Configuring system-wide attributes

By default, devices are managed by the TrueSight Network Automation local device agent installed on the TrueSight Network Automation application server. A device agent performs configuration Snapshot, Deploy to Stored, Deploy to Active, Deploy OS image, and other configuration actions. The device agent transfers configuration files to and from managed devices by using TFTP, FTP, and SCP file transfer protocols. You must configure associated parameters for these protocols in the device agent under Admin > Device Agents.

A device security profile (DSP) defines the login credentials used by policies to execute actions (for example, Deploy to Active for Auto-Remediating) and by all snapshot actions. A DSP can be shared by multiple devices. DSPs are centrally managed under Admin > Device Security Profile.

If you are using TACACS+RADIUS, add an account for the system with enable privilege. This account should match the credentials supplied in the DSP. Optionally, the DSP can be used as a shared account for implementing user initiated span actions. The Event Log and Job Reports track all Job submissions by user for complete accountability when using shared credentials. To require users to supply their TACACS+RADIUS device logon credentials when submitting Jobs, set the Admin > System Parameters named Source for Device Login Username/Password for Jobs to Enter at Job Creation. The TrueSight Network Automation system uses these credentials when accessing the device to execute configuration actions.

TrueSight Network Automation provides a set of system parameters including database purge criteria, user security, and device access criteria that are applied system-wide. Select Admin > System Parameters to review the default settings and make any necessary changes per your operational requirements.