Manage your network risks with Nipper our accurate firewall and network configuration audit tool

Nipper 2.13 Release

Continuing our tradition of enhancing accuracy and building on support with each new release, Nipper 2.13 offers enhanced device support. This update includes Palo Alto devices to cover PAN-OS 10, and Cisco devices to include FirePOWER devices, as well as performance improvements and more.

Find out more about Nipper 2.13

Titania Nipper NIST 800-171 Module

Titania Nipper NIST 800-171 module can automate the assessment of 15 of the NIST 800-171 requirements across six control families. Evidential information for a further six requirements across four control families can also be highlighted by the module.

Find out more about the NIST 800-171 module

Other recent updates:

See release notes for all recent releases including the latest plugins.

Yes, Nipper reports can be exported in a JSON format and integrated into your SIEM or SOAR system, allowing you to group, classify and prioritize vulnerabilities across your network.

Visit our resources center

You can now visualize your Nipper reports in Splunk

View all your audit reports in one dashboard with our Splunk integration. Get high-level information on your devices, as well as the ability to drill down for more detail. Download the Nipper app from Splunkbase here.

Nipper’s accurate audit data – such as your detailed compliance posture against standards including DISA STIG, DHS CDM/NIST 800-53 and PCI – can now be injected into the Elastic Stack via JSON, where the combined solution provides greater scope to analyze and remediate large numbers of your machines on a daily basis. The Kibana dashboard then gives you the power to examine your security posture from different angles, filtering by categories of error and drilling down to precise detail about devices/models impacted and how to mitigate risks. To learn how to aggregate your Nipper audit reports in Elasticsearch and explore the data in Kibana – download the guide here. 

    

Nipper can audit firewalls, switches and routers from all the major brands including:

• Cisco
• Check Point
• Fortinet
• Palo Alto
• Netfilter
• 3Com
• Barracuda
• Blue Coat
• Brocade
• Crossbeam
• …and many more.

Access our full list of supported devices here

If you have questions about any of these please get in touch on our webchat or at enquiries@titania.com

We update the resources within Nipper, ie the Common Vulnerabilities and Exposures (CVEs) list from the National Vulnerability Database (NVD), with each software release.

You can access our release notes here.

If you would like to update these at any other time, we provide a method for updating the CVEs whenever you need to, so that you can be certain the audit reports are as up-to-date as possible. A guide on how to do this can be found in the 'Help & Information' section on the home screen within Nipper.

Our licensing works on a per device (firewall, switch or router) basis by associating a device usage to an audited configuration. Once the device usage has been assigned to a device you will not be able to reallocate the usage, but you will be able to audit this device as many times as you need to for the entirety of your subscription.

If you have multiple year licenses the device usage will be reset every 12 months from the license creation date.

You can find out more about our licensing model here. 

Our software is free to download and install for a 30-day trial.

A trial allows you to run audits on two of your network devices for 30 days.

GET A FREE TRIAL >

For full information on Nipper, you can also download our datasheets from here.

Of the 12 PCI DSS requirements, Nipper can automate requirements 1, 2, 6, 8, 10 and 11 (88% of the testing procedures relating to core network devices).

Find out more about how you can assess PCI DSS compliance with Nipper here.

Learn about aggregating Nipper reports into your SIEM for PCI DSS

Yes, you can, installing and activating Nipper on multiple workstations allows users to access the license to audit devices across different teams, departments, or locations. When activating Nipper on multiple workstations we suggest that you set the update check to happen on every use, to monitor the device usage accurately. To change the update settings, go to the home screen of Nipper and click on 'Change Settings'. Select 'Maintenance' and amend as needed using the 'Check Interval' drop-down menu.

Scanners act as an attacker would, running attacks on devices and extrapolating weaknesses based on the results. They look at external data (results from attacks).

In contrast, Nipper analyses the configuration of firewalls, switches and routers ie. how devices will actually respond to any query or intelligent security scenario. Using virtual modeling technology, Nipper identifies any vulnerabilities in the settings and rule interactions and delivers a detailed and actionable report within minutes.  Because our software analyses the actual configuration file, audits can be run with minimal contact with the device, therefore leaving a small footprint. 

Using both scanners and Nipper will help you achieve a much higher level of security than using scanning tools alone.

Complementary features	Scanners	Nipper
Authentication and authorization configuration	X
Account and logging configuration	X
IDS and IPS configuration	X
Password strength and encryption analysis	X
Timeout configuration	X
Physical port analysis	X
Routing configuration	X
VLAN configuration	X
Network address translation	X
Network protocols	X
Device specificiation	X
Time synchronization	X
Network filtering (ACL) audit
Wireless networking
Warning messages (banners)
Network administration services
Network service analysis
Software vulnerability analysis