Best practices analysis of zones and components in a network

A system in communication with devices in a network, comprising:

• a processor;
• and
• a computer readable storage medium having code executed by the processor to perform operations, the operations comprising:
• generating a database having information on components in the network and configuration settings for the components;
• accessing best practices rules indicating best practices configuration settings for the components in the network;
• determining whether the components in the network are from a single vendor or multiple vendors;
• in response to determining that the components in the network are from the single vendor, using vendor specific best practices rules of the accessed best practice rules to determine whether the configuration settings for the components satisfy the best practices configuration settings for the components indicated in the vendor specific best practices rules;
• in response to determining that the components in the network are from the multiple vendors, determining compatible best practices rules from the multiple vendors that do not provide conflicting best practices configuration settings;
• using the determined compatible best practices rules from the multiple vendors to determine whether the configuration settings for the components satisfy the best practices configuration settings indicated in the determined compatible best practices rules;
• and
• generating a report indicating whether the configuration settings of the components in the network satisfy the best practices configuration settings for the components indicated in the best practices rules.

A system in communication with devices in a network, comprising:

• a processor;
• and
• a computer readable storage medium having code executed by the processor to perform operations, the operations comprising:
• generating a database having information on components in the network and configuration settings for the components;
• accessing best practices rules indicating best practices configuration settings for the components in the network;
• determining whether encryption is enabled for at least one of the components in the network;
• determining whether encryption settings for the components in the network indicated in the database satisfy best practices encryption configuration settings indicated in the best practices rules;
• and
• generating a report indicating whether the configuration settings of the components in the network satisfy the best practices configuration settings for the components indicated in the best practices rules.

A system in communication with devices in a network, comprising:

• a processor;
• and
• a computer readable storage medium having code executed by the processor to perform operations, the operations comprising:
• generating a database having information on components in the network and configuration settings for the components;
• accessing best practices rules indicating best practices configuration settings for components in the network;
• determining whether traffic isolation is enabled for the components in the network;
• determining whether a configuration of paths between the components in a traffic isolation zone satisfy best practices traffic isolation configuration settings indicated in the best practices rules;
• and
• generating a report indicating whether the configuration settings of the components in the network satisfy the best practices configuration settings for the components indicated in the best practices rules.

A system in communication with devices in a network, comprising:

• a processor;
• and
• a computer readable storage medium having code executed by the processor to perform operations, the operations comprising:
• generating a database having information on components in the network and configuration settings for the components;
• accessing best practices rules indicating best practices configuration settings for the components in the network;
• determining a change in a firmware level in at least one of the components in the network to an upgraded firmware level;
• determining whether the best practices rules support the upgraded firmware level;
• initiating an operation to access new best practices rules including configuration settings for the upgraded firmware level in response to determining that the accessed best practices rules do not support the upgraded firmware level;
• determining whether the configurations settings for the upgraded firmware level satisfy the best practices configuration settings for the upgraded firmware level in the best practices rules in response to determining that the accessed best practices rules support the upgraded firmware level;
• and
• generating a report indicating whether the configuration settings of the components in the network satisfy the best practices configuration settings for the components indicated in the best practices rules.