Change Management

Triple Defense

A three-layer governance framework for safe, auditable network change. Triple Defense is the change-side application of NetBrain’s assessment engine — the same engine that powers Golden Assessment and Quick Assessment in Group 3, applied here to every change window. Pre-change validation, real-time execution monitoring, and post-change verification. 

• Before change: Assessment uncovers hidden problems and avoids false correlations with the proposed change. 
• During change: Automated validation watches the executed change and discovers potential impacts on critical applications, golden configurations, rules, and policies. 
• After change: Continuously confirms new designs are upheld. New automations created during the change are added to the Network Automation Library. 

Golden Engineering Studio

Reverse-engineer your network’s design intent and codify it as automated policy, without writing a line of code. 

• Auto-discover your Golden Config through intelligent reverse engineering. 
• Generate thousands of no-code automations to enforce design intent. 
• Proactively prevent drift before it causes vulnerabilities or downtime. 

Network Intent  (concept under GES) 

Network Intents are the codified rules that determine whether the network is doing what it’s supposed to. Security policies, routing designs, QoS priorities, failover behavior. Network Intents power assessment (Group 3), change validation (this group), and AI diagnosis (Group 1). GES is where they originate. 

Examples of Network Intents: 

• Finance VLAN isolation: all devices in the finance zone must enforce VLAN 100 isolation with no lateral access. 
• Routing design: BGP peers must only accept prefixes matching the approved prefix list. 
• QoS rule: voice traffic must be marked EF and placed in the priority queue on all edge interfaces. 

Next-Gen Runbook

Modernize your runbooks, from static documents to dynamic, executable workflows. Next-Gen Runbook reimagines the operational runbook as an active tool rather than a passive reference. 

Troubleshooting Runbook 

• Trigger auto-diagnosis: Integrate with ITSM tools like ServiceNow to automatically generate maps and diagnose issues from service tickets. 
• Reduce noise: Minimize false positives and close non-actionable tickets automatically. 
• Shift workload left: Use intuitive runbooks to fast-track diagnosis. CLI, intents, and AI working together. 
• Auto-remediate issues: Trigger pre-defined remediation workflows when criteria match. 

Change Runbook 

From change management to configuration validation, every step is executed precisely. Triple Defense protects the network before, during, and after changes. The Change Runbook is where Runbook Companion Agent (Group 2) operates during change windows. 

Change Management

From alert to approved, automated change, with full governance built in. Change Management closes the loop between detection and remediation. 

Auto Remediation  (existing foundation) 

When a violation is detected, Auto Remediation generates the corrective change — reviewed, approved, and executed within the same governance workflow. Example: an unauthorized device detected on a secure segment triggers a port shutdown and generates a ticket in ServiceNow, all without manual intervention. 

• Manual approval flow: For compliance or precaution, tasks wait for an approver before execution. 
• Pre-approved flow: For well-known, low-risk issues, tasks are generated in an Approved state, ready to execute. 

Centralized management 

• All changes — whether manually initiated or auto-remediated — flow through the same audit-trailed workflow. 
• Approval policies, SLA windows, and rollback triggers configured once and applied consistently across every change type. 

Task Manager

One dashboard for every automated and agent-driven task running in your network. Task Manager brings operational transparency to NetBrain’s automation engine. A centralized dashboard surfaces every scheduled, in-progress, and completed task, with full history, execution analytics, and the ability to reschedule or cancel from a calendar view.