Network Mom ACL Analyzer for Android

11 things about Network Mom ACL Analyzer

1. While Network Mom ACL Analyzer can find many types of syntax errors, it does not claim to be perfect when searching for errors, analyzing sockets against ACLs, or searching for duplicates.

2. "Network Mom ACL Analyzer" analyzes Cisco® IOS®, IOS-XE®, IOS-XR®, NX-OS, and ASA IPv4 and IPv6 access-lists.

3. To protect the privacy and security of your access-lists, the "Network Mom ACL Analyzer" uses Apple's "app sandbox" feature.

4. To facilitate tool testing, the ACL Analyzer includes utilities to create "random" IPv4 and IPv6 access-lists for each Cisco variant.

5. • Does not analyze NAT configurations, dynamic lock-and-key ACLs, VACLs, reflexive ACLs, time-based ACLs, GSR receive access-control lists, CBAC, or access-lists which use keywords for router IP addresses, such as "infrastructure_ips", "bgp_peer", "router_ip", or "interface" (ASA).

6. • Does not perform DNS lookup of hostnames in ACL configurations (required as part of our "no network connections from this tool" security model).

7. The analyzer includes support for network object-groups across all Cisco variants.

8. "Network Mom ACL Analyzer" also finds "duplicate" ACL lines.

9. This ACL analyzer successfully determined whether a 50,000-line IOS access-list permitted a specific tcp/udp socket in under 20 seconds.

10. This analyzer is not allowed to make or receive network connections.

11. By knowing whether a socket is already permitted, you may avoid adding redundant lines to your network configuration.