AlgoSec FireFlow


AlgoSec FireFlow intelligently automates the security policy change workflow, reducing the time required to process firewall changes by 60%, increasing accuracy and accountability, enforcing compliance and mitigating risk. FireFlow helps align operations and security teams by automating the entire change lifecycle—from submission and design to risk analysis, implementation, validation and audit. FireFlow supports traditional and next-generation firewalls, as well secure web gateways. It seamlessly integrates with existing service desk ticketing systems and can be easily customized to match each organization’s specific business processes to help:

  • Significantly reduce the time required to process change requests.
  • Improve accuracy of processed changes.
  • Simplify auditing and ensure compliance and corporate governance.

 

  • Features
  • Specifications

Automated and Customizable Workflows

FireFlow adds intelligent automation to the security policy change workflow. Out-of-the-box workflows are included for:
  • Adding new rules
  • Removing rules
  • Changing objects
  • Recertifying rules
In addition, a visual workflow editor allows organizations to tailor workflows to their specific requirements, and create request templates that save time and improve communication and clarity between requestors and firewall administrators.

 

AlgoSec FireFlow Automated and Customizable Workflows

View Demo (3:01)


Proactive Risk and Compliance

To ensure compliance with regulatory and corporate standards, FireFlow analyzes each change before it is implemented and provides detailed information to approvers on any changes in risk or compliance levels.

FireFlow draws on the broadest risk knowledgebase, which includes industry best practices, regulations such as PCI-DSS and SOX and customized corporate policies.

 

AlgoSec FireFlow Proactive Risk and Compliance

View Demo (1:56)


Network Topology and Design Intelligence

Leveraging topology-aware algorithms, FireFlow detects unneeded ("already works") changes and notifies requestors. Required changes are designed in the most secure and optimal way and include all relevant devices and rules to add, delete or edit.

 

Click to Enlarge Image


Automated Policy Push

FireFlow's unique ActiveChange™ technology

can automatically implement recommended policy changes on Check Point devices, saving time and avoiding manual errors. 

In Cisco environments, FireFlow can automatically translate change requests to Cisco CLI commands for a faster and more accurate implementation.

 

Click to Enlarge Image


Auto-Validation and Reconciliation

FireFlow validates that change requests have actually been implemented on the network, preventing pre-mature closing of tickets. Additionally, to prevent unauthorized changes, all detected policy changes are automatically matched to request tickets and mismatches are reported.

 

Click to Enlarge Image


Audit-Ready Reports

Detailed reports track the entire change lifecycle, providing SLA metrics and greatly simplifying auditing and compliance processes.

 

Click to Enlarge Image


Automated Change Workflow for Secure Web Gateways

FireFlow seamlessly integrates with Blue Coat ProxySG to simplify and expedite the security policy change request workflow -- from end-user request initiation, design and review to work order generation. Organizations can now manage and audit security policy changes of multiple security devices under one common platform.

 

Click to Watch (2:56)


CMS Integration

AlgoSec FireFlow complements existing change management systems with intelligent automation that enables IT to process firewall changes more quickly and with less risk. FireFlow supports change management systems such as:
 

  • BMC Remedy
  • HP Service Manager
  • CA Service Desk Manager
  • Home-grown systems

 
Through seamless integration with these change management systems, AlgoSec FireFlow eliminates the need for opening and tracking change requests in multiple systems.

 

Integration with HP Service Manager

Watch Integration with HP Service Manager (3:12)

Integration with BMC Remedy

Watch Integration with BMC Remedy (3:52)


SLA Tracking

FireFlow measures every step of the change workflow, enabling organizations to demonstrate they are meeting Service Level Agreements (SLAs), identifying potential bottlenecks and pinpointing change requests that require special attention.

Click to Enlarge Image

Supported Devices

Check Point

FireWall-1®, Provider-1®, SmartCenterv3.0 and up, NG, NGX, Software Blade Architecture (R7x) – including Application and Identity Awareness Software Blades
VSX All versions
Security Gateway VEAll versions

Cisco

PIX, ASA Seriesv4.4 and up
Firewall Services Module (FWSM)v1.0 and up
IOS Routers & SwitchesAll versions
Cisco Layer-3 SwitchesNexus Routers - All versions
Cisco Security Managerv4.3

Juniper

NetScreen Seriesv5.0 and up
Network and Security Manager (NSM)v2008.1 and up
SRX SeriesAll versions

Fortinet

FortigateFortOS 3.x and up, including  VDOM
FortiManagerv4.x

Palo Alto Networks

 PAN-OSV4.X and up

McAfee

Firewall Enterprise (formerly Sidewinder)V7.x and up

 Blue Coat

 Proxy SG  V5.x

 

Supported Devices for Change Monitoring*

F5

Big-IP Family

Juniper

Secure Access SSL VPN

Linux

Netfilter/Iptables

Cisco

Ace

WacthGuard

XTM

* Additional devices can be added via the AlgoSec Extension Framework.

System Requirements

The AlgoSec Security Management Suite can be delivered as software only, or preloaded on a virtual or physical appliance.

Physical appliances can be deployed in high-availability mode and support load-sharing for increased scalability.

Software

Memory2GB
CPU3Ghz
Storage300 GB
 (2GB and additional 50MB per report)
Operating SystemRed Hat Enterprise
Linux v4/v5
CentOS 4 - 5
Microsoft Windows
2000/XP/Vista (VMware)
BrowserInternet Explorer 7.0 or higher
Firefox 3.0 or higher

Virtual Appliance

VMware virtual appliance can run on a hosting Windows server with 1GB of RAM (2GB RAM or more is recommended).

AlgoSec Appliance

AlgoSec 1020 – low cost entry level, best for up to 150 firewalls
AlgoSec 1080 – High-performance, best for up to 1000 firewalls
AlgoSec 1160 – Enterprise level, best for up to 2000 firewalls

*The number of firewalls supported by each appliance may vary according to policy complexity and the amount of logs collected.


Want to Learn More? Take the Next Step

Hear from our Customers Try it Today! Watch a Demo Learn about out Money-Back Guarantee