Firewall Security Compliance
As the first and continued line of defense, enterprise firewalls are increasingly becoming subject to industry regulations and internal corporate security standards. To maintain compliance with regulations is an increasingly difficult and time consuming task as an enterprise's rule base continuously grows in size and complexity.
The AlgoSec Firewall Analyzer (AFA) automates the task of auditing an enterprise's firewalls to meet compliance requirements, both industry regulations and corporate security policies. The AFA's continuous audit not only dramatically reduces the time needed for security auditing, it removes potential human error.
In addition to providing detailed change history tracking, AlgoSec offers automatically completed compliance reports out-of-the-box for:
- Payment Card Industry Data Security Standard (PCI DSS)
- ISO 27001
- The Sarbanes-Oxley Act (SOX)
- Japan's Financial Instruments and Exchange Law (J-SOX)
These turnkey reports are automatically generated and ready to hand over to an auditor.
AlgoSec's advanced management capabilities and processes also enable compliance with additional industry regulations, including:
- The Basel Capital Accord (Basel II)
- Federal Information Security Management Act (FISMA)
- Information Assurance Vulnerability Alert (IAVA)
- NIST 800-41
- HIPAA
- Cyber Security Standards (CIP)
AlgoSec Firewall Analyzer (AFA) does this by generating reports which can be used to test the effectiveness of firewall security compliance related IT processes.
In addition, for federal agencies that look for compliance with FISMA (NIST special publication 800-53, see http://csrc.nist.gov/sec-cert/) the AlgoSec Firewall Analyzer helps you meet articles AC-17 (Remote Access), AU-1,2,3,6,7 (Audit), CA-2 (Security Assessments) CM-1,2,3,4 (Configuration Management), and possibly other articles as well, depending on the frequency of use of the firewall analyzer. The CM family articles in particular benefit from FA’s ability to track firewall rule changes that were made between one report and the next.
|
