PermitANY

Prompt Library

Ready-to-use AI prompts for network engineers — fill in your variables, copy, and paste into ChatGPT, Claude, or Gemini.

24 prompts

ACL / Firewall Policy Security Review

Prompt · Security

Paste your ACL, firewall policy, or security filter and get a security analysis: permit-any rules, missing explicit deny, shadow entries, and optimization suggestions. Supports Cisco IOS/IOS-XE/IOS-XR/NX-OS, Juniper Junos, Arista EOS, Palo Alto PAN-OS, and Fortinet FortiOS.

ChatGPT · Claude · Gemini

aclsecuritymulti-vendor

BGP EVPN / VXLAN Fabric Design Advisor

Prompt · Design

CCIE Data Center / SP architect for BGP EVPN VXLAN overlays. Covers underlay design (OSPF/IS-IS/eBGP), overlay (MP-BGP EVPN, RT/RD design, ARP suppression), VTEP design, multi-tenancy with VRFs, symmetric vs asymmetric IRB, anycast gateway, and multi-site DCI. Platform-specific guidance for Cisco NX-OS and Arista EOS.

ChatGPT · Claude · Gemini

evpnvxlanbgp

BGP Troubleshooting Assistant

Prompt · Troubleshooting

CCIE-level BGP diagnostic assistant. Paste your BGP output and describe the symptom — get a full diagnostic tree covering FSM states, path selection algorithm, route policy issues, and platform-specific commands for Cisco IOS/IOS-XE, IOS XR, NX-OS, Juniper JunOS, and Arista EOS.

ChatGPT · Claude · Gemini

bgproutingtroubleshooting

Network Change Request Writer

Prompt · Configuration

Describe a network change and get a complete change request document: scope, risk assessment, rollback plan, step-by-step implementation, and verification commands.

ChatGPT · Claude · Gemini

change-managementdocumentationitil

Check Point Drop Analyzer

Prompt · Troubleshooting

CCSE-level assistant for finding out why a Check Point gateway is dropping traffic on R82.x. Starts with fw ctl zdebug drop, rules out SecureXL acceleration before believing any capture, reads the four fw monitor inspection points, and separates Access Control from NAT, anti-spoofing, table limits, IPS and ClusterXL.

ChatGPT · Claude · Gemini

check-pointcheckpointr82

Network Device Error Explainer

Prompt · Troubleshooting

Paste any syslog message or error output from your network device and get a plain-English explanation, severity assessment, root cause, and remediation steps. Supports Cisco IOS/IOS-XE/IOS-XR/NX-OS, Juniper Junos, Arista EOS, Palo Alto PAN-OS, and Fortinet FortiOS.

ChatGPT · Claude · Gemini

syslogerrorstroubleshooting

DMVPN / FlexVPN / GETVPN Design Advisor

Prompt · Design

CCIE Security design advisor for enterprise VPN architectures. Compares DMVPN Phase 1/2/3, FlexVPN (IKEv2), and GETVPN across scenarios: branch connectivity, MPLS overlay, spoke-to-spoke optimization, and dual-hub redundancy. Gives you an opinionated recommendation with routing, crypto, QoS, and scalability guidance.

ChatGPT · Claude · Gemini

dmvpnflexvpngetvpn

Firewall Policy Security Review

Prompt · Security

Senior firewall engineer / PCNSE / NSE-level security review. Analyzes your firewall ruleset for permit-any-any, shadow rules, missing logging, unused objects, NAT hairpin issues, zero-trust alignment, and compliance gaps. Platform-specific guidance for Palo Alto PAN-OS, Fortinet FortiOS, Cisco ASA, Cisco FTD, and iptables.

ChatGPT · Claude · Gemini

firewallsecuritypolicy

Network Incident Response Playbook

Prompt · Security

NIST IR framework-based incident response playbook tailored to your incident type and environment. Covers ransomware, data breach, DDoS, insider threat, phishing, and malware with phase-specific actions: detection, containment, eradication, recovery, and lessons learned. Includes forensic commands, chain of custody, legal notification timelines, and regulatory compliance (GDPR 72-hour rule, PCI-DSS).

ChatGPT · Claude · Gemini

incident-responsesecurityforensics

IPv6 Connectivity Troubleshooter

Prompt · Troubleshooting

IPv6 diagnostic assistant that starts where the fault actually divides: SLAAC, DHCPv6 or static. Covers Router Advertisement flags, Neighbor Discovery, source address selection per RFC 6724, the default route that arrives in an RA, and the ICMPv6 filtering that breaks IPv6 outright instead of degrading it. Cisco IOS/IOS-XE, IOS XR, NX-OS, Juniper JunOS, Arista EOS, Palo Alto PAN-OS and Fortinet FortiOS.

ChatGPT · Claude · Gemini

ipv6slaacdhcpv6

Log Triage Analyst

Prompt · Security

Paste raw logs — syslog, Windows events, firewall, proxy, auth, cloud audit — and get a structured triage: what the events actually say, a UTC timeline, the benign explanation checked before the malicious one, and the specific next query. Built to say "this is normal" when it is.

ChatGPT · Claude · Gemini

log-analysistriagesoc

Network Device Hardening Review

Prompt · Security

CCIE Security / CIS Benchmark expert-level hardening review. Analyzes your device configuration across management plane (SSH, AAA, TACACS+), control plane (CoPP, BFD), and data plane (uRPF, DHCP snooping, DAI). Covers Cisco IOS/IOS-XE/IOS-XR/NX-OS, Palo Alto PAN-OS, Fortinet FortiOS, Juniper Junos, and Arista EOS against CIS benchmarks, NIST 800-53, PCI-DSS, and ISO 27001.

