Firewall Policy Optimizer

Introducing FireMon Policy Optimizer

FireMon’s Policy Optimizer Module automates key elements of the process necessary to adapt network security device policies to respond to changing conditions. Policy Optimizer dramatically advances the identification and improvement of troublesome firewall configurations in relation to emerging threats, evolving business demands and maturing compliance requirements, providing a centralized workflow allowing security teams to interact directly with other network access stakeholders, with integrated risk analysis.

Policy Optimizer supports complex, heterogeneous networks containing multiple firewall vendor technologies. The workflow is customizable to meet the needs of any organization. And with RESTful API’s exposed, integration into existing change management systems is natively supported.

Policy Optimization Process Management

Transform security infrastructure management by automating the change review process, from rule analysis to policy modification, as well as recertification and documentation.

Rule Recertification & Review

Analyze firewall policies to clean-up and optimize firewall configurations to improve security, manageability and performance. Key features include:

Rule Review

Examine all rule sets applied within your existing firewall policies to continually assess and improve network enforcement.

LEARN MORE »

Multi-Factor Rule Review

Analyze every aspect of rule review, driven by real-world events, to identify control failures, understand usage and apply best practices for improving or removing access, when possible.

Rule Recertification

Utilize a closed-loop workflow to ensure that network security compliance requirements are being met and advance the process of periodic rules recertification for standards including PCI DSS.

Process

Continuous monitoring of all devices for any change to the configuration or policy. Understand what changed, when it changed, why it changed and the impacts of the change. Full change management solution including:

Intelligent Policy Editing

Leverage a wide array of powerful tools to automate policy identification, analysis and editing, including dynamic search capabilities built around the proprietary FireMon Security Intelligence Query Language (SIQL) enabling full-scope evaluation, review and testing of device configurations.

Event-Driven Rule Analysis

Automatically identify those policies and rules that demand immediate analysis driven by real-world events, including time-frame expiration, critical security control failure, periodic review or ad-hoc query; complemented by manual routing.

Customized Workflow

Easily change the built-in workflow to meet your custom needs. Because it is built on BPMN 2.0 task types, including forks, parallel paths, timers and notifications, you can build a workflow specific to your environment.

Whitelist

Review effectiveness and correctness of enforced policies on firewalls to identify gaps in protection and inconsistencies in configurations as well as enforce internal access controls.

3rd-Party Integration

Integrate with existing change management systems seamlessly. Policy Planner supports many integration options and connection points throughout the change process. Supported change management systems include:

HP Service Manager
BMC Remedy
Service Now
Proprietary Systems

To learn more about Policy Optimizer, participate in an in-depth demonstration or sign up for a free 30-day trial to test its capabilities in your own unique environment, click here.

"FireMon is the best thing that has happened to firewalls and the network security market since inception. We can’t imagine a day without having FireMon in our customer networks."

Associate Vice President, Spire Solutions

"[FireMon provides] ease of use through a device centric approach. Discovery can be accomplished through a high level report template or low level markup language. [FireMon is] very powerful and easy to use."

Information Security Solution Engineer, CVS Caremark

"The FireMon Security Manager Training was very helpful with my day-to-day operational tasks and the instructors provided a lot of best practices configuration tips. Overall, I would recommend this class to the rest of my colleagues."

Stacy V., Large financial institution in Southern California

“After we cleaned up our firewalls, the time it takes to add new rules is drastically reduced. We should have done this years ago. Very grateful for this solution!”

Anonymous, FireMon

“I feel like we’ve taken our firewall processes from ad-hoc to CMM level 5 with FireMon. Changes are planned and repeatable and we have a process to get the old rules out.”