A straightforward Interface that allows all functions from one GUI, this allows direct mixing of all edit, display, and animation features. Maps are created automatically by doing a Network Discovery.
Shown below is a Map with the Navigator tab selected.
Note there are three tabs (Navigator, Options and Map Only) showing when viewing a web map using the Maps Tab.
Above the Map Options tab has been selected and is showing the Options panel, which allows maps to be selected. A range of facilities to control how the Map is displayed can be selected.
The Navigator Tab shows two things – details on a user selected device on the Map, plus a Mini-Map to scroll and zoom the main map.
The Device Details scrolls up and down, several screen shots are shown below to show the depth of details by scrolling the window.
The Map Navigator Window allows the user to rapidly zoom and scroll to highlighted map section by simply dragging a box round that map section in the mini-map, then selecting the highlighted box.
Maps are created automatically by doing a Network Discovery. Maps are produced in a Topology format, and also a Tree Format as below. These maps are restricted to showing Layer 3 devices. Layer 2 Maps show much many more devices typically. The Mapping feature is integrated with, and boosted by Live Animation, Distributed Live Maps and Drill Downs to Monitoring and Netflow.
A Microsoft Visio Map can also be created if the Toolbox License includes the Visio Map feature.
Topology Maps are available following a Network Discovery and show Discovered Devices together with Network Links. They are directly linked to the Monitoring, Alerts, Ticketing and Netflow Systems.
The maps can be edited directly IN BROWSER, even with large maps.
A fundamental capability is Live or Historic Replay of monitored traffic patterns and events. Device loading like CPU, Interface Loading and Errors, Alerts of All Kinds and can be all Animated AT THE SAME TIME.
Maps are archived automatically and can be made the Current Version or Deleted/Undeleted.
After Network Discovery click on the Maps Tab and a Pop-Up will be automatically launched. Select either the Network Layer or Layer Two map view. These two views are always created automatically.
Devices may be freely dragged around the display, click on Save Map to save changes (a backup is automatically created). To change device sizes, backgrounds etc, click on the Displays Setting Icon to the left of the map.
Maps can be Deleted and Hidden from the Toolbox GUI, however they are kept permanently on the Toolbox Map Views DBase and can be un-deleted at will.
Select tab Delete or Undelete Maps then click on a Map View row to swap between Deleted <-> Undeleted status.
It is a frequent requirement to want to see changes in a map between Historical Discoveries. Compare Historical Maps shows extra, and missing devices between Discovery Histories graphically on the maps. This has been addressed with in map Device highlights for New Devices and a list of Missing Devices presented as a list.
The Web Map Search and highlight function has advanced search options like true wild cards and REGEX. There are three independent highlights offered to show different match classes on the same map. Multiple match Blue, Red and Green separate highlights are supported which highlights to circle matching nodes.
Both features are accessed through the Web Map main options panel as below:
Compare Historical Maps is selected using the Tab below:
Select the Compare with Historical Version tab to get a list of Maps from the SAME DISCOVERY with different Sequence Numbers and Discovery Dates. Now Select a row from the grid.
This other map will be loaded, and then a Comparison Map will be displayed. The New Devices are highlighted with a dotted magenta circle as below:
Additionally, devices that are not present any more are listed above the map.
Details are controlled by the Show Device Details under Display Settings in the main map control Panel.
From the Web Map panel under Options click the Matches & Changes button.
The map search options appear as below:
Multiple searches can be set up at the same time:
In the example map below, only devices beginning with ‘IP’ are not faded out.
Devices not in IP prefix `10.25.3’ are circled red.
Devices in Subnet ‘10.25.6’ are circled green.
Devices Type ‘IP’ are circled blue.
Click on the Live Icons Control icon to view a popup that allows live monitoring of Down Devices, Alerts, Software Violations (see help) and Job Tickets.
The Map Live Updates are controlled by the Lightning icon which launches the popup as below:
Indicators can be turned on and off and the settings will be saved with Map Save. So, specialist Maps can be created just showing Job Tickets for example. A map with multiple indicators on display is shown below.
Double clicking on a Network Device links to a comprehensive analysis of the device on Traffic, Alerts, Tickets, and an SNMP browser.
Instant Drill to the Navigator panel is selected if SHIFT Double click is done over a device in the map.
Double clicking on a Link in the Network Map gives a traffic analysis and the ability to switch Monitoring On/Off.
Change Map View Display Setting – Clicking this icon launches the setting pop-up as below.
Change Map Scaling – Use this slider to change total size of the Map View. The map will attach scroll bars if the map no longer fits in the display area.
Change Device Image Size – The Map Devices will shrink or expand and the associated Indicators like Ping Down will also try to follow the Device scaling (within practical limits).
Interconnecting Lines Brightness – use this slider to fade out or intensify the Lines between Devices.
Optional Map Background Image – the user has an option to select an image as a map background see How to Add my own Map
Background. The slider allows the user to fade or brighten the selected map background.
These indicators are Saved with the Map View so can be used to create specialised map Views for example a Map View only showing Job Tickets or Running Software Violations.
