Command filters overview

Command filters enable group administrators to restrict commands users can execute on network devices during an IDT session. Both administrators and users can create command filter resources and set the VTMOS for such. Using IDT, network operators can initiate TELNET and SSH terminal sessions with devices in order to change the device configuration.

This allows administrators to control the specific changes operators can make to devices without restricting the type of direct access to a device that IDT provides. Command filters therefore provide a less reactive way of controlling and monitoring device changes than, for example, key stroke logs.

Note: Netcool Configuration Manager GUI and API users cannot modify or delete command filters assigned to their own user groups.

IDT displays device output in response to commands. Command filtering restricts the commands that can be sent to a device, but does not filter the output once a command begins to extract data from a device.

Remember: Key stroke logs provide a detailed audit trail of changes operators make to devices in the network.