New FireMon Agentic AI Redefines Network Security Policy Management

LENEXA, Kansas, 27 October – FireMon, the leader in network security policy management and the security policy control plane for the modern enterprise, today announced FireMon Agentic AI, changing how enterprises investigate network access, make policy decisions and prepare security changes. Built into FireMon’s award-winning network security management solutions, the new agentic AI capabilities make agents first-class citizens alongside practitioners, putting them to work on complex, multi-step tasks using the policy data, context and tools practitioners already trust. Customers can use FireMon’s supplied agents, create their own, or connect external agentic workflows through the FireMon MCP Server.

Network security teams face a growing volume of policy decisions across firewall vendors, cloud environments and segmentation technologies. A single business access request can span multiple devices and policies, with several technically valid ways to implement it. Engineers must gather the facts, evaluate the alternatives and coordinate the proposed changes before anyone can approve them. As the business demands faster decisions, manual coordination consumes expertise and slows delivery.

FireMon Agentic AI changes that process. Agents carry out the investigation and planning steps, assemble relevant evidence and prepare recommendations within their assigned scope. Practitioners direct the work and make the choices that require organisational judgement. The shift gives teams more capacity to address policy complexity and respond to business needs, while keeping authority over access and changes with the organisation.

“Network security has never been more complex, and the answer isn’t more infrastructure. It’s putting the policy context FireMon has built over 25 years to work,” said Jody Brazil, founder and CEO of FireMon. “Customers can deploy our agents, build their own, and connect FireMon to their broader agentic workflows, while practitioners keep the calls that need human judgement.”

A new way to put policy intelligence to work

Agents are built at the centre of FireMon’s Agentic AI approach. They operate with assigned instructions, skills, tools and permissions, drawing on the policy information and operational expertise at the core of FireMon’s Network Security Policy Control for the Modern Enterprise. That foundation combines the context needed to understand a request with tools that perform the work, from searching policy records and discovering traffic paths to computing recommendations and preparing Policy Plan changes.

Customers can adapt FireMon Agentic AI to their own operations in three ways. They can start with supplied FireMon agents, customise those agents or build new ones inside FireMon, and connect external agentic workflows through Model Context Protocol (MCP). This puts customers in control of the work they automate and the way it fits their processes, with value that reaches beyond the initial agent examples.

Faster decisions and less manual coordination

The agents supplied with the platform demonstrate how that foundation changes day-to-day network security work, saving thousands of hours while increasing the accuracy of network security policy decisions.

• Investigate policy without writing queries. The FireMon Intelligent Agent searches and analyses policy data, constructs and runs Security Intelligence Query Language (SiQL) queries, and explains the findings. Practitioners can ask which rules allow access to a service and examine the relevant policy context without manually assembling searches.
• Turn business access needs into actionable recommendations. The Network Designer Agent analyses an access requirement and produces firewall policy recommendations. For an application that needs HTTPS access to a reporting service, it identifies recommended changes for the practitioner to evaluate, reducing the investigation required before deciding how to provide access.
• Prepare coordinated changes across devices and policies. The Policy Change Designer Agent carries an access request through discovery, recommendations and preparation of Policy Plan changes. It fills required fields such as rule names and pauses when a practitioner must choose among valid alternatives. Nothing is saved until review and acceptance; the user can discard the proposal or request revisions. Acceptance saves the proposed work for the workflow, rather than automatically deploying it to firewalls.

These examples address a practical barrier to policy automation. More than one policy may satisfy an access request, and an object name that is technically valid may not fit the organisation’s conventions. FireMon combines policy context, agent instructions and specialised tools to prepare work that reflects those requirements and to bring consequential choices to the practitioner.

Connect FireMon to external agentic workflows

The FireMon MCP Server makes selected policy data and supported operations available to external agents. An incident investigation workflow can combine alert information with FireMon policy evidence. An access workflow can discover relevant devices and policies, compute recommendations and prepare changes without requiring a practitioner to gather and transfer the information manually.

MCP supports both retrieval and change preparation. Authorised workflows can convert selected recommendations into staged Policy Plan changes and save them into the FireMon workflow. The external application directs the interaction and interprets the results, with access controlled through roles and credentials. This connects FireMon’s network security intelligence to the broader workflows customers are building.

Customer choice and operational control

Customers define agent instructions, assign skills and tools, and scope permissions to appropriate device groups. They can choose a supported large language model, including their own approved model environment. AI enablement is optional and off by default, with access controls and an audit trail supporting accountability. Practitioners retain authority at the decision and approval points in the supported workflow.

Availability

The FireMon agentic AI platform and FireMon MCP Server will be available in November. The initial offer carries no additional FireMon charge. For more information about FireMon’s agentic AI capabilities, or to see the platform in action, visit FireMon’s Agentic AI Launch Blog. Customers can also sign up for our Agentic AI Platform launch webinar to learn about the new capabilities.

About FireMon

FireMon founded the network security policy management category more than two decades ago, built on a simple premise: policy, not any mix of firewalls or consoles, should govern network security. That premise holds today. Firewalls, cloud security groups and segmentation platforms execute policy; none of them govern it. FireMon is the control plane that sits above every vendor and every environment, on-prem, cloud and hybrid, so enterprises can see, prove and safely change policy from one place instead of reconciling it console by console. We care about the people running it: audits measured in minutes instead of weeks, and changes made with confidence instead of a midnight call-out. No fluff. No empty dashboards. Just results that hold up.