FIREMON
Policy Manager
Consolidated ground to cloud firewall policy management
Avoid the Headache of Network Security Management Complexity
The increasing complexity of networks, driven by the constant influx of cloud services, new devices, and applications, presents a daunting challenge for managing firewall policies and rules. A typical enterprise environment requires a robust firewall security manager to handle millions of rules, as lack of complete visibility leading to just one simple misconfiguration can have devastating consequences, like compliance violations, outages, and data breaches.
Firewall Security Manager Built for Enterprise Environments
FireMon Policy Manager is a purpose-built network security policy management (NSPM) platform that automates the management of firewall and cloud security policies to increase visibility, eliminate policy-related risk, accurately and quickly change rules, and meet internal and external compliance requirements.
- Increase Visibility: Eliminate blind spots with a network security manager that gives a complete view of all firewall policies across the entire environment
- Reduce Risk: Remediate policy-related vulnerabilities with real-time visibility and control
- Manage Change: Avoid misconfigurations, accelerate business, and improve security
- Enforce and Maintain Compliance: Avoid violations, avoid risk, and avoid fines
Enhance Posture with FireMon Policy Management
FireMon Policy Manager is a firewall security manager that enhances visibility, streamlines policy management, and automates compliance — providing powerful tools to simplify security operations and strengthen network defenses.
Real-Time Inventory of Devices and Rules
FireMon’s Policy Manager platform creates a centralized rule repository that automatically imports information that translates into a common, normalized rulebase, providing a comprehensive view of an organization’s security posture.
- Real-time single source of policy information
- Automatically identifies and imports information into a consolidated rule repository
- Support for over 80 vendors and versions for network policy normalization
Search Across the Entire Environment
FireMon’s proprietary Security Intelligence Query Language (SiQL) enables fast and customizable search of network policies across various elements in the platform, including workflows and users, allowing searches of policies across their environment from a single console.
- Less than 10 seconds to return real-time results
- Fully customizable
- Powers customizable controls and rule review criteria
Consolidated Compliance and Risk Assessments
The unmatched reporting capabilities of FireMon’s firewall security manager offers over 20 preconfigured compliance and assessment reports that can be customized, as well as access path analysis and “what if” attack assessments, with the option to integrate vulnerability scanner and risk/threat modeling for enhanced security.
- Over 500 preconfigured criteria checks
- Unified dashboard for an overall view of risk and compliance using FireMon’s Security Concern Index
- Vulnerability integrations including Qualys, Rapid7, and Tenable give deeper insights to policy-related risks
Simplify Rule Creation and Updates
FireMon’s rule management tools simplify rule creation and updates by providing detailed recommendations on device changes needed to deploy new or update existing rules. By integrating with leading ITSM systems, this allows for automatic or manual changes during approved change windows, while evaluating them for risk and compliance violations before deployment.
- Workflows with intelligent rule recommendations
- Automatic rule evaluation tests for violations and risk before it’s deployed
- Make changes yourself or use FireMon’s optional automatic rule deployment
Rule Review and Recertification
FireMon’s firewall rule lifecycle management feature offers automated workflows for regular rule assessments, sends rule review emails to policy owners triggered by SiQL searches or periodic reviews, and allows recertification or decertification of the rule with flexible workflows that track all information needed for compliance audits.
- Event-based triggers and customizable workflows assign and notify owners of relevant policy violations and rule reviews
- Centralized audit tracking records all actions taken on a rule providing accurate compliance reporting
- Customizable rule treatment options allow for rule certification, decertification, or decommissioning, with option to automate decommissioning with our Change Management add-on
API-First for Maximum Integration Flexibility
FireMon’s API-based integrations with various security vendors like IBM, Rapid 7, AWS and Azure, along with our API-first approach that exposes all platform elements and functionality via Swagger-based APIs, significantly reduce the need for professional services to set up our platform in your environment.
- Native and API-based integration with security vendors in the SIEM, SOAR, vulnerability detection, cloud, DevOps, ITSM, SASE, SD-WAN, networking, and endpoint categories
- API-first approach exposes platform element and functionality via Swagger-based APIs
Architecture Built for Scale
FireMon’s Policy Manager is designed for complex enterprise environments achieved through a distributed architecture that separates the application, database, and data collectors on separate servers for seamless scalability.
- Purpose-built to address the needs of the most complex and demanding enterprise environments
- Every release certified to support 15,000 devices and 25 million rules
- Sub-10 second response times for search and report generation
Policy Manager Features at a Glance
Policy Manager Base
Change Management Add-on
Rule Recertification Add-on
Vulnerability Management Add-on
Centralized rule repository
Multi-vendor rule normalization
Rule usage summary
Security Concern Index to measure risk over time
Control failure summary
Vulnerability assessment
Change history and documentation
SiQL Search
Preconfigured assessments
Customizable reporting
Preconfigured controls
Customizable controls
Access Path Analysis
What-if attack scenario simulations
Vulnerability scanner integration, including Qualys and Rapid7
Customizable rule creation/change workflows
Intelligent rule design recommendations
Pre-deployment compliance/risk assessments
Automatic rule deployment to devices
Customizable rule review workflows
Event-driven review triggers
ITSM integration; including ServiceNow
SIEM integration
SOAR integration
Swagger-based API integration
Learn More About Firewall Security Management
-
BlogAsset Discovery: A Must Have for Understanding Your Complete Attack SurfaceCyber Asset ManagementAsset Discovery: A Must Have for Understanding Your Complete Attack Surface
-
BlogA Paramedic’s Top 2 Tips for Cloud Incident ResponseCloud Defense
A Paramedic’s Top 2 Tips for Cloud Incident Response
-
BlogA Practical History of the Firewall – Part 1: Early DaysFirewallA Practical History of the Firewall – Part 1: Early Days
-
BlogAdvanced Techniques for Defending AWS ExternalID and Cross-Account AssumeRole AccessCloud Center of Excellence
Advanced Techniques for Defending AWS ExternalID and Cross-Account AssumeRole Access
Frequently asked questions
What Are the Key Benefits of Using a Firewall Security Manager?
A firewall security manager simplifies policy management, improves visibility, reduces the risk of misconfigurations, automates compliance reporting, and accelerates rule changes. It supports multi-vendor environments, maintains consistent security postures, and helps organizations enforce policies effectively while minimizing vulnerabilities and meeting compliance requirements.
What Key Features Should I Look for in a Firewall Management Tool?
Key features include centralized policy visibility, automated rule analysis, compliance reporting, risk simulations, and flexible workflows. A strong firewall management tool should also offer multi-vendor compatibility, integration with ITSM and vulnerability scanners, scalable architecture, real-time search, and lifecycle management to enhance security and streamline operations.
How Does A Policy Manager Solution Support Network Security Compliance?
A compliance security manager helps maintain regulatory compliance by automating assessments, generating detailed audit reports, and detecting policy violations in real time. It simplifies risk analysis, enforces consistent policies, and integrates with vulnerability scanners to strengthen security posture and streamline compliance management across complex networks.
Can FireMon Security Manager Handle Multi-Vendor Environments?
Yes, FireMon Security Manager is designed to support multi-vendor environments, offering seamless integration with over 80 vendors and platforms. Its robust capabilities enable centralized management, policy normalization, and compliance reporting across diverse infrastructures, ensuring consistent security and streamlined operations regardless of the vendor ecosystem.