AlgoSec Firewall Analyzer, Risk Management Edition

The AlgoSec Firewall Analyzer (AFA), Risk Management Edition is the market’s leading firewall security risk and compliance management solution. It includes the full featuer set of the Operations Management Edition and adds the optional Risk Management software module. Built on AlgoSec's comprehensive knowledge-base of industry best practices for firewall configurations, it allows users to quickly assess the security posture of their firewall configurations and ensure all devices meet their specific security controls. It also includes automatically completed compliance reports.

The Risk Management Edition is comprised of AlgoSec’s Risk Module and Core Module.

Risk Module feature highlights:

• Deep risk analysis: Identifies every packet the firewall may encounter. Automatically maps topology and identifies the most serious threats based on industry best practices, prioritizes subsequent risks and offers guidance on what and how to remediate.
• Automatic assessment and compliance reports: Generates automatically populated per firewall compliance reports to assure continued adherence to external regulatory standards including SOX, PCI-DSS, J-SOX and ISO, supplying the end-user or auditor with turnkey reports.
• Continuous security audit: Provide complete audit trail and replace error prone manual task to ensure configuration is aligned with security policy.
• Customize risk assessment: Add risk profiles based on internal corporate standards and easily customize out-of-the-box risk profiles with the AlgoSec wizard-driven Risk Profile Editor.
• eMail notifications: Send emails to pre-assigned users following a firewall risk analysis with the summary of the analysis and the changes to the security posture relative to previous reports.
• Offline Web interface: Offer offline policy store to deliver unprecedented visibility and insight to ensure current configurations match mandated policies.
• VPN analysis: Add risks associated to VPN rules and VPN objects to the Change History page and to email notifications.

Core Module feature highlights:

• Firