Accelerated Firewall Change Automation

FireMon delivers firewall rule automation through Policy Planner, which moves a proposed rule change through validation, approval, and deployment without a manual, step-by-step process at every stage. Every change is checked against compliance and risk policies first, then deployed automatically or handed to an engineer as vendor-specific instructions.

FireMon reduces the risk in firewall rule automation by validating every proposed change against compliance and risk policies before it reaches production. Violations, overly permissive access, and rule conflicts get caught at the request stage, not during an audit or after an incident.

FireMon supports firewall rule automation across multiple vendors through Security Manager's normalization layer, which covers 120+ platforms including Check Point, Cisco, Palo Alto Networks, and Fortinet firewalls, plus major cloud platforms such as AWS. One automated workflow runs across every enforcement point instead of a separate process per console.

FireMon doesn't require replacing manual review all at once to adopt firewall rule automation. Teams can automate validation first, keep manual deployment, and move toward full automation as confidence builds, at whatever pace matches their risk tolerance.

FireMon connects firewall rule automation to the ITSM tools teams already use, including ServiceNow, Jira, HP Service Manager, and Freshworks. A change ticket in any of those systems can trigger and track a rule change without a second system of record.

FireMon customers see significantly faster results after adopting firewall rule automation, shortening the time between request and live deployment to a fraction of the days-or-weeks baseline most manual processes take.

FireMon's approach to firewall rule automation scales down as well as up. Smaller teams can start with automated validation alone, on a smaller device count, and add deployment automation later, so the benefit isn't limited to large enterprises managing hundreds of firewalls.

Workbench is the interface for building and editing change plans within Policy Planner. Engineers can inspect policy rules and objects, design changes manually, and refine automated recommendations. The resulting plan continues through the applicable Policy Planner workflow before implementation.

Workbench must be enabled using an API call with assistance from FireMon Support before it becomes visible in the Policy Planner interface. At general availability, Workbench applies to Access Request tickets. Contact FireMon Support to enable Workbench in your environment.

View documentation

Workbench Agentic AI provides a guided, AI-assisted experience for rule recommendations. When you open a Workbench Change Plan ticket and select Automatic Recommendations, the agentic AI assistant analyzes your environment to identify impacted devices and policies, then generates rule and object change recommendations with names shaped by both device requirements and your existing naming conventions. You can interact with the AI throughout to ask questions about why specific devices were chosen or what would happen with different options.

Nothing happens unattended: engineers review and save the proposed changes, and the plan then proceeds through the applicable assessment and approval workflow before implementation. A FireMon Insights activation is required.

View Documentation