100% PCI Compliance & Streamlined Firewall Policy Cleanup

The Challenge

Time-consuming manual processes, inconsistent policy management, and multiple management consoles made compliance violations nearly impossible to detect and even harder to clean up.

The company sought to:

• Clean and reduce their large rule base that consisted of redundant, overly permissive, and shadowed rules
• Gain 100% visibility of network firewalls across current and to-be-merged environments
• Simplify and accelerate ensuring universal standards are met by consolidating management of their multiple network security policy vendors into a single management console
• Achieve continuous monitoring and audit preparedness of firewall operations

The Solution

With FireMon’s network security policy management solutions, they gained real-time visibility, control, and management capabilities for all network security devices across its hybrid, multi-vendor environment.

• 100% visibility and control by standardizing and consolidating firewall, cloud security group, and other network policy device rulesets into a single management console
• Policy standardization and optimization identified and cleaned redundant, overly permissive, and shadowed rules
• A complete suite of rule assessment tools that detect vulnerabilities, misconfigurations, and traffic paths to continuously monitor firewall operations
• Proactive compliance checks and auto-denial of changes that violate compliance standards
• Benchmarks for network security policy with custom business risk policy and best practices reports, preconfigured and ad hoc compliance/audit reports, on-demand and scheduled risk reports, and on-demand, scheduled, and real-time (on change) compliance reports
• Migration planning helped enable their transition to the cloud

Results

• Audit prep reduced from days to minutes
• Real-time visibility into traffic flows and policy enforcement across the hybrid environment
• Automated policy management streamlined rule provisioning and reduced manual effort
• 100% of rules evaluated against PCI and other frameworks
• 100% of changes made outside of defined windows alerted