The system accepts Alerts from many internal sources such as Ping Fails, CPU overloads, Link Errors created by the Toolbox monitoring engine.
NetFlow violations such as Security breaches detected by NetFlow Analytics module such as DDoS attacks or Blacklisted IPs such as Botnet controller IP matches, or DNS or other server types, Spoofing attacks.
Additionally, external Alerts can be directed to Toolbox via Syslog or SNMP TRAPs from network devices which give device status changes like a Fan Failure, plus security information from Firewalls.
Windows logs can be tracked in Toolbox, which provide information on configuration and Security events that are converted by Toolbox into Alerts that can also be matched and displayed on the Web Maps.
These incoming Alerts are processed by the Toolbox Alerts and Ticketing System and matches are tracked per network device. This tracking information is presented in the Toolbox Map. There can be any number of Alert Filters, so the Toolbox Map interface has been heavily revised to display and control the new Alert Matcher information.
The Alert Matchers are also used to create Job Tickets which is still fully functional.
The Filter Alerts can be a very extensive list as an unlimited list of filters can be created.
The filters are created under the Alerts and Ticketing Tab as below: –
Click on the Setup Filters panel as below:
Click on the Add New Filter button to add a new Alert Filter.
A dialog box appears allowing very detailed Alert Matching options: –
Any number of matchers may be added. For Map usage it is important to select an Icon using the Change Icon button.
After an Alert Filter is setup, the system will track each alert match per network device.
Matched filters will appear on the Network map as below represented by the Alert Filter ICON
Two devices are shown above, device ironbox shows a link down and a fan failure. The device named Codima-186D3C7B, shows a Windows Event match plus a Netflow detected Worm. Toolbox supports Windows Event Log Retrieval and also NetFlow Analytics to detect blacklisted sites etc.
The Map GUI gives direct control over which Icons are displayed. Below is the standard Icons that show Toolbox monitoring status. Clicking the Status Events tick box turns all status events on or off. Clicking on individual tick boxes, such as Ping Fail, switches only that Status on or off.
Alert Filter matches can also be selectively shown on the Map.
Click on the Select Another Map button to view Select Map options, here one can:-
Select a Map View from a list under the Select Map Discovery tab. Here using the Date/Time or Seq (Discovery Historical Sequence) columns an earlier Discovery or Different Discovery can be selected.
Under the Main GUI Settings tab Probe Maps tab, Map Views can be viewed from Remote Probes.
Note: Probe maps are automatically retrieved from the Probes if requested under the Probe settings setup popup. To change auto-Map retrieval, under Settings tab, panel Probes are selected and a Probe Grid row is clicked. The popup below will appear, tick box highlighted in yellow in the screen shot below.
Toolbox automatically catalogues previous versions of Map Views when a Map View is Saved.
Select the Previous Map Versions tab to quickly select another version of the currently loaded map.
A blue star indicates which Map View version is current.
Click on a row to make that Map View the Current Version – this will also make this version current in Dashboard maps.
Note: You must select a Map under Select Map Discovery first to use this feature.
Alerts are displayed on the map by clicking on Select Indicators button, and thet tick boxes are used to switch indicators on/off.
A probably unique feature of Toolbox is to be able to show both Live and Replayed Animations of Network Events on the Topology maps, including in the Dashboards Maps from Multiple Probes at the same time.
This gives the capability to see for example a DDoS Attack detected by Toolbox Netflow Analytics against Link Loadings from SNMP and CPU Utilization on the Servers – also with Filtered Alert Animations. (For NetFlow contact product support for further details)
For example, one can see running Software with Black/White Rules against Highly Filtered Netflow Traffic matching Known Virus Attacks detected by Netflow on any number of Probes in a single Dashboard Report. For Netflow support please contact local support.
Traffic and System metrics can be replayed to check network conditions historically. The monitored devices CPU loading can also be replayed. Link colouring for monitored inter-device links shows traffic levels or error levels like dropped packets.
There are 3 different Animation Modes, Live, which shows the current measured values, Overview, which Shows a Day Summary – good for quickly assessing where to look and Replay historical patterns with full video recorder type controls.
Overview mode is shown below:
To activate this mode simply set the Select Date: calendar control and click on the Execute Animation button.
Replay Mode is shown below:
First select the date from the Calendar control Select Date:
Next use the slider control Select Time Span to drag the two handles to the required time span, for instance around the time an incident was known to occur.
Then choose a Replay Speed using the dropdown control. This can be used to quickly run through an animation, or it can be done in slow motion instead.
Click on the Execute Animation button to start the animation processing.
Below is an example of Animations on a Web Map.
A single bar denotes a single CPU for 10.25.3.2, double bar shows there are 2 CPUs for 10.25.3.87 and 4 CPUs for 10.25.3.50. Note the Color Key box in the top right, this decodes the bar colours into \% Loadings. In the case of 10.25.3.2 loading is less than 1\%, in the case 10.25.3.50 loadings 10-25\% for the 4 CPUs.
Below we have selected Replay Animation mode, this allows the user to replay on a chosen date:-
When Animation is selected in the dialog above then a bar appears across the top of the map:
The controls to play forward in time, pause the animations and go backwards in time, are highlighted in yellow.
