Every day, enterprise network environments become increasingly complex due to the constant introduction of new devices, applications, and cloud services. Manual tools are not sufficient to keep up with the pace, leaving firewall and security policies nearly impossible to manage and open the door to compliance violations and misconfigurations that can lead to unplanned outdates and data breaches. To mitigate these risks, FireMon Security Manager is essential in enabling Palo Alto network users to efficiently manage policies to eliminate policy-related risk, accurately change rules, and meet internal and external compliance requirements.

The FireMon-Palo Alto Networks partnership enables companies to effectively manage the complexity of firewall policies to:

• Reduce policy related risk by finding high-risk vulnerabilities embedded in firewall policies
• Manage firewall rule changes and policies that span Palo Alto and devices from other vendors
• Achieve and maintain compliance of firewall policies with internal and external standards
• Migrate Firewall policy to Palo Alto devices or to the cloud to simplify rule review, cleaning, and staging for migration
• Manage multi-vendor firewall policy by gathering devices and policies across the entire environment with built-in support for over 80 vendors

FireMon complements Palo Alto NGFW by offering real-time risk evaluation, to find high-risk vulnerabilities, and alerts to detect vulnerabilities in the environment.

• Risk and threat modeling evaluates the impact of exploits and displays recommended patches
• Risk guardrails review proposed policy changes to ensure new risks aren’t introduced
• Vulnerability scanner integration give deeper insights to policy-related risks

FireMon gathers rules and policies from every firewall across the environment, including Palo Alto NGFWs and firewalls from other vendors, then stores them in a centralized rule repository. With this customers can:

• Detect new policies and changes to existing policies with real-time change monitoring
• Automate rule change workflows that span the entire rule creation and change process
• Policy change automation recommends rules and can optionally deploy them to devices across the network

Enforce security and compliance across a range of network devices, whether an entire network is 100% Palo Alto NGFWs and Panorama management consoles, or a combination of various vendors. With FireMon, customers can:

• Produce accurate compliance reports in minutes
• Access built-in reports for standards including PCI-DSS, NERC-CIP, NIST, and GDPR
• Identify policy violation in existing rules and catch new ones before they’re deployed
• Automate rule reviews and recertification