We use the Policy Reporting function extensively.
I would however like to see some enhancements to make the feature more powerful.
In particular we have issues when attempting to perform policy compliance on individual interfaces (in our case QOS compliance). Rather than just enabling policy reporting on the configuration files, I would like to be able to generate similar reports on information held within the Cirrus database (particularly the interface table).
When creating a policy currently I only have the option of selecting a node/s to apply the policy. It would be useful to be able to determine criteria based upon both the existing node criteria and interface criteria.
The interface table could also have another field added for the interface configuration (perhapes parsed from the configuration held in the node table). If we could then apply a regex expression against this field, it would enable us to produce Policy Reports down to the interface level.
If/then/else logic within the rule definitions would also be a major benefit.
Dave.
Doesn't look like this is a hot topic for anyone else...
I ended up creating a method for performing these functions outside of the current Policy Reporting function - although I hope in a future release I can bring this back into the core Cirrus product.
An article showing how I am doing this is here http://thwack.com/files/folders/cirrus_config/entry35956.aspx
Sav.
Thanks for posting! We'll check this out and consider Policy Reporting enhancements based on your suggestions in a future release.