AlgoSec Firewall Analyzer
Intelligent Firewall Policy Audit and Analysis
AlgoSec Firewall Analyzer (AFA) is a policy audit and analysis solution that helps security and operations teams manage firewalls and network security devices more effectively. AFA supports all major firewall vendors, and intelligently automates the labor-intensive and error-prone tasks associated with firewall operations, auditing and risk analysis.
By providing control over today's most complex security policies - across both physical and hypervisor-level firewalls - AFA increases operational efficiency, ensures compliance and improves security.
-
Features

-
Specifications

Firewall OperationsChange MonitoringAFA monitors all changes to the network security policy in real-time and creates detailed firewall audit reports. Network administrators can opt to receive email notifications of unauthorized or risky changes. Using the AlgoSec Extension Framework (AEF), AFA can monitor changes in a wide variety of devices including routers, switches, load balancers and proxies.
Network Topology IntelligenceAFA analyzes routing tables and automatically detects all interfaces, subnets and zones, allowing operations team to run powerful traffic queries. ("Which firewalls and rules are blocking traffic from point A to point B?"). Additionally, AFA generates a dynamic, interactive network map* to help visualize and analyze complex networks. * Topology map available Q1 2012 |
| View Demo (2:36) View Demo (2:43) |
Policy Optimization and CleanupAFA provides the richest set of recommendations for optimizing and cleaning up cluttered policies.
| View Demo (2:40) |
Risk AnalysisAFA instantly discovers and prioritizes all risks and potentially risky rules in the firewall policy by drawing on its knowledgebase. AFA provides the largest risk knowledgebase available, including industry regulations, best practices, and customizable corporate security policies. AFA also assigns and tracks a security rating for each device and group of devices, allowing organizations to quickly pinpoint devices that require attention, and measure the effectiveness of the security policy over time. | View Demo (2:47) |
Auditing and ComplianceAFA generates automatically populated compliance reports for industry regulations, including PCI-DSS, SOX, NERC and ISO. These detailed reports easily demonstrate firewall compliance. If the network security policy does not adhere to regulatory or corporate standards, the reports identify the exact rules and devices that cause gaps in compliance. |
| View Demo (2:29) |
Supported Devices
Check Point | FireWall-1®, Provider-1®, SmartCenter | v3.0 and up |
| VSX | All versions | |
| Security Gateway VE | All versions | |
Cisco | PIX, ASA Series | v4.4 and up |
| Firewall Services Module (FWSM) | v1.0 and up | |
| Cisco Router Access Control Lists | All versions | |
| Cisco Layer-3 Switches | All versions | |
Juniper | NetScreen Series | v5.0 and up |
| Network and Security Manager (NSM) | v2008.1 and up | |
| SRX Series | All Versions | |
Fortinet | Fortigate | FortOS 3.x and up, including VDOM |
| FortiManager | v4.x | |
Supported Devices for Change Monitoring*
BlueCoat | Proxy Server and WebFilter | |
F5 | Big-IP Family | |
Juniper | Secure Access SSL VPN | |
Linux | Netfilter/Iptables | |
McAfee | Sidewinder | |
Stonesoft | StoneGate | |
Palo Alto Networks | PA Series | |
* Additional devices can be added via the AlgoSec Extension Framework. | ||
System Requirements
The AlgoSec Security Management Suite can be delivered as software only, or preloaded on a virtual or physical appliance.
Physical appliances can be deployed in high-availability mode and support load-sharing for increased scalability.
Software | Memory | 2GB |
| CPU | 3Ghz | |
| Storage | 300 GB (2GB and additional 50MB per report) | |
| Operating System | Red Hat Enterprise Linux v4/v5 CentOS 4 - 5 Microsoft Windows 2000/XP/Vista (VMware) | |
| Browser | Internet Explorer 7.0 or higher Firefox 3.0 or higher | |
Virtual Appliance | VMware virtual appliance can run on a hosting Windows server with 1GB of RAM (2GB RAM or more is recommended). | |
AlgoSec Appliance | AlgoSec 1020 – low cost entry level, best for up to 150 firewalls AlgoSec 1080 – High-performance, best for up to 1000 firewalls AlgoSec 1160 – Enterprise level, best for up to 2000 firewalls | |





