Solutions for Every Network Challenge

Real-world scenarios where NetGUI transforms network operations from time-consuming manual processes to efficient automated workflows

IOS Upgrades

Upgrade Your Entire Switch Fleet in a Maintenance Window

The Challenge

Manually upgrading hundreds of switches is time-consuming, error-prone, and risky. Each device requires checking flash space, uploading images, verifying MD5 hashes, setting boot variables, and coordinating reboots. One mistake can cause extended downtime.

The Solution

NetGUI automates the entire upgrade lifecycle:

  • Batch upload switches from a file or enter manually
  • Automatic model detection and image selection
  • Pre-flight flash capacity verification
  • MD5 checksum validation
  • Scheduled execution during maintenance windows
  • Pre/post upgrade validation and comparison
  • Automated cleanup of old images

Results

3 Days
vs 3 weeks manual
300+
Switches upgraded
0
Failures or rollbacks
85%
Time reduction
Home / IOS Upgrade Manager JM IOS Upgrade Manager Automate firmware upgrades across your switch fleet + Add Devices TOTAL 247 COMPLETED 189 IN PROGRESS 42 FAILED 0 Overall Progress 76% 189 done · 42 uploading · 16 queued · 0 failed · ETA 47 min HOSTNAME MODEL CURRENT IOS TARGET IOS FLASH STATUS SW-CORE-01 C9300-48P 17.3.4 17.9.5 OK Done SW-DIST-03 C9200-24T 16.12.6 17.9.5 OK Uploading 70% SW-ACC-12 C2960X-48 15.2.7 15.2.9 OK Done SW-ACC-17 C9200-48P 17.3.4 17.9.5 OK Verifying SW-ACC-22 C9200-24T 16.12.5 17.9.5 - Queued SW-EDGE-05 C9300-24T 17.6.2 17.9.5 OK Done SW-EDGE-08 C9300-48T 17.3.4 17.9.5 OK Done
WLAN Management

Replace Failed APs in Minutes, Not Hours

The Challenge

When an AP fails, you need to swap it fast. But transferring configurations, settings, and verifying everything works takes 30-45 minutes per device. Documentation is often incomplete, and mistakes lead to callbacks.

The Solution

5-step guided AP replacement wizard:

  1. Select failed AP or upload backup config
  2. Identify new AP (manual entry or QR scan)
  3. Automated configuration transfer
  4. Built-in verification checklist
  5. Generate replacement documentation

Results

5 min
vs 45 min manual
90%
Time savings
WLAN / AP Replacement Wizard JM AP Replacement Wizard 5-step guided wizard to swap failed access points in minutes New Replacement 1 Select AP 2 Identify New 3 Config Transfer 4 Verify 5 Document Step 3 of 5 - Configuration Transfer Transferring configuration from failed AP to replacement unit FAILED - To be replaced AP-OFFICE-3F-08 Model: Cisco C9120AXI SSID: Corp-WiFi, Guest VLAN: 20, 100 Location: Floor 3, East Status: Offline NEW - Receiving Configuration AP-OFFICE-3F-08 Model: Cisco C9120AXI Transferring configuration... 70% SN: FCW2422L0BK Online - Provisioning TRANSFER CHECKLIST SSID & Security Configuration Radio Settings (2.4 GHz / 5 GHz) 3 VLAN & QoS Policies in progress... 4 Location Tags & Labels Continue → ← Back Step 3 of 5 · Est. 2 min remaining

AP Goes Down at 2 AM. NetGUI Finds Out Why.

Your monitoring detects the problem. NetGUI diagnoses it automatically - no engineer needed.

Detect

Monitoring sends alert to NetGUI via webhook

Locate

Maps AP to upstream switch and port from inventory

Diagnose

Port Status TDR Cable PoE CDP/LLDP DHCP WLC Clients

Report

Root cause and next steps sent via Teams, Slack, or email

< 3 min
Time to diagnose
Zero CLI
Manual commands needed
24/7
Autonomous operation
100%
Audit coverage

Real-World Scenario

PRTG detects an access point in Building 3 is offline at 02:00. By 02:03, NetGUI has identified a cable fault at 12 meters on Gi1/0/24 and delivered the report to the on-call team via Teams - before a single ticket is opened.

PRTG Zabbix LibreNMS SNMP Traps Webhooks
Professional Services

Wireless Site-Survey & RF Optimization

The Challenge

Poor wireless coverage leads to dead zones, interference, and frustrated users. Without proper RF planning, you face connectivity issues, capacity problems, and constant troubleshooting. DIY approaches often miss critical factors.