ChatGPT · Claude · Gemini

hardeningcisnist

OSPF Troubleshooting Assistant

Prompt · Troubleshooting

Paste your OSPF show output and get a diagnosis of neighbor issues, adjacency failures, and routing problems. Works with Cisco IOS, NX-OS, Juniper, and Arista.

ChatGPT · Claude · Gemini

ospfroutingtroubleshooting

Packet Capture Root Cause Analysis

Prompt · Troubleshooting

Turn a capture into a root cause that another engineer can check. Qualifies what the capture point can prove before analysing anything, works from who stopped talking first, cites a frame number for every claim, and reports what it could not determine as part of the answer.

ChatGPT · Claude · Gemini

packet-capturepcapwireshark

Penetration Testing Methodology Guide

Prompt · Security

Senior penetration tester (OSCP/CEH/CPTS) methodology guide for authorized assessments. Structured across 7 phases: reconnaissance, scanning, vulnerability assessment, exploitation, post-exploitation, lateral movement, and reporting. For authorized engagements only.

ChatGPT · Claude · Gemini

pentestpenetration-testingred-team

Post-Quantum Risk Assessment

Prompt · Security

Assesses a system's exposure to post-quantum cryptographic risk using Mosca's inequality — confidentiality lifetime plus migration time against the arrival of a cryptographically relevant quantum computer. Separates key exchange (vulnerable to harvest now, decrypt later) from signatures (which are not), demands evidence of library, version and protocol before concluding, and targets hybrid key exchange rather than pure PQC because hybrid is what actually deploys today.

ChatGPT · Claude · Gemini

post-quantumpqccryptography

SIEM Query Translator & Builder

Prompt · Security

Describe what you want to find in plain English, or paste a query from one SIEM, and get the working equivalent in Splunk SPL, Microsoft Sentinel KQL, Elastic ES|QL/KQL, QRadar AQL or Chronicle UDM — with the field-mapping differences and the performance traps named rather than silently glossed over.

ChatGPT · Claude · Gemini

siemsplunkspl

Sigma Detection Rule Builder

Prompt · Security

Turn an attacker technique, an IOC, or a description of suspicious behaviour into a valid Sigma rule with correct logsource, realistic field names, a false-positive section and a tuning plan. Backend-agnostic, so the same rule converts to Splunk SPL, Microsoft Sentinel KQL, Elastic and QRadar.

ChatGPT · Claude · Gemini

sigmadetection-engineeringsiem

Network Technology Explainer

Prompt · Learning

Get a clear, level-appropriate explanation of any networking or security technology — from basic to expert. Great for learning a new protocol, preparing for a cert exam, or explaining something to your team.

ChatGPT · Claude · Gemini

learningexplanationprotocol

TLS Configuration Review

Prompt · Security

Reviews the TLS configuration you paste — cipher suites, protocol versions, curves, OCSP stapling, HSTS, mTLS, session resumption and 0-RTT — against RFC 9325 (BCP 195), RFC 8446 and NIST SP 800-52r2. Starts from the defect that sinks most carefully hardened configurations: TLS 1.3 and TLS 1.2 select suites through different mechanisms, so a meticulous cipher list never touches 1.3. Covers hybrid post-quantum key exchange (X25519MLKEM768) as a setting available today, and always separates what it verified from what it could not see in the text.

ChatGPT · Claude · Gemini

tlssslcipher-suites

VPN Architecture Design Advisor

Prompt · Design

CCIE Security architect-level VPN design advisor. Covers DMVPN Phase 1/2/3, FlexVPN, GETVPN, Site-to-Site IPsec, and SD-WAN with real trade-offs, scalability limits, crypto recommendations, and hub redundancy design. Tells you exactly which technology to use and why for your specific scenario.

ChatGPT · Claude · Gemini

vpndesignarchitecture

VPN Tunnel Troubleshooting Assistant

Prompt · Security

CCIE Security-level VPN diagnostic assistant. Covers DMVPN (Phase 1/2/3), FlexVPN, GETVPN, Site-to-Site IPsec IKEv1/v2, and AnyConnect. Diagnoses IKE Phase 1 failures, IKE Phase 2 failures, NHRP issues, GRE/mGRE problems, and data-plane routing issues across Cisco IOS/IOS-XE, ASA, FTD, Juniper SRX, Palo Alto, and Fortinet.

ChatGPT · Claude · Gemini

vpnipsecike

CVE Vulnerability Prioritization

Prompt · Security

Paste a list of CVEs or vulnerability scan results and get a prioritized remediation plan based on your network context, exploitability, and actual risk — not just CVSS score.

ChatGPT · Claude · Gemini

vulnerabilitycvecvss

Zero Trust Architecture Design

Prompt · Design

Expert guide to designing Zero Trust Network Architecture (ZTNA) based on NIST SP 800-207. Covers identity verification, device posture, micro-segmentation, application access control, and continuous monitoring. Platform guidance for Palo Alto Prisma Access, Fortinet ZTNA, Cisco Duo + Umbrella, Zscaler ZIA/ZPA, and Microsoft Entra.

ChatGPT · Claude · Gemini

zero-trustztnanist