Supported vendors and protocols
This page lists each vendor and protocol that Devexana reads, with its availability, connection method and data. Devexana does not support vendors that are not listed.
- In production use
- Aruba/HP AOS-S (ProCurve) switches over SSH and SNMP; Barracuda CloudGen firewalls over SSH and syslog; Freshservice
- Available
- Other switch command sets and the sources marked Available in the tables
- Available
- ServiceNow, Barracuda CloudGen REST, Webex Calling and the SaaS sources. Devexana sets up these connectors for your instance during onboarding
On this page
These sources are in production use:
- Aruba/HP AOS-S switches over SSH and SNMP.
- Barracuda CloudGen firewalls over SSH and syslog.
- Freshservice.
Sources marked Available are supported in this release. The Notes column identifies sources that are off by default. For a product that is not on this page, ask Devexana about a read-only API connector.
Switches over SSH and SNMP describes switch reads. API connectors and ticketing describes how to connect an application or appliance through its API.
Switches and routers
By default, Devexana reads each switch once a day over SSH. The default read runs show running-config. If Platform is empty and no earlier read identified the OS family, Devexana also runs show version once. On AOS-S, Devexana also builds an identity record from the output. The extended read set is off by default. Your installer or Devexana support can enable it with an appliance setting. The table lists what the extended read set adds. Switches over SSH and SNMP lists the exact commands.
| Vendor or system | Availability | Connection or import method | Extended read set adds | Notes |
|---|---|---|---|---|
| Aruba/HP AOS-S (ProCurve) | In production use | SSH; SNMP v2c and v3 | Version, system, modules, interfaces, VLANs, LLDP neighbours, PoE, MAC and ARP tables, routes, transceivers and their diagnostics, temperature, spanning tree, startup configuration | No NAPALM driver for AOS-S. |
| Cisco IOS, IOS-XE, IOS-XR | Available | SSH; NAPALM; SNMP | Version, inventory, interface status, VLANs, LLDP and CDP neighbours, PoE, ARP, routes, spanning tree, startup configuration | |
| Cisco NX-OS | Available | SSH; NAPALM; SNMP | Version, inventory, interface status, VLANs, LLDP and CDP neighbours, ARP, routes, spanning tree, startup configuration | |
| Arista EOS | Available | SSH; NAPALM; SNMP | Version, inventory, interface status, VLANs, LLDP neighbours, ARP, routes, spanning tree, startup configuration | |
| Juniper Junos | Available | SSH; NAPALM; SNMP | Version, chassis hardware, interfaces, VLANs, LLDP neighbours, ARP, routes, configuration | |
| Aruba AOS-CX | Available | SSH; NAPALM; SNMP | Version, system, interfaces, VLANs, LLDP neighbours, ARP, routes, spanning tree, startup configuration | |
| HP/H3C Comware | Available | SSH; SNMP | Version, device, interfaces, VLANs, LLDP neighbours, ARP, routes, current and saved configuration | Uses display commands only. |
| Dell OS10, OS9, OS6 | Available | SSH; SNMP | Version, inventory or system, interface status, VLANs, LLDP neighbours, ARP, routes |
Two more ways to read switches:
| Vendor or system | Availability | Connection or import method | What Devexana reads | Notes |
|---|---|---|---|---|
| SNMP source | Available | SNMP v2c and v3, GET and GETNEXT only | System, interfaces with speed, duplex and state, VLANs, LLDP and CDP neighbours, forwarding table, PoE status and class | Devexana reads no SNMP counter, error, CPU or optics values. AOS-S switches over SNMP are in production use. |
| Switch backups in S3-compatible storage | Available | S3 GET and LIST, read-only key | Nightly configuration, MAC and ARP backup files, and a configuration timeline | Off by default (wasabi_backup_enabled). |
NAPALM getters read facts, interfaces, addresses, LLDP neighbours, MAC and ARP tables, interface counters and environment data. They are the only source of interface counters. The NAPALM drivers are ios (also for IOS-XE), iosxr, nxos, eos, junos and aoscx.