Our Service

Comprehensive site-survey services:

  • On-site RF analysis and heat mapping
  • Coverage optimization and AP placement
  • Interference identification and mitigation
  • Capacity planning for high-density areas
  • Detailed reports with actionable recommendations
  • Post-deployment validation surveys

Results

99%+
Coverage accuracy
50%
Fewer support tickets
WLAN / RF Coverage Map JM RF Coverage Map - Floor 3 On-site survey · Cisco C9120 series · 2 APs active · 1 dead zone detected Export PDF Heatmap Coverage Channels Channel Util. Dead Zone AP needed AP AP-3F-01 AP AP-3F-02 Conference A Meeting B Open Office Breakout Signal Level Excellent Good Fair Poor AP-3F-01 RSSI: -48 dBm Excellent Ch: 6 (2.4 GHz) AP-3F-02 RSSI: -55 dBm Excellent Ch: 11 (2.4 GHz) Coverage 87% of floor area 1 dead zone
Security & Compliance

Track and Remediate Security Advisories

The Challenge

Vendors release security advisories regularly, but tracking which ones apply to your devices and managing remediation across your fleet is manual and time-consuming. Compliance audits require proof of tracking and remediation.

The Solution

Integrated PSIRT advisory management:

  • Filter advisories by severity and affected products
  • Track remediation status per device
  • Schedule patching activities
  • Export compliance reports for audits
  • Complete audit trail of actions taken

Results

100%
Compliance coverage
75%
Faster remediation
Security / PSIRT Advisory Tracker JM PSIRT Advisory Tracker Track and remediate security advisories across your device fleet Export Report CRITICAL 3 HIGH 11 MEDIUM 24 REMEDIATED 89% Filter severity: Critical High Medium All 38 total advisories ADVISORY ID TITLE / CVE SEV. DEVICES STATUS cisco-sa-iosxe-webui IOS XE Web UI Privilege Escalation CVE-2023-20198 · CVSS 10.0 Critical 47 Open cisco-sa-iox-privesc IOx Guest Shell Privilege Escalation CVE-2024-20306 · CVSS 9.8 Critical 12 In Progress cisco-sa-ipsec-dos IPsec Denial-of-Service CVE-2024-20311 · CVSS 9.1 Critical 8 Remediated cisco-sa-snmp-dos SNMP Remote Denial-of-Service CVE-2024-20399 · CVSS 8.6 High 31 Open cisco-sa-bgp-memory BGP Memory Exhaustion CVE-2025-20118 · CVSS 7.5 High 19 Remediated cisco-sa-cdp-memleak CDP Memory Leak CVE-2025-20144 · CVSS 6.3 Medium 54 In Progress Last sync: 2026-02-26 08:00 UTC · Auto-refresh: Daily · Full audit trail enabled
Remote Recovery

Recover Remote Devices Without Driving to Site

The Challenge

A failed IOS upgrade leaves a remote switch stuck in ROMMON at 2 AM. SSH is dead, the management IP is gone, and the nearest engineer is 3 hours away. Console access is the only way to recover, but it requires a physical connection to the device.

The Solution

Out-of-band console access via cellular connectivity:

  • Compact OOB gateway at each remote site with USB-to-serial console connection
  • LTE/5G cellular uplink independent of your network infrastructure
  • Encrypted WireGuard VPN tunnel back to your management network
  • Direct console access from the NetGUI dashboard
  • Works during ROMMON, boot failures, and total network outages
  • Health monitoring with automatic connectivity alerts

Results

0
Emergency site visits
15 min
vs 3+ hour drive
24/7
Recovery capability
100%
Uptime confidence
Home / OOB Remote Console JM OOB Remote Console Out-of-band console access via cellular gateway + Add Device TOTAL GATEWAYS 6 ONLINE 5 ALERT 1 VPN TUNNEL 100% SITE / DEVICE CELLULAR SIGNAL VPN LAST SEEN ACTION Bern Branch Office SW-BERN-01 (C9300) · ROMMON LTE -67 dBm Up Now Console Geneva Warehouse SW-GVA-02 (C9200) · Online 5G -54 dBm Up 2m ago Console Lugano Data Center SW-LUG-01 (C9300) · Online LTE -72 dBm Up 5m ago Console Basel Retail Store SW-BSL-03 (C2960X) · Unknown LTE -98 dBm Down 47m ago Retry Lausanne Campus SW-LAU-01 (C9200) · Online 5G -58 dBm Up 1m ago Console 6 gateways · 5 online · 1 alert · All VPN tunnels encrypted (WireGuard) Console: SW-BERN-01 via OOB Gateway switch: boot flash:cat9k_iosxe.17.09.05.SPA.bin Loading flash:cat9k_iosxe.17.09.05.SPA.bin... Recovery in progress... 34%
Network Visibility

