topic In our 2.1 release of Cisco in Network Security

Cisco CLI Analyzer 2.0 Released -- In addition to ASA we now support IOS and NX-OS!

John Bollier — Tue, 12 Mar 2019 07:30:10 GMT

What it is: The Cisco CLI Analyzer (formerly ASA CLI Analyzer) is a smart SSH client with internal TAC tools and knowledge integrated. It is designed to help troubleshoot and check the overall health of your Cisco supported software. In addition to ASA. We now support IOS, IOS-XE, IOS-XR and NX-OS!

The release of Cisco CLI Analyzer 2.0 provides customers a significant upgrade in terms of knowledge, errors and troubleshooting capabilities from Output Interpreter. We highly encourage customers migrate over as the analysis and insights far exceed those of OI.

Download link (Mac/PC): https://cway.cisco.com/go/sa

Cisco CLI Analyzer features include:

(NEW) System Diagnostics for IOS, IOS-XE and IOS-XR

-- Utilizes Cisco TAC knowledge to analyze the current state of your device and detect some known issues such as system problems, configuration mistakes, and best practice violations.

(NEW) Contextual Help & Highlighting for ASA, IOS, IOS-XE, IOS-XR and NX-OS

-- (CHH) provides an immersive CLI experience by providing helpful information based on command output. Classifications vary from informational, warning and danger. A click of the mouse provides an explanation of the CHH and detailed documentation links go to cisco.com to provide a deep dive into the content.

ASA Traceback Analyzer

-- Attempts to match the root cause of a crash to a known bug if the ASA has experienced a system traceback. If a matching bug is found, the ASA version(s) in which the bug is fixed are provided.

ASA Top Talkers Tool

-- Calculates which connections are passing the most traffic through your ASA at a point in time.

ASA Packet Tracer

-- Allows administrators to simulate sending packets through the ASA. If the packet is dropped, the ASA configuration setting or feature that could have contributed to the packet drop is identified.

Contextual Help & Highlighting in action.

Use the TAC powered tools to diagnose and troubleshoot your network:

Get alerts to known problems, errors and best practice violations based on your devices configuration and operational state:

Kindly expand the Traceback

Leo Laohoo — Thu, 17 Mar 2016 00:17:23 GMT

Kindly expand the Traceback Analyzer feature to IOS & IOS-XE.

Hi Leo,

John Bollier — Thu, 17 Mar 2016 00:49:31 GMT

Hi Leo,

The Traceback Analyzer is specific for the ASA at this time.

ASA Traceback Analyzer

This tool attempts to match the root cause of a crash to a known bug if the ASA has experienced a system traceback. If a match is found, the ASA version or versions in which the bug is fixed are provided. We only show a bug if there is 100% confidence match.

BTW. We are evaluating its IOS equivalent.

How do you know what tools apply to your device?

When you login to a device using the Cisco CLI Analyzer you will only see the tools that are relevant to your Cisco software (ASA, IOS, IOS-XE, IOS-XR and NX-OS).

Documentation link is here https://cway.cisco.com/docs/cisco-cli-analyzer/2.0/Tool_Descriptions.htm and can also be accessed via the "?" in the upper right corner of the application.

Thanks,

John

Hi John,

Stuart Patton — Thu, 24 Mar 2016 13:31:34 GMT

Hi John,

Out of interest, if customers run the ASA traceback analyzer, do Cisco proactively investigate the crash data when the reason is unknown? Or does this only happen if the customer raises a TAC case is raised?

Regards,

Stuart

Stuart,

Magnus Mortensen — Thu, 24 Mar 2016 17:31:27 GMT

Stuart,

Cisco TAC, at this times, does not do further investigation to close the loop on those files that come through the ASA Traceback Analyzer tool in the Cisco CLI Analyzer yielding no bug match. Internally, the tool checks our crash analytics system to see if there is a 100% match to a known bug. Unfortunately, ASA crashes may frequently be caused by a certain bug, the but the crash signature is slightly different (not an absolute perfect match) than what that bug's crash signature may be, and in those cases further (usually manual) analysis needs to be done by TAC.

I would suggest that if you do encounter an ASA crash, and the tool is unable to pinpoint the specific bug that caused that crash, open a TAC case to have an engineer further analyse the crash output and determine the appropriate course of action.

For those of you on the

John Bollier — Mon, 18 Apr 2016 20:35:35 GMT

For those of you on the Windows version of Cisco CLI Analyzer.

We recently released version 2.0.2 that corrects an issue causing a delayed launch. It should launch in under 3 seconds now. You should be be prompted to upgrade upon next launch of the app. If not, direct download is here: http://cway.cisco.com/go/sa/

In our 2.1 release of Cisco

John Bollier — Fri, 29 Apr 2016 21:41:35 GMT

In our 2.1 release of Cisco CLI Analyzer we will add the ability to analyze files vs having to login to a device and capture the output. We are also enhancing the results display to open in a separate window from the console session. We anticipate releasing mid May.

Here is a sneak peek.

this is awesome...

brian osgood — Sun, 24 Jul 2016 17:19:59 GMT

this is awesome...

This web site is really quite

Jim Long — Tue, 25 Oct 2016 16:12:06 GMT

Important tip: If you use multiple E-mail addresses, be double-sure you get the right one which you used to sign in here, especially if you use one (esp. a dummy) as your "Username" and another as your "E-mail address"! (Don't ask....)

I sincerely appreciate the chance to try this wonderful CLI Analyzer tool Cisco has provided. I cannot wait to see what you all come up with next!

Thank you,

Jim

https://cway.cisco.com/go/sa/

brian osgood — Tue, 25 Oct 2016 16:12:07 GMT

https://cway.cisco.com/go/sa/

this link works. click on download (green button) and it will take you to the download area... you have a cco account correct? if you have not logged in it will request that you do so.

accept the agreement and save the appropriate file for your platform.

Hi Jim,

John Bollier — Tue, 25 Oct 2016 16:15:14 GMT

Hi Jim,

Per our call we were able to get this resolved. If you have any other questions feel free to reach out via the feedback button within CLI Analyzer.

Regards,

John

How about some Linux support?

David Sandoval — Thu, 26 Jan 2017 13:31:40 GMT

How about some Linux support? Cisco uses alot of open source code in their projects, but the end user is unable to use it if they choose Linux as their operating system, I don't understand this at all.

Hi David,

John Bollier — Thu, 26 Jan 2017 15:31:55 GMT

Hi David,

We are considering Linux. Ultimately it comes down to the effort/cost to create/support an additional OS and as well as how many customers will adopt it (value). For example: Mac OS, as popular as it is accounts for very a small portion of the CLI Analyzer user base compared to Windows users.

Regards,

John

Our environment has an

Martin Smith — Wed, 15 Feb 2017 17:05:20 GMT

Our environment has an internet proxy with SSL intercept enabled. I successfully enabled proxy settings but I can't seem to find any resources on where to add our root certificates so this program trusts it.

The error is "Error: self signed certificate in certificate chain"

Any tips?

Will there be a version

chamika_sooriyabandara1 — Mon, 13 Mar 2017 22:36:34 GMT

Will there be a version supports Windows 10?

Hi Chamika,

John Bollier — Tue, 14 Mar 2017 15:20:34 GMT

Hi Chamika,

You can use Windows 10 with version 3.2.1 of CLI Analyzer. Please ensure you use the correct version for your OS. Most use 64 bit today, but please verify your OS type first.

Regards,

John

Thanks a lot John.

chamika_sooriyabandara1 — Wed, 15 Mar 2017 22:59:33 GMT

Thanks a lot John.

In downloads there is no exe file for windows 10 though. So, I tried with the windows 7 64 bit version on my windows 10 machine and it works perfect.

Hi,

thomas.minarro.fr — Tue, 30 May 2017 13:09:33 GMT

Hi,

How can I get the account "entitlement" to use this tool ? I have the "Insufficient Entitlement" error.

Regards,

Thomas.

Re: Cisco CLI Analyzer 2.0 Released -- In addition to ASA we now support IOS and NX-OS!

stubbyd — Mon, 16 Oct 2017 12:26:18 GMT

This has to be the worst move forward of a tool yet. IMO of course.

I didn't often have need to use the old analyser but I could copy and paste or manually enter the info and it would do its thing. Now I just get - failed to connect errors. This is because >90% of the clients I support are either secure or the the acces to the end devices is restricted to come from a very select set of IPs with no internet connectivity.

As a consequence this tool is just an over-glorified and over-engineerd ssh / telnet tool that means anything we can't find from a serach will require a TAC case. Surely the whole point of this tool would be to reduce TAC cases so conisder an offline version or at least an updated online version.

Re: Hi David,

rtalada1 — Wed, 13 Dec 2017 16:24:48 GMT

I to would like to see a Linux version of the CLI Analyzer. This program is one of the only reasons I use Windows at this time. I would sure love to see a Linux version that works with OpenSuse or a version that works with wine.