A system for managing a network apparatus of a communication network, said system comprising: - a network management center provided with a management-on-board manager (MoB-M); and - a management-on-board agent (MoB-A) executable at said network apparatus, wherein a management-on-board agent (MoB-A) is an agent configured to carry out at least part of a network management task that is typically carried by the network management center, wherein the management-on-board manager (MoB-M) is a manager configured to cooperate with the management-on-board agent (MoB-A) to carry out the network management task, wherein said management-on-board agent (MoB-A) is configured to perform, when executed at said network apparatus, the at least part of the network management task on said network apparatus, said management-on-board agent (MoB-A) being further configured to, during its execution, retrieve at least one instruction from said management-on-board manager (MoB-M) and execute said at least one instruction for completing said network management task, wherein said at least one instruction is in the form of an ordered list of instructions, wherein said management-on-board agent (MoB-A) is provided with an interpreter configured to: - receive the ordered list of instructions; - check whether each single instruction of said ordered list of instructions is an allowed instruction, wherein the allowed instruction consists of a read instruction and a get instruction if said management-on-board agent (MoB-A) is determined to be a discovery script; and - upon determining that each single instruction of said ordered list of instructions is an allowed instruction, provide said ordered list of instructions to the management-on-board agent (MoB-A). - a network management center provided with a management-on-board manager (MoB-M); and - a management-on-board agent (MoB-A) executable at said network apparatus, wherein a management-on-board agent (MoB-A) is an agent configured to carry out at least part of a network management task that is typically carried by the network management center, wherein the management-on-board manager (MoB-M) is a manager configured to cooperate with the management-on-board agent (MoB-A) to carry out the network management task, wherein said management-on-board agent (MoB-A) is configured to perform, when executed at said network apparatus, the at least part of the network management task on said network apparatus, said management-on-board agent (MoB-A) being further configured to, during its execution, retrieve at least one instruction from said management-on-board manager (MoB-M) and execute said at least one instruction for completing said network management task, wherein said at least one instruction is in the form of an ordered list of instructions, wherein said management-on-board agent (MoB-A) is provided with an interpreter configured to: - receive the ordered list of instructions; - check whether each single instruction of said ordered list of instructions is an allowed instruction, wherein the allowed instruction consists of a read instruction and a get instruction if said management-on-board agent (MoB-A) is determined to be a discovery script; and - upon determining that each single instruction of said ordered list of instructions is an allowed instruction, provide said ordered list of instructions to the management-on-board agent (MoB-A). - receive the ordered list of instructions; - check whether each single instruction of said ordered list of instructions is an allowed instruction, wherein the allowed instruction consists of a read instruction and a get instruction if said management-on-board agent (MoB-A) is determined to be a discovery script; and - upon determining that each single instruction of said ordered list of instructions is an allowed instruction, provide said ordered list of instructions to the management-on-board agent (MoB-A).