Stop Drawing Outdated Visio Diagrams

The Challenge

Every network team has Visio diagrams that were accurate six months ago. Someone added a switch, moved a link, replaced a stack member, and nobody updated the drawing. Now you're troubleshooting at 3 AM with a topology map you can't trust.

The Solution

Auto-generated topology from real device data:

  • Automatic discovery via CDP and LLDP protocols
  • Interactive visual maps with device details on hover
  • Interface names, link speeds, and VLAN info on every connection
  • Always current because it reads from the actual network
  • Change detection alerts when new links or devices appear
  • Export to PDF, PNG, or share via link

Results

100%
Topology accuracy
0 hrs
Manual diagramming
Home / Network Topology JM Network Topology Auto-discovered via CDP · Last scan: 4 days ago Re-Discover All Core Distribution Access Export PDF CORE-RTR-01 C9500-24Y4C SW-DIST-01 C9300-48P SW-DIST-02 C9300-48P 10 Gbps Te1/0/1 - Te1/0/49 10 Gbps Te1/0/2 - Te1/0/50 StackWise Gi1/0/9 Gi1/0/20 SW-ACC-01 C9200-24P SW-ACC-02 C9200-48P SW-ACC-03 C9200-24P SW-ACC-04 C2960X-48 Gi1/0/9 Gi1/0/6 Gi1/0/10 Gi1/0/10 Gi1/0/9 Gi1/0/10 Gi1/0/07 Gi1/0/10 AP AP-3F-01 Gi1/0/5 AP AP-3F-02 Gi1/0/6 AP AP-3F-03 Gi1/0/5 AP AP-3F-04 Gi1/0/6 AP AP-2F-01 Gi1/0/5 AP AP-2F-02 Gi1/0/10 SW-ACC-04 Catalyst 2960X-48FPS IOS: 15.2(7)E7 PSIRT: 2 Critical Uplink: Gi1/0/40 CDP neighbors: 1 Click for details Healthy Alert 10G 1G

Complete Network Operations Platform

Every module designed to solve real operational challenges

Ad-Hoc Command Execution

Run pre-approved commands on any device without CLI access. Perfect for junior engineers or teams following strict change control processes. Complete audit logging of every command executed.

IPAM & Network Planning

Visual subnet management with tree views, IP allocation tracking, VLAN mapping tools. Includes subnet calculator, IP scanner, and subnet splitter utilities for efficient network planning.

Workflow Automation

Build custom workflows for device provisioning, security audits, configuration backups. Schedule recurring tasks daily, weekly, or monthly. Pre-built templates get you started immediately.

Role-Based Access & Audit

Granular permissions for admins and users. Every action logged with timestamp, user, and IP address. Searchable activity logs and per-user reports for compliance and security.

OOB Remote Recovery

Out-of-band console access via LTE/5G cellular and encrypted WireGuard tunnel. Recover switches stuck in ROMMON, fix boot failures, and restore connectivity from anywhere. No site visit required.

Auto-Generated Topology

Live network topology maps built automatically from CDP and LLDP discovery data. Always accurate, always current. Interface names, link speeds, and device details on every connection. No Visio required.

Swiss Professional Services

More Than Software. A Complete Partner.

On-site services across Switzerland. From planning to installation to 24/7 support.

WLAN Site-Survey

Professional RF analysis, heat mapping, and coverage optimization. We plan your wireless network for optimal performance.

Hardware Installation

Switch mounting, rack installation, cabling, and AP deployment. We handle the physical work so your team can focus on strategy.

Flexible SLA Options

Choose the support level that fits your needs. Business hours, extended coverage, or round-the-clock 24/7 support.

Switzerland-Wide

From Zürich to Geneva, Basel to Lugano. Our technicians cover the entire country with fast response times.

Find the Right Solution for Your Team

Talk to our solution architects about your specific challenges and discover how NetGUI can help.