Basics
The Compliance Reporting feature automatically validates whether network device configurations and their runtime states conform to operational policies. The Compliance Engine analyzes the latest configuration backups and Mass config push outputs against user-defined rules and flags any deviations. Compliance checks in Unimus are organized into Compliance presets.
...
Compliance presets
Each Compliance preset consists of three core components:
...
This structure allows you to define what is checked, how it is checked, and on which devices.
Compliance source
The source determines which data the Compliance Engine validates against your rules. You can choose from:
Last Backup – validates against the most recent configuration backup of devices.
Config search result – validates the latest configurations of devices matched by a Saved search.
Mass config push result – validates device output produced by executing an MCP preset.
Compliance targets
Targets are the devices whose compliance state you want to monitor. The selected preset source affects how the targets are determined.
...
Note: Only one Saved Search or one MCP preset can be selected per Compliance preset. Only Saved Searches performed on the latest device configurations are considered a valid source for a Compliance preset.
Compliance rules and conditions
Compliance presets let you organize and apply your custom compliance rules across selected devices. Each preset contains one or more rulesrules, and each rule contains one or more conditions.
Unimus supports creating complex rules using:
...
A rule can be named for quick identification or context, and it can be disabled to be ignored during the execution of the Compliance preset.
Compliance preset execution
By default, Compliance presets are executed manually by clicking Execute on targets.
...
| Evaluation level | What It Represents | Scope |
|---|---|---|---|
Preset-level | Preset Status | Result of evaluating an entire Compliance preset across all its target devices. | All devices targeted, one preset |
Preset-level | Rule Status | Result of evaluating one Compliance rule across all target devices in a preset. | All targeted devices, one rule |
Preset-level | Condition Status | Result of evaluating one Compliance condition across all target devices in a preset. | All targeted devices, one condition |
Device-level | Device Compliance Status | Overall compliance status of a device across all Compliance presets. | One device, all presets |
Device-level | Device Preset Result | Evaluation of all rules within a preset for one specific device. | One device, one preset |
Device-level | Device Rule Result | Evaluation of all conditions in a rule for one specific device. | One device, one rule |
Device-level | Device Condition Result | Evaluation of a single condition on a single device. | One device, one condition |
...
Viewing Compliance results
Preset Status – Visible on the Compliance Home screen for each preset. Also shown in the preset detail view after opening a preset.
Rule Status – After opening a preset from the Compliance Home, displayed in the table of rules.
Condition Status – After opening a preset, displayed in the list of conditions next to each condition.
...