-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of firewalls (at) securityfocus (dot) com [email concealed]
Sent: Monday, March 17, 2008 5:17 PM
To: security-basics (at) securityfocus (dot) com [email concealed]
Subject: Firewalls management tools
Hi!
Working on multiple firewalls equipments (checkpoint / Fortinet / Netscreen...), I have identified two main subjects to improve our management tasks:
- Improving firewall rules set on the complete firewall pool;
- Mapping network flows :
Being able to list all (authorised) flows between two hosts or subnets;
Being able to quickly find a firewall with a deny rule on an operational flow;
- Track and control device configuration
In order to reach our goal, I have identified the following (-commercial-) products:
- Firewall Analyser (Algosec)
- Skybox assure
- Firemon from secure Passage
- SecureTrack from Tufin
- RedSeal SRM (more wide product but it seems to respond to my primary purpose)
- Firewall manager from Solsoft.
=> Does anyone have a first experience on this kind of product?
=> Do you think it would be better to use several firewall management solutions from each specific vendor?
-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of firewalls (at) securityfocus (dot) com [email concealed]
Sent: Monday, March 17, 2008 5:17 PM
To: security-basics (at) securityfocus (dot) com [email concealed]
Subject: Firewalls management tools
Hi!
Working on multiple firewalls equipments (checkpoint / Fortinet / Netscreen...), I have identified two main subjects to improve our management tasks:
- Improving firewall rules set on the complete firewall pool;
- Mapping network flows :
Being able to list all (authorised) flows between two hosts or subnets;
Being able to quickly find a firewall with a deny rule on an operational flow;
- Track and control device configuration
In order to reach our goal, I have identified the following (-commercial-) products:
- Firewall Analyser (Algosec)
- Skybox assure
- Firemon from secure Passage
- SecureTrack from Tufin
- RedSeal SRM (more wide product but it seems to respond to my primary purpose)
- Firewall manager from Solsoft.
=> Does anyone have a first experience on this kind of product?
=> Do you think it would be better to use several firewall management solutions from each specific vendor?
Thank You!
[ reply ]