Currently we do something sort of halfway: archive the actual configs and then run audit scripts against them, which parse the configs. Definitely not ideal but it helps catch simpler errors. One of these days when I have extra cycles.. (yeah, right)

Austin

There are a handful of good products on the market that do this for you, like True Control from Rendition and Device Authority from Alterpoint. We recently purchased Device Authority primarily for its auditing and compliance monitoring, but also for the ease with which we can push out mass changes to devices. It's honestly cooler than sliced bread. The downside to these applications is the price. Ouch. Regardless, now that I have Device Authority, I sure as heck would not give it back! John --