AlgoSec Firewall Analyzer
The AlgoSec Firewall Analyzer (AFA) is comprehensive, multi-vendor policy management solution -- with exclusive topology-aware technology -- that intelligently automates analysis of your firewall, router and VPN infrastructure. AlgoSec Firewall Analyzer is a unique solution that helps you achieve the following:
The AlgoSec Firewall Analyzer also comes with flexible deployment options and customization capabilities that makes deployment easy and tailored to your specific needs and environment. And a variety of licensing options makes it easy to chose the solution that best fits your needs.
Eliminate Risks
Analyzing complex firewall policies manually is time consuming and requires understanding of all possible options and combinations. As a result, many risks are not detected and impose a threat to the organization's security.
The AlgoSec Firewall Analyzer provides in-depth, intelligent analysis of the entire security policy leveraging unique algorithms that factor in network topology, all possible traffic variations and industry best practices resulting in a comprehensive identification of risks (and the specific rules that are causing them) and detailed and precise remediation guidance. This includes the ability to analyze several firewalls together -- taking into account their relative hierarchy in the network -- and presenting results in a single report, enabling more efficient and accurate risk management for groups of firewalls.
Ensure Compliance
As the first and continued line of defense, perimeter security devices such as firewalls are increasingly becoming subject to industry regulations and internal corporate security standards. This means that you are probably spending too much time, resources and budget preparing for, and conducting, periodic compliance audits.
The AlgoSec Firewall Analyzer automates the task of auditing your enterprise's firewalls to meet compliance requirements, both industry regulations and corporate security policies, saving you time and money. AlgoSec provides the broadest range of automated compliance audits against regulations and standards, including PCI DSS, Basel II, Sarbanes-Oxley (SOX), J-SOX, NERC CIP, and ISO 27001 and includes a powerful and intuitive Risk Editor that enables you to easily build, edit and customize risk profiles to align audits with your internal corporate security policy.
The AlgoSec Firewall Analyzer also helps you stay in compliance with automated and continuous audits. This dramatically reduces the time needed for security auditing and removes the potential for human error. Simply define the schedule for analysis and the AlgoSec Firewall Analyzer will automatically perform analysis according to your defined triggers and e-mail the results to all relevant people upon completion.
Optimize Your Security Policy
Firewalls work more efficiently and are easier to manage when the policies are uncluttered and free of unused rules and objects. AlgoSec Firewall Analyzer provides you with the ability to optimize policies in an easy and safe way. Using the AlgoSec Firewall Analyzer you will be able to quickly identify the following types of clutter in your policy:
- Unused Rules – rules that are unused according to actual traffic / logs
- Covered Rules – rules that are covered by previous rules (and will never be used)
- Disabled rules
- Unused objects
- Expired rules
Through automatic audit and assessment of your entire rule base AlgoSec provides action-able information to help you optimize your policy, ensuring the best performance and security posture. In addition, a unique Intelligent Policy Tuner enables tightening of overly permissive rules, further reducing risk.
Effectively Manage Change
Today's constant demand for application and infrastructure changes poses a significant risk of compromising security in the process, and exposes organizations to new risks they might not even know about. That's why an ad hoc approach to change management is not recommended.
The AlgoSec Firewall Analyzer provides complete visibility into how devices are configured and when changes are made, with automatic, real-time alerting to administrators and stakeholders when changes occur. AFA also keeps a complete log of change history for future reference. With the AFA, the change process becomes more efficient, safer and easier to control. The AlgoSec Firewall Analyzer combined with AlgoSec FireFlow provides an end-to-end Network Security Lifecycle Management solution that automates the change process from request to audit.
Multi-Vendor Support
AlgoSec Firewall Analyzer analyzes all the leading firewalls in the enterprise market, including Check Point, Juniper, Cisco, and Fortinet. AFA reports for all firewalls have the same look and feel as the native firewall interface, making the reports easy and intuitive for administrators.
The AlgoSec Firewall Analyzer also provides change tracking, monitoring and alerting for a number of other network security devices including Blue Coat Proxy Server and Web Filter, F5 BigIP, Juniper Secure Access (SSL VPN), Linux netfilter iptables, McAfee Firewall Enterprise (Sidewinder), Palo Alto Networks and Stonesoft StoneGate. And additional devices can also be easily added -- without coding -- via the AlgoSec Extension Framework.
Flexible Deployment
AlgoSec Firewall Analyzer is available as both software-only and appliance-based solutions. For software options, it can run on your own hardware as a VMware virtual appliance on a hosting Windows server or installed on a Linux machine. Alternatively, the AlgoSec Firewall Analyzer can also be delivered pre-loaded on a hardened AlgoSec appliance, providing you with a turnkey deployment solution.
Multiple Licensing Options
The AlgoSec Firewall Analyzer is offered in the following software modules, each with a specific set of capabilities, so you can chose the right set for your needs.
AlgoSec offers low-cost, project-specific licenses that are ideal for auditors and security consultants. Consulting licenses can be purchased directly from our e-store.
Ready to evaluate? Click here to register for a free evaluation.
For more information and to view sample reports register here for exclusive access to our Customer Extranet where you can view sample reports, read white papers, customer case studies and more. |
