Unit 03 — Network Operations
If you've run a multi-site network, you know the routine: a dashboard per vendor, each with its own idea of what a device is, and no easy way to tell whether the estate meets your standard. Synapse puts every vendor's devices in one inventory and scores them against your standards. Vendors are plugins, so adding one is an integration job. It's built for enterprise NOCs and for MSPs managing many customer networks from one console.
Every vendor pull goes into one fleet model (serial, brand, source, product type and lifecycle status), unique per account, with stale records reconciled. A device has no site until its network mapping is confirmed in a review journey, because a guessed site is worse than a blank one. The add-integration wizard builds each vendor's credential form from the plugin's schema.
The compliance engine checks Wi-Fi standards and vulnerability posture against policies scoped to an organization, label or site. Each resource passes, fails or is not applicable, with drill-down and on-demand re-runs. Vulnerabilities come from CISA KEV and incremental NVD updates, matched on CPE 2.3 version ranges, and each finding records whether it matched on CPE or a heuristic.
Composite health combines health, compliance, vulnerability and lifecycle, weighted by a per-account profile. Each dimension scores 0 to 100 or stays empty when there's no data, and empty doesn't count as zero. Monthly snapshots show trends, and scheduled reports send CSV files and presentation decks in each tenant's branding.
An on-site collector enrolls with signed keys, runs SSH recipes from the cloud for inventory and config backup, and turns NetFlow, IPFIX and sFlow into hourly aggregates: top talkers, services and conversations per site over 24 hours, 7 days and 30 days. Each action declares a risk class, permission and input schema. Steps that write to devices wait for approval, run idempotently with audit rows, and can be scheduled into maintenance windows.
Synapse is in early access. Start with read-only inventory and scoring, then add the collector, traffic visibility and approved remediation when you're ready. Portal is included for sign-in.