a network analysis tool is provided in support of a data communication network having dynamically provisioned devices at indeterminate endpoints wherein templates , namely , the collection of meta - data about dynamically provisioned devices on a network , are modeled as fixed endpoints for purposes of tracking . in a specific embodiment , template groups are generated as network interfaces for a modeled template enforcement device , and template groups are represented as if they are network endpoints connected to a template enforcement device , and a device description for the template enforcement device is produced .