The green highlight is the time progress bar, it shows the current animation time and can also be used to drag the animation time to a new time by dragging the handle using a mouse. The arrow points to the mouse drag handle.
The current animation time is shown in the blue highlighted section below. The icon shows the selected mode; going forward, paused or going backwards in time.
The Map Backgrounds are stored in a special folder in the Web Server Directory under Program Files see below:-
After adding new Map Backgrounds, refresh the Toolbox Web Page to load the new Map Background images.
Around 80 Background Web Maps are available for use in Inventory Explorer Views and as backgrounds for the Web Maps.
They will then appear in the Select Map Background dropdown list in the Change Map View Display dialog box (after clicking display options icon on LHS icon list in the map view).
Make sure the LAST DISCOVERY contains the Device in the Map.
It is easily possible to get a Map Device that has no Discovery entry due to different Subnets being selected in the Last Discovery compared to when the Map was created (in a different discovery).
To use this feature contact the supplier of the Toolbox products so that you have a Licence Key that supports Toolbox and also the Visio Toolbox Product. You will have to perform a Discovery under Toolbox to create Visio diagrams.
Open the Discovery Tab, then Open the Discovery Report Panel.
Click on the Download Visio Diagrams Button.
A grid will appear, double click the Discovery view you want to see in a Visio Diagram. A download will start via a standard Download Pop-up. Visio will open if it is installed showing the Map. Typically, if there is no Visio installed then you will be prompted to install/launch the Visio Web Viewer.
If Microsoft Visio is installed on the Toolbox Server at the end of a Discovery four default Visio maps are created: Layer 2 Topology, Layer 2 Tree, Network Infrastructure Topology, and Network Infrastructure Tree. The maps can be downloaded & viewed by clicking on the Discover Network Tab, Download Visio Diagrams button and double clicking on a row in the grid that shows all the Toolbox maps available.
Selecting a Visio Map to download
By installing the free Microsoft Visio Viewer on the device you use to access Toolbox Server remotely, the downloaded file will open in Internet Explorer with ActiveX enabled. Follow this link to download latest version of Microsoft Visio Viewer: https://www.microsoft.com/en-us/download/details.aspx?id=51188
The downloaded Visio Map open in Visio Viewer
If you wish to edit or interact with the Visio Map in anyway, such as, changing the device layout and have your changed layout used the next time you run a discovery from Toolbox you will need to edit the map on the Toolbox Server machine with Visio installed, using the autoMap application. The autoMap application is a powerful way to interact with the more Visio maps than the four default Visio maps Toolbox provides. For example, autoMap gives you the ability to drill-down on sectors of your network via the Subnet\VLAN views and create customized Visio Maps tailored to your own requirements. Any maps you create in autoMap can be exported in Visio or html format. You can request a Toolbox with autoMap license from your local representative.
When using Toolbox with access to the autoMap interface for Visio editing, both the blue and the red desktop icons for Toolbox will be enabled. Toolbox will continue monitoring your network whilst you are using autoMap, and all network discoveries will need to be started from Toolbox. If you minimize the autoMap window you can bring autoMap back to the foreground by doubling clicking the Toolbox desktop icon. If you close autoMap, it will also stop running.
Both Icons are enabled with a dual license.
To use this feature, contact the supplier so that you have a Licence Key that supports Toolbox and the Visio Product. You have to perform a Discovery under Toolbox to create Visio diagrams.
Click on the Download Visio Diagrams Button.
A grid will appear, double click the Discovery view you want to see in a Visio Diagram. A download will start.
Visio will open if it is installed showing the Map. Typically, if there is no Visio installed then you will be prompted to install/launch the Visio Web Viewer.
Above is shown the Google Chrome download open button. Other browsers are different.
The Map System matches Map details including the Discovery Name and History Sequence to link Discoveries to Maps. The map can then support drill down from a map device to an inventory device details. The Map Drill allows direct selection of other existing features such as a SNMP Browser.
Clicking on the View Device Summary option brings up the new ITIL drill down dialog box for a non-WMI device.
All update features and views are supported such as setting the Device Building.
Below is a Map Device drill down for a device that supports WMI.
The analysis has now got additional detailed information and other options such as Hot Fixes, Anti-Virus and installed software plus running software (processes and services) are available.
Note there is also a SHIFT Double click function to see a detailed breakdown in the Navigator Panel as below, in addition to the Inventory NO SHIFT Double click on a device.
Sometimes Maps can be extraordinarily complex when large networks have been discovered by Toolbox. It is now possible to select devices in the Web Map using ITIL or other details to filter the map content.
For example, restrict Map to Devices on a Campus and that are also over a certain value. The filter options are very extensive.
Filter Options are selected in the dialog box shown above.
Clicking on the Show Selected Devices starts the Filter Process and the processing indicator appears
When processing is complete a button appears to update the currently loaded map.
Clicking on Update the Map will show only the devices matching the Inventory/ITIL filters in the updated Web Map. To cancel the Filtering simply reload the map.