Delyan works on firewall configurations. Until you add one, most pages are empty. This guide takes you from an empty installation to your first results in a few minutes.
1. Register the device
Find Devices Inventory in the sidebar.
Devices are organised as Customer → Site → Device. Setting these up first keeps things tidy once you have many firewalls.
Click Add Device and fill in its name, vendor, model, customer and site. Pick the vendor that matches the configuration you'll load.
2. Load its configuration
Choose whichever method fits your environment:
Upload a configuration file exported from the firewall. No network path to the device is needed, so this is the method for air-gapped environments and for Cisco devices.
Save the device's IP address and SSH credentials, and Delyan fetches the configuration for you. It then refreshes it automatically on a schedule you choose.
Upload the policy usage CSV exported from a FortiGate or Palo Alto on top of a loaded configuration. Delyan then shows which rules are actually used.
Export tips
| Vendor | How to export |
|---|---|
| FortiGate | In the GUI: System → Configuration → Backup → Local PC. From the CLI: execute backup config tftp <filename> <tftp-server-ip>. Use a full configuration backup. |
| Palo Alto | Export the XML configuration file (for example running-config.xml), or run set cli config-output-format set then show and save the output. For hit counts, use Policies → Security → Export. |
| Cisco IOS / IOS-XE | Run show running-config and save the output to a file. |
3. Parse and view results
For uploaded files, click Parse. Configurations fetched over SSH are parsed automatically.
Large configurations can take a minute or two. The progress bar is live, so give it time. When parsing finishes:
- The configuration pages fill with policies, objects, interfaces, routes and more.
- The analysis runs in the background and its findings appear on the analysis pages.
- The Dashboard shows totals across all your devices, with a card per firewall.
Use the active device selector at the top of the page to choose which firewall you're looking at. Press Ctrl+K to jump to any page.
Loading a newer configuration
A device can keep several configurations over time, for example before and after a change. When you load a configuration for a device that already has one, choose:
- Replace to update the device with the latest configuration.
- Save as new to keep both versions side by side.
Common issues
| What you see | Likely cause | What to do |
|---|---|---|
| "Truncated file" | The file was cut off during export | Export the configuration again |
| "Invalid encoding" | The file isn't saved as UTF-8 | Save it as UTF-8 and try again |
| "Unsupported syntax" | A very old firmware version or an unusual section | Contact support with the firmware version |
| Wrong vendor message | The file doesn't match the vendor you registered | Register the device again with the right vendor |
| The page seems stuck | A very large file is still being parsed | Wait for the progress bar to finish |
| SSH fetch fails | Wrong credentials, unreachable address, or SSH disabled on the firewall | Check the device's status in Devices Inventory, fix the details and test again |
Configuration files contain sensitive details such as IP addresses and user names. Store and share exported files the way you would any other confidential document.
Next, see what you can do with the loaded configuration in Explore your configuration.
