Skip to content
Cenovel

Integrations

Cenovel reads the controllers and services you already run, signs people in with your directory, and sends alerts where your team works. Every connection is one you choose, off until you turn it on.

Book a demoOpen Mist in the demo
The Cenovel appliance runs inside your network. Staff browsers reach it over HTTPS on port 443. It reads switches, access points and firewalls over SSH and SNMPv3, servers through Redfish, and checks sign-ins against your directory over LDAPS or StartTLS. Site collectors read networks the appliance cannot route to. Mail, webhooks and an off-box backup host are used only if you set them up. Outside your network it reaches Juniper Mist, ExtremeCloud IQ and Microsoft Entra ID only if you connect them. It has no connection to Cenovel the company: no telemetry, no update check and no license server.Your networkOutside your networkCenovel applianceOne VM on your vSphereStaff browsersHTTPS 443Your directoryLDAPS · StartTLSSwitches, access pointsand firewallsSSH 22 · SNMPv3 161ServersRedfish 443Mail, webhooksand off-box backupsOnly if you set them upSite collectorsFor networks it can’t route toCloud controllersJuniper Mist · ExtremeCloud IQMicrosoft Entra IDHTTPS, only if you connect themCenovel, the companyNo connection: no telemetry,no update check, no license server
Every connection Cenovel makes, and the ports it uses.Deployment and network exposure

What it connects to

Read-only by construction: the clients for Redfish, Juniper Mist and ExtremeCloud IQ send GET requests and nothing else.

  • Juniper Mist

    Read with a read-only token every five minutes: sites, device status and inventory, events and alarms. Mist sites are mapped to your sites by hand, and Cenovel keeps client counts, never client identities. Webhooks are optional.

    How it works

  • ExtremeCloud IQ

    The location tree and the device list, read with a read-only token. Each site is mapped by hand, and a controller never creates or changes an inventory record.

    How it works

  • Active Directory

    Sign-in over LDAPS (the default) or StartTLS, with groups mapped to access tiers and optional authenticator codes. Directory passwords are never stored.

    How it works

  • Microsoft Entra ID

    Sign-in with the authorization code flow and PKCE, with groups mapped to access tiers as with the directory.

    How it works

  • Email and webhooks

    Alert channels with their own families, severity floor and quiet hours; the morning report by email. Mail goes over STARTTLS or TLS.

    How it works

  • API

    A REST API with tokens whose scopes never exceed their creator’s rights, shown once and stored only as a hash, expiring after 90 days by default.

    How it works

  • Server controllers

    HPE iLO, Dell iDRAC and any other Redfish controller, read over HTTPS once the controller’s certificate is pinned or checks against a CA you supply.

    How it works

  • Spreadsheets

    Import your sites, closets and switches, or asset rows, from CSV or Excel; export workbooks and CSV packages.

    How it works

See it with your own network

A short call and the live demo, then a trial or a pilot on your own appliance.

Book a demoTry the live demo