Firewalls
| Vendor or system | Availability | Connection or import method | What Devexana reads | Notes |
|---|---|---|---|---|
| Barracuda CloudGen | In production use | SSH, one batch of read commands | Interfaces, OS version, high-availability state, routes, licences and an allowlist of network configuration keys | Reads no firewall rules and no logs. Runs once a day by default. Your installer or Devexana support adds it, and an administrator trusts its SSH host key. |
| Barracuda CloudGen logs | In production use | Syslog to a receive-only listener | Raw log lines (kept 30 days), parsed fields and daily summaries | The listener is off by default. Processing runs after a scheduled source read. Alerts and the daily brief are off by default. See Syslog, SNMP traps and NetFlow and Firewall alerts and the daily brief. |
| Barracuda CloudGen REST API | Available | REST GET | Rules, objects, VPN, interfaces, status and licences | Supported. Devexana sets up the connector for your instance during onboarding. Firewall rule checks use the rules from this source. |
| Sophos Firewall (XG, SFOS) | Available | XML API, read requests only | Hosts, firewall rules, NAT rules, zones, interfaces and VLANs |
Wireless and access control
| Vendor or system | Availability | Connection or import method | What Devexana reads | Notes |
|---|---|---|---|---|
| Cisco Meraki Dashboard | Available | REST v1, API key | Organizations, networks, devices, device status, uplinks, alerts and clients | Reads clients for up to 50 networks. |
| Cisco Catalyst Center | Available | REST | Access points, wireless controllers and wireless clients | Reads wireless data only. It does not read switches from Catalyst Center. |
| HPE Aruba Central | Available | REST | Access points, clients, switches, inventory, events, sites and groups | Devexana does not store a rotated refresh token. After a rotation, an administrator enters the token again. |
| Aruba Instant | Available | REST, six allowlisted show commands | The output of those commands | |
| Aruba ClearPass | Available | REST | Endpoints, network devices, local users, roles, services, sessions, authentication events and enforcement profiles |
Voice
| Vendor or system | Availability | Connection or import method | What Devexana reads | Notes |
|---|---|---|---|---|
| Cisco Unified Communications Manager (CUCM) | Available | SOAP (AXL, RisPort70), three allowlisted operations | Phones, device pools and registrations | |
| Webex Calling | Available | REST | Locations, numbers and devices | Supported. Devexana sets up the connector for your instance during onboarding. |
Monitoring
| Vendor or system | Availability | Connection or import method | What Devexana reads | Notes |
|---|---|---|---|---|
| Paessler PRTG | Available | REST v2, or the v1 table API | Devices, sensors, groups, sensor details and sensor history | Reads every 15 minutes by default. Scheduled reads do not collect sensor history. Shows a monitoring card on each switch that PRTG also monitors. An inbound webhook is off by default. |
For other monitoring systems, Devexana builds a read-only API connector during onboarding. Until then, Devexana receives the syslog and SNMP traps that your devices and tools send. See Syslog, SNMP traps and NetFlow.
