If anyone has experience with or has reviewed firewall audit tools, I
would appreciate your input. Such products include RedSeal's SRM,
Skybox's Security Assure or Algosec's Firewall Analyzer.
Dear Texas Fireant
You should take a look at the AlgoSec Firewall Analyzer
(http://www.algosec.com) - it can certainly do a firewall policy
audit for a Check Point/Cisco PIX/Juniper Netscreen firewall,
or for a Cisco router access lists. In addition it does
Change Management and Policy Optimization, plus lots of
other goodies.
If you register on the web site you'll have access to
sample reports and much more.
Avishai
Disclaimer: I created the research prototype of what became the
AlgoSec Firewall Analyzer when I was a researcher at Bell Labs
several years ago, and I've been actively involved with the
technology ever since, so I'm obviously biased.
--
avishai_w
------------------------------------------------------------ ------------
avishai_w's Profile: http://forums.techarena.in/member.php?userid=29462
View this thread: http://forums.techarena.in/showthread.php?t=800862
http://forums.techarena.in
Texas Fireant;3085897 Wrote:
> If anyone has experience with or has reviewed firewall audit tools, I
> would appreciate your input. Such products include RedSeal's SRM,
> Skybox's Security Assure or Algosec's Firewall Analyzer.
Where Skybox and Redseal are concerned, they encompass more than
firewall auditing. Rather they provide an overall threat model of the
network and systems attached to it.
We evaluated both Skybox and Redseal for at least a year. We chose
Redseal and have had it in place for six months or so now.
We ingest Checkpoint, Cisco PIX/ASA, Foundry ACL, Cisco ACL, and Nessus
data on about 3000 hosts.
We use the product to look at the overall threat from both internal and
external risks.
Shoot me a PM, I would be happy to provide more detail offline.
John Penrod
CISO
The Weather Channel
--
penrod
------------------------------------------------------------ ------------
penrod's Profile: http://forums.techarena.in/member.php?userid=29541
View this thread: http://forums.techarena.in/showthread.php?t=800862
http://forums.techarena.in