Know Your Path.
Every Hop. Every Translation.
Net-Script's PathFinder uses advanced BFS graph algorithms to trace the exact route traffic takes through your network — including across NAT boundaries where other tools go blind.
- ✓ End-to-end hop-by-hop network path discovery
- ✓ NAT-aware tracing — SNAT, DNAT, Twice-NAT & PAT
- ✓ Bidirectional path support and advanced Policy-Based Routing (PBR) — supports source/dest IP and TCP port-level rules seamlessly integrated into provisioning
- ✓ Interactive topology visualization
- ✓ Works across all 7 supported vendors simultaneously
- ✓ Intelligent Path Recovery: Instantly suggests guaranteed alternative working paths if your requested route is blocked.
10.0.1.5
Firewall
Firewall
Reached ✓
When a path fails, Net-Script hands you the working alternatives.
Dead ends are no longer dead ends. If a requested path is unreachable, the engine scans the multi-vendor routing tables to instantly find every alternate path from the source or destination that *is* currently working.
From Guessing
to Knowing in Seconds.
The Traffic Analyzer evaluates every firewall and ACL in the path, giving you a per-hop verdict — allow or deny — with the exact rule that matched. No more log diving.
- ✓ Per-hop allow/deny verdict with rule reference
- ✓ ACL & object-group expansion for Cisco IOS
- ✓ NAT-aware evaluation — uses correct pre/post-NAT IPs per vendor
- ✓ Confidence levels: HIGH / MEDIUM / LOW per finding
- ✓ Forward & reverse path analysis simultaneously
Push Policies Everywhere.
Once.
Net-Script's Policy Provisioning engine generates and deploys vendor-specific security rules to every firewall in the path simultaneously — with previews before you push.
- ✓ Multi-vendor push: Cisco ACL, ASA, Palo Alto, FortiGate, SRX, FTD
- ✓ Preview mode — see generated rules before deploying
- ✓ Bulk provisioning for large-scale policy changes
- ✓ NAT-aware provisioning — uses correct IPs per firewall position
- ✓ Rollback support and full audit trail
- ✓ Policy Reuse Engine: 3-stage intelligence prevents policy sprawl by merging new rules into existing policies
- ✓ Custom Naming: Configurable naming templates for policies, addresses, and services per vendor
ITSM Integration &
Automated Risk Scoring.
Every automated action belongs to a proper Change Request state machine. Bidirectionally sync with ServiceNow/Jira, calculate pre-provisioning Risk Scores based on source breadth and port sensitivity, and automate safe deployments.
- ✓ Bidirectional Ticket Sync: ServiceNow, Jira, and Remedy
- ✓ Risk Assessment: Auto-calculates Low/Medium/Critical exposure
- ✓ Role segregation ensures requesters and approvers are strictly separated
- ✓ Idempotent execution guard prevents duplicate operations
One Request.
Every Path. Every Fix.
Submit multiple sources, destinations, and ports in a single Connectivity Request. The platform automatically traces every path, analyzes every firewall, generates consolidated policies, and provisions fixes — all through one unified approval workflow.
- ✓ Multi-source × Multi-destination × Multi-port in a single request
- ✓ Automated PathFinder + Traffic Analyzer per flow combination
- ✓ Consolidated policies with dry-run command preview before deployment
- ✓ Integrated approval workflow with risk scoring and audit trail
- ✓ Auto-creates rule ownership + triggers DR replication post-provisioning
Air-Gapped Local
AI Assistant.
The only enterprise cybersecurity platform with a 100% local, air-gapped AI powered by Ollama and Llama 3. Ask complex networking queries without leaking your data to public APIs.
- ✓ Zero Data Leakage: Your network topology and firewall rules never leave your server.
- ✓ Natural Language Intent: "Block IPs from Russia" is translated into automated vendor-specific workflows.
- ✓ No Cloud API Costs: Runs entirely on your own CPU/GPU hardware.
