BackBox Features: Secure, Scalable Network Automation

Features by Use Case

Every Kilter package carries the same catalogue of automations. What changes is how much of the work runs on your behalf.

Features by Use Case
Feature	Kilter ALMBack up, restore and automate	Kilter EnterpriseEverything in ALM, plus compliance	Kilter AIEverything in Enterprise, plus AI
Automated Lifecycle Management (ALM)
Multi-vendor Device Support	Included	Included	Included
Device Onboarding & Inventory	Included	Included	Included
Backup & 1-click Restore	Included	Included	Included
5-step Verification Backup	Included	Included	Included
Backup Comparison	Included	Included	Included
Backup Status	Included	Included	Included
Automated Device Configuration Backup	Included	Included	Included
Task Automation	Included	Included	Included
Chains	Included	Included	Included
Notifications (email, syslog, SNMP, HTTP, alerts)	Included	Included	Included
Exception-driven Alerting	Included	Included	Included
Event Driven Automation	Included	Included	Included
Automated OS & Firmware Upgrades	Included	Included	Included
Configuration Drift Reporting	Included	Included	Included
Pre-built Automation Library	Included	Included	Included
Source of Truth	Included	Included	Included
External Vault Support for Device Access	Included	Included	Included
Directory Service and AAA for User Access	Included	Included	Included
Credential & Config File Encryption	Included	Included	Included
Secure Multi-Tenancy	Included	Included	Included
Role Based Access Control (RBAC)	Included	Included	Included
Distributed Architecture Supporting ZTNA	Included	Included	Included
Integrations Framework	Included	Included	Included
High AvailabilityAdd-on	Included	Included	Included
SD-WAN/SASEAdd-on	Included	Included	Included
Automation Creation Assistant	Not included	Not included	Included
Configuration Compliance & Policy Management
Compliance Automation	Not included	Included	Included
Compliance Monitoring	Not included	Included	Included
Device Compliance Status	Not included	Included	Included
Automated Compliance & Remediation	Not included	Included	Included
Performance Trends	Not included	Included	Included
Extended Inventory	Not included	Included	Included
Configuration Discovery & Mapping	Not included	Included	Included
Network Infrastructure Integrity
Vulnerability Intelligence	Not included	Included	Included
Risk Scoring	Not included	Included	Included
Device Access w/ Session Recording	Not included	Included	Included
Centralized Audit & Control	Not included	Included	Included
Device End-of-life Data Collection	Not included	Included	Included
CVE Workaround Insights	Not included	Not included	Included
CVE Workaround to Chains	Not included	Not included	Included

Automated Lifecycle Management

Onboarding
Device Inventory
Backup & 1-Click Restore
Automated OS & Firmware Upgrades
Lifecycle Management

Learn More

Compliance & Policy Management

Contextual Automation
Change Auditing
Reporting
Automated Compliance and Remediation
Role Based Access Control

Learn More

Network Infrastructure Integrity

Risk Scoring
Vulnerability Remediation
Change Monitoring
Access Management

Learn More

Automated Lifecycle Management

Back up, validate, and restore all your devices with a single click.

Onboarding: BackBox enables greenfield and brownfield provisioning by adding devices through IP range, CIDR block, or CSV import. When new devices are brought into the network, tasks are automated to match the config policy.
Device Inventory: BackBox automates the collection of details about your network devices, gathering and organizing helpful information such as device models, hostnames, specific OS versions, CPU type, total RAM, and more.
Automated OS & Firmware Upgrades: BackBox features comprehensive upgrade automations, including multi-step and high-availability aware upgrades. You can chain pre- and post-check automations to automate upgrade testing within your process.
Lifecycle Management: BackBox equips you with vital end-of-life insights, empowering you to easily plan and execute hardware replacements and upgrades. Don't leave your technology to chance—strategize effectively and keep your systems running smoothly.
Backup & 1-Click Restore: BackBox ensures success by thoroughly validating all backups. With just one click, you can restore device configurations and operating systems, even to bare metal for replacing devices.

Compliance & Policy Management

Run compliance checks on devices to assess resilience.

Contextual Automation: IntelliChecks, BackBox's contextual automations, makes available a large set of functionality with 1500+ advanced automations built into the product with advanced features, including compliance auditing, remediation, technical survey, and reporting.
Role Based Access Control: BackBox offers flexible role-to-privilege mapping and integrates with password vaults and SSO solutions, simplifying security and administration across sites and enabling secure and auditable delegation of network tasks.
Automated Compliance & Remediation: With a built-in library of compliance and remediation automations, BackBox delivers a simple way to baseline and scale compliance activities such as DISA STIGs, CIS Benchmarks, DORA, and more.
Change Auditing: BackBox Compare Tool makes comparing configuration baseline parameters, compliance expectations, or any other files easy.
Reporting: Inform decision-making by running automations that generate customized reports for your diverse environment and processes.

Network Infrastructure Integrity

Proactively identify active exposures you are vulnerable to.

Discovery & Mapping: BackBox models your network's configuration inventory, which is mapped against an AI-enabled threat and vulnerability intelligence feed that uses CVEs and other security information to determine the threat level against your specific inventory.
Risk Scoring: Risk level, recommended updates and patches, and product end-of-life information provide recommended automations to remediate discovered vulnerabilities and help you prioritize device patching based on actual risk to their network.
Vulnerability Remediation: Easily discover vulnerabilities in your network, prioritize CVEs according to their unique risk profile, and take remediation action, regardless of network complexity.
Change Monitoring: Run vulnerability reports based on device inventory to understand risk and security posture and prioritize efforts and resources appropriately.
Access Management: Record terminal sessions to easily audit and review access history (and utilize for compliance and training purposes), ensuring commands are completed while providing status notifications.