Helpdesk
| Vendor or system | Availability | Connection or import method | What Devexana reads | Notes |
|---|---|---|---|---|
| Freshservice | In production use | REST v2, read-only API key | Tickets, assets, requesters, locations, agents, conversations and solution articles | Reads changes every 15 minutes by default. Reads ticket conversations once, at first connection. Does not read attachments. An inbound change webhook is off by default. |
| Lansweeper | Available | Helpdesk API and read-only SQL | Tickets, notes, assets and users | The source reads. A separate action can add a note to a ticket through the Lansweeper helpdesk API. See the note at the end of this page. |
| ServiceNow | Available | Table API, read-only integration user | Incidents, configuration items and knowledge articles | Supported. Devexana sets up the connector for your instance during onboarding. |
Directory
| Vendor or system | Availability | Connection or import method | What Devexana reads | Notes |
|---|---|---|---|---|
| Microsoft Entra ID | Available | Microsoft Graph v1.0 | Users, groups, devices, directory roles and licences | Application permissions Directory.Read.All and Device.Read.All. Commercial and government clouds. |
| LDAP and Active Directory | Available | LDAPS with certificate validation by default; read-only bind | People, computers and groups | One record type per source, set in the Read field. Unless an administrator allows plain LDAP, the appliance refuses it. |
| SCIM 2.0 identity provider | Available | SCIM GET | Users and groups | Off by default (scim_enabled). |
Listeners and files
| Vendor or system | Availability | Connection or import method | What Devexana keeps | Notes |
|---|---|---|---|---|
| Syslog (RFC 3164 and 5424) | In production use for Barracuda CloudGen syslog. Available for other senders | Receive-only listener | Raw lines for 30 days | Off by default. Turn on in Networking › Firewall › Logs. See Syslog, SNMP traps and NetFlow. |
| SNMP traps (v1, v2c) | Available | Receive-only listener | Raw traps for 30 days | Off by default. The listener does not decode SNMPv3 trap contents. See Syslog, SNMP traps and NetFlow. |
| NetFlow v5 and v9, IPFIX | Available | Receive-only listener | Raw flows for 48 hours; summaries and top talkers for 90 days | Off by default. The listener does not decode sFlow. |
| Files: CSV, TSV, XLSX, PDF, DOCX, Markdown, text | Available | Upload in Brain (Import data) | Records that you can search and that answers can cite | A text log file becomes a document. Devexana does not parse it as syslog. See Import files, port maps and DHCP leases. |
| Port-map CSV | Available | Upload on the switch faceplate | The person, VLAN and room for each port | See Import files, port maps and DHCP leases. |
| DHCP lease files (ISC, Kea, Windows CSV) | Available | A file on the appliance, read on a schedule | Addresses, MAC addresses, host names and lease times | See Import files, port maps and DHCP leases. |
Other sources
| Vendor or system | Availability | Connection or import method | What Devexana reads | Notes |
|---|---|---|---|---|
| Generic SQL database | Available | SQL, with a guard that permits SELECT only | The queries that you define | |
| Generic REST API | Available | REST GET with simple paging | The endpoints that you choose | |
| Okta, Slack, Jamf, Zendesk, Microsoft 365, Outlook, Google Workspace, Laserfiche, Laserfiche Workflow, PDQ | Available | REST | The records that each API returns for the read functions you approve | Supported. Devexana sets up the connector for your instance during onboarding. |
| Your SIEM (outbound only) | Available | CEF or JSON over syslog or HTTP | Nothing. Devexana sends its own audit events to your SIEM. | Off by default (siem_enabled). Devexana does not take in data from a SIEM. |
Connectors that Devexana builds during onboarding
For these products, Devexana builds a read-only API connector for your instance during onboarding. Each connector uses a dedicated account that can only read. API connectors and ticketing explains how API connectors work.
| Area | Products |
|---|---|
| Firewalls | Fortinet, Palo Alto Networks, Check Point, SonicWall, pfSense, OPNsense |
| Network management | Cisco ACI (APIC), Ubiquiti UniFi, MikroTik, Juniper Mist |
| Monitoring | AKiPS, Nagios XI and Nagios Core, Observium, Zabbix, SolarWinds, LibreNMS, Datadog, Grafana |
Until a connector is in place, these products and your network devices can send syslog and SNMP traps to the receive-only listeners. See Syslog, SNMP traps and NetFlow. What Devexana does not do (limitations) lists what Devexana does not do.
Ask for a vendor
To request support for another vendor, email support@devexana.com. Include the following information:
- Give the vendor, product and software version.
- Describe what you want Devexana to read, such as interfaces or tickets.
- If you include sample command or API output, remove passwords, keys and addresses first.
- Attach the edited sample to your email.
Devexana does not give dates for new vendors.
Applies to Devexana release 0.3.182. Page updated 2026-10-20. Questions or corrections: support@devexana.com.