Cisco CLI Analyzer 2.0 Released -- In addition to ASA we now support IOS and NX-OS!

[John Bollier]

What it is: The Cisco CLI Analyzer (formerly ASA CLI Analyzer) is a smart SSH client with internal TAC tools and knowledge integrated. It is designed to help troubleshoot and check the overall health of your Cisco supported software. In addition to ASA. We now support IOS, IOS-XE, IOS-XR and NX-OS!

The release of Cisco CLI Analyzer 2.0 provides customers a significant upgrade in terms of knowledge, errors and troubleshooting capabilities from Output Interpreter. We highly encourage customers migrate over as the analysis and insights far exceed those of OI.

 Download link (Mac/PC): https://cway.cisco.com/go/sa

Cisco CLI Analyzer features include:

• (NEW) System Diagnostics for IOS, IOS-XE and IOS-XR

-- Utilizes Cisco TAC knowledge to analyze the current state of your device and detect some known issues such as system problems, configuration mistakes, and best practice violations.

• (NEW) Contextual Help & Highlighting for ASA, IOS, IOS-XE, IOS-XR and NX-OS

-- (CHH) provides an immersive CLI experience by providing helpful information based on command output. Classifications vary from informational, warning and danger. A click of the mouse provides an explanation of the CHH and detailed documentation links go to cisco.com to provide a deep dive into the content.

• ASA Traceback Analyzer 

-- Attempts to match the root cause of a crash to a known bug if the ASA has experienced a system traceback. If a matching bug is found, the ASA version(s) in which the bug is fixed are provided.

• ASA Top Talkers Tool

-- Calculates which connections are passing the most traffic through your ASA at a point in time.

• ASA Packet Tracer 

-- Allows administrators to simulate sending packets through the ASA. If the packet is dropped, the ASA configuration setting or feature that could have contributed to the packet drop is identified.

Contextual Help & Highlighting in action.

Use the TAC powered tools to diagnose and troubleshoot your network:

Get alerts to known problems, errors and best practice violations based on your devices configuration and operational state:

[rtalada1]

I to would like to see a Linux version of the CLI Analyzer. This program is one of the only reasons I use Windows at this time. I would sure love to see a Linux version that works with OpenSuse or a version that works with wine.

[Benjamin Holmes]

Absolutely agree. We are up to version 3.6.6 now, and there is still nothing for Linux (and yes, OpenSUSE is awesome). There is a Mac version, so it should not be that hard.

[Martin Smith]

Our environment has an internet proxy with SSL intercept enabled. I successfully enabled proxy settings but I can't seem to find any resources on where to add our root certificates so this program trusts it. 

The error is "Error: self signed certificate in certificate chain"

Any tips? 

[chamika_sooriyabandara1]

Will there be a version supports Windows 10? 

[John Bollier]

Hi Chamika,

    You can use Windows 10 with version 3.2.1 of CLI Analyzer. Please ensure you use the correct version for your OS. Most use 64 bit today, but please verify your OS type first.

Regards,

John

[chamika_sooriyabandara1]

Thanks a lot John.

In downloads there is no exe file for windows 10 though. So, I tried with the windows 7 64 bit version on my windows 10 machine and it works perfect.

[thomas.minarro.fr]

Hi,

How can I get the account "entitlement" to use this tool ? I have the "Insufficient Entitlement" error.

Regards,

Thomas.

[stubbyd]

This has to be the worst move forward of a tool yet. IMO of course.

I didn't often have need to use the old analyser but I could copy and paste or manually enter the info and it would do its thing. Now I just get - failed to connect errors. This is because >90% of the clients I support are either secure or the the acces to the end devices is restricted to come from a very select set of IPs with no internet connectivity.

As a consequence this tool is just an over-glorified and over-engineerd ssh / telnet tool that means anything we can't find from a serach will require a TAC case. Surely the whole point of this tool would be to reduce TAC cases so conisder an offline version or at least an updated online version.