Automate workflows to review and recertify existing firewall and cloud security group rules.
The Policy Optimizer module for Policy Manager provides automatic workflow management to review then recertify or decertify existing firewall rules in accordance with compliance, business, or security policies. Using event-based triggers or search query results generated within Policy Manager, Policy Optimizer automatically creates then sends tickets to policy owners to take action.
Flexible workflows that can be adapted to nearly any business process.
Allow each rule owner to select how each rule should be processed.
Detailed information automatically created and stored to track all events for audit compliance.
Complete suite of tools to manage the entire policy recertification process.
Automate rule recertification workflows to review and then recertify or decertify existing firewall rules, ensuring continuous compliance with external regulations and internal business policies.
FireMon Policy Optimizer is an add-on module for Policy Manager that automates the review, recertification, and cleanup of existing firewall and cloud security rules. It helps ensure policies stay current, compliant, and aligned with business needs.
Policy Optimizer improves compliance by enforcing periodic rule reviews, automating PCI DSS 1.1.7 requirements, and maintaining tamper-proof audit trails. It ensures existing rules are regularly evaluated and recertified or decommissioned as needed.
Yes, Policy Optimizer automates rule recertification workflows by generating and routing review tickets based on events like expiration, inactivity, or compliance violations. It assigns tickets to rule owners and tracks progress from start to resolution.
Policy Optimizer reduces risk by identifying and targeting overly permissive, expired, or unused rules. By removing outdated access, it reduces the threat surface and prevents vulnerabilities from lingering unnoticed.
When a rule is flagged during recertification, Policy Optimizer allows owners to decertify or revise it. If integrated with Policy Planner, decertified rules can be automatically decommissioned through a secure, auditable workflow.
Yes. Policy Optimizer features flexible, customizable workflows that support any review cadence or escalation path. It integrates with business process management tools and allows custom forms, permissions, and rule treatment options.
Absolutely. Policy Optimizer creates a complete audit trail for each rule review, capturing reviewer details, timestamps, decisions, and supporting documentation for compliance and audit readiness.
Policy Optimizer can trigger reviews based on scheduled intervals, rule expiration, inactivity, control failures, or compliance violations. It also supports manual reviews initiated through Policy Manager search queries.
EN 
