Policy Control Across Network Firewalls and Akamai Guardicore Segmentation

Shared governance. Informed access decisions. Supporting evidence.

Effective microsegmentation depends on understanding access at both the network and workload layers. Security teams need to know what each layer permits, whether segmentation policy is actively enforced, and how access aligns with business requirements.

FireMon brings supported Akamai Guardicore policy alongside enterprise firewall policy, helping teams review access, assess segmentation requirements, and retain evidence while Guardicore maintains enforcement.

Segmentation Decisions Need Network Context

An application depends on permissions across network firewalls and workload controls. Guardicore’s label-based rules express access in business context, but separate policy views make it harder to validate that access across the environment.

Security teams need to answer critical questions:

• What access do network firewall and Guardicore policies permit?
• Which segmentation policies are visibility-only, and which actively enforce blocking?
• Do permissions still match the application’s role and business requirements?
• Where do broad permissions need further investigation?
• What evidence supports the decision to retain or change access?

As application roles, labels, and access requirements change, teams need a shared governance process across both layers.

How Security Teams Manage Guardicore and Firewall Policy Together

Security teams manage Akamai Guardicore segmentation policy alongside network firewall policy by reviewing both layers in one governance process: normalized rules and labels, simulated access paths, and shared evidence for every access decision.

FireMon ingests supported Guardicore policy and available rule telemetry, then normalizes label-based rules for search, compliance assessment, and recertification workflows supported by the deployment.

For access analysis, FireMon delivers network policy visibility by stitching together the firewall path with the Guardicore policy evaluated at the destination workload. By comparing the endpoint's Guardicore policy against the associated firewall policy along the simulated path, users can determine whether a flow is effectively able to reach its destination, within the supported analysis scope.

This gives teams context to review:

• Guardicore rules and application labels
• Related network firewall permissions
• Blocking versus visibility-only policy
• Available rule telemetry and assessment findings

Guardicore retains segmentation enforcement. Teams implement approved changes through their native management processes; policy collection does not imply FireMon write-back.

What FireMon Adds

Integration availability, supported versions, licensing, required device packs, telemetry, and workflow support depend on the deployment. Confirm the intended scope with FireMon and Akamai technical teams.

Bring a representative Akamai Guardicore scenario to a FireMon demonstration. See how your team can review policy across network and workload layers, investigate findings, and define the supported workflow for your environment.