Enterprise network environments are getting more and more complex every day with a steady stream of new devices, applications, and cloud services. Manual tools can’t keep pace, leaving firewall and security policies nearly impossible to manage and open the door to compliance violations and misconfigurations that can lead to unplanned outages and data breaches. FireMon Security Manager is an essential tool for Zscaler users to effectively manage policies to eliminate policy-related risk, accurately change rules, and meet internal and external compliance requirements.

The FireMon-Zscaler partnership enables companies to effectively manage the complexity of firewall policies to:

• Reduce policy related risk by finding high-risk vulnerabilities embedded in firewall policies
• Manage firewall rule changes and policies that span Zscaler and devices from other vendors
• Achieve and maintain compliance of firewall policies with internal and external standards
• Migrate Firewall policy to Zscaler devices to simplify rule review, cleaning, and staging for migration
• Manage multi-vendor firewall policy by gathering devices and policies across the entire environment with built-in support for over 80 vendors
• Centralize, normalize, and enforce network security policies across the entire hybrid estate, including firewalls, cloud security groups, and Secure Access Service Edge (SASE) platforms

FireMon complements Fortinet FortiManager by offering real-time risk evaluation, to find high-risk vulnerabilities, and alerts to detect vulnerabilities in the environment.

• Risk and threat modeling evaluates the impact of exploits and displays recommended patches
• Risk guardrails review proposed policy changes to ensure new risks aren’t introduced
• Vulnerability scanner integration give deeper insights to policy-related risks

FireMon gathers rules and policies from every firewall across the environment and stores them in a centralized rule repository. With this customers can:

• Detect new policies and changes to existing policies with real-time change monitoring
• Automate rule change workflows that span the entire rule creation and change process
• Policy change automation recommends rules and can optionally deploy them to devices across the network

Enforce security and compliance across a range of network devices, whether an entire network is 100% FortiGate and FortiManager devices, or a combination of various vendors. With FireMon, customers can:

• Produce accurate compliance reports in minutes
• Access built-in reports for standards including PCI-DSS, NERC-CIP, NIST, and GDPR
• Identify policy violation in existing rules and catch new ones before they’re deployed
• Automate rule reviews and recertification