for tampering and restores original settings

The main trigger is an unexpected change. When the network administrator wants to alter the settings of a device, the process is managed through the Network Configuration Manager dashboard. Changes by any other route get wiped out.

Once an image has been stored, it can be applied to any device and even in bulk to a large number of devices. This automation is a great time saver for large networks.

ManageEngine created the Network Configuration Manager following the Network Change, Configuration, and Compliance Management (NCCCM) standards. The software for the system installs on Windows Server and Linux. It is available for a 30-day free trial.

  • Allows users to backup configurations, files, and enforce network-wide policy changes

  • Can immediately alert when changes occur in inventory or configuration changes are made

  • Can neatly organize networks, devices, and infrastructure to support multi-site use

  • Available for Windows, Mac, and Linux systems

  • Is a full-service monitoring platform that can take time to fully explore all options available

3. TrueSight Network Automation

TrueSight Network Automation from BMC Software provides automated processes for the on-boarding, management, and security of network devices. A key feature of this network automation tool is its design that coordinates with the compliance requirements of a long list of data security standards.

  • Automated onboarding for network devices
  • Central fleet management
  • Compliance reporting

Network managers can select a set of policies from the TrueSight setup menu that specifies the security to follow. Once this setting has been specified, the TrueSight system adapts to fully comply with that standard. The available standards in the settings list of TrueSight Network Automation include PCI-DSS, NIST, HIPAA, CIS, and SOX.

Once set, the standards compliance module recommends the settings for each network device. On starting service, the tool scans the network for all devices and logs them. Once listed, those devices can be reconfigured automatically by TrueSight Network Automation according to the selected standard.

The network discovery process continues throughout the service life of the tool. This sweep looks for new devices and also checks on the settings of devices already enrolled in TrueSight management. If any of the settings are detected as changed, TrueSight automatically rolls it back to the standardized setting, logging the change as it removes the unauthorized change.

TrueSight can be set to automatically rollout any patches and updates to the firmware of all monitored devices. It is also possible to specify a required manual approval and individual on-demand updates can also be applied through the system.

BMC Software TrueSight Network Automation installs on Windows Server, RHEL, and Ubuntu Linux.

4. rConfig

  • Comes with numerous pre-configured workflows to start using immediately

  • Can set automated standards that help maintain compliance for standards like HIPAA, PCI DSS, NIST, and SOX

  • Can automatically recover devices to their last known “good” state

  • Its fairly in-depth, not ideal for smaller networks

The rConfig system is a free, open-source network configuration manager. Despite not having a commercially funded development team behind it, rConfig has many key network automation features found in its fully-funded rivals.

  • Free to use
  • Device discovery
  • Automated configuration management

This automation tool includes network discovery. This process is continuous, which means that the software detects all devices when it is first installed and then continues to detect changes to the network infrastructure. Each discovered network device is logged in an inventory and then its automated management can begin.

The tool is able to back up all the settings of all devices. It is also possible, through rCongif, to create a standard-setting on one device, back it up, and then apply it to all devices of the same make and model.

With each successive network sweep, rConfig retakes an image of each device. The network manager can set up a script to compare each snapshot to the standardized backup. Although this process is not fully automated within the rConfig environment, it is sufficient to detect unauthorized changes.

The rConfig dashboard includes the Configuration Compliance Manager, which stores data security standards requirements and highlights differences in the ideal settings for compliance and the configurations of devices running the network.

The software for rConfig installs on CentOS and RHEL Linux.

5. Progress WhatsUp Gold Network Configuration Management

  • Entirely free and open source

  • Offers continuous monitoring and autodiscovery of new devices and hosts

  • Can push new configurations as well as take backups of each device’s settings

  • Lacks paid support options

WhatsUp Gold, from Progress Software Corporation, is a network monitoring and monitoring package that can be enhanced through add-on modules. One of the add-ons available for WhatsUp Gold is Network Configuration Management.

  • Standardizes and stores device configurations
  • Monitors for tampering
  • Automatically restores settings

The Network Configuration Management module performs network scans at regular intervals. Each identifies all devices currently operating on the network and logs them in an inventory. The discovery service then documents all of the settings on each device, making them visible in the system dashboard.

The network manager can create a standard setup for each category of device and model and then automatically roll that out to all devices of the same type. Once a standardized configuration has been stored and implemented on all devices, successive system sweeps identify any divergence from that standard setup. This identifies unauthorized changes and the network manager gets notified of such an incident by an alert. The manager then has the option of rolling back the changes on demand. Alternatively, the Network Configuration management system can be set up to cancel unexpected changes automatically.

The Network Configuration Manager also facilitates updates and patches to network devices. The system can be set to roll out updates automatically or list new updates for approval. Patches can also be applied manually through the system.

All actions concerning device configurations are logged, providing an audit trail. These logs are needed for any data security standards compliance audits.

WhatsUp Gold is a network performance monitor. This operates by querying device statuses through the Simple Network Management Protocol (SNMP). So, network operations get automatically and recursively tested by the main system of WhatsUp Gold, while the Network Configuration management add-on repeatedly checks on the configurations of network devices. The combination of these two services provides full automation of network device management and monitoring.

The WhatsUp Gold system installs on Windows Server. You can get a 30 day free trial of WhatsUp Gold and the Configuration Management module.

  • Uses simple visualizations to help provide at-a-glance insights

  • Supports modular pricing, allowing companies to pay only for features they intend to use

  • Can monitor LANs, WANs, and cloud-based applications such as container environments

  • Modular upgrades might not be a good fit if you intend on utilizing all the features on the platform.

Choosing a Network Automation Tool

Suppliers of network tools are both inventive and competitive. This means that just about every aspect of network management is now supported by the availability of a suitable tool. Also, as soon as one network management tool provider thinks of a new field to support, every other player in the market comes up with its own version of that utility.

So, there are a lot of different automation tools that cater to different aspects of network management and lots of competitors vying to supply a utility to perform each function. In order to make this list of recommended automation tools more manageable, we have narrowed down the requirements to tools that enable the automated management of network devices.