Skip to main content

Verify

Forward Verify makes sure that the network is configured and behaving exactly as intended across on-prems, cloud and virtual overlay networks by setting and checking policies for the entire network. Forward Verify continuously audits the network and sends non-compliance alerts. Forward Enterprise provides the following Verification types:

Users can configure a Priority field for each verification check in order to help with prioritizing which failing checks should be taken care of first.

The Priority field can be configured with one of the following values:

  • High
  • Medium
  • Low
  • Not Set (default)

Verification Check Priority

Checks that require advanced reachability analysis

Intent Verification checks that have an ungrounded path search query depend on advanced reachability analysis for the Snapshot being evaluated. By default this runs on demand.

Check notifications are emitted once per Snapshot, when the Snapshot is considered complete. The timing of that moment depends on whether advanced reachability runs proactively:

  • On demand (default): the Snapshot is considered complete when the main processing pipeline finishes, before advanced reachability has run. A check that needs advanced reachability is still unevaluated at that point (its tooltip reads requires additional processing), so it has no pass or fail status to contribute to the notification. When a user later triggers advanced reachability, the check is re-evaluated automatically and its status updates to pass or fail, but no second notification is sent, since the Snapshot already emitted its one notification. A check that would otherwise have alerted on failure does not, because it had no result when the notification was emitted.
  • Proactive: advanced reachability is triggered automatically when the main pipeline finishes, and the Snapshot is not considered complete until that computation finishes. These checks are evaluated before the single notification is emitted, so they notify on failure the same as any other check.

Account for this when defining a check whose query needs advanced reachability. If you rely on it to alert you, turn on Proactively run advanced reachability analysis (see Advanced reachability analysis) so the check is evaluated before the Snapshot's notification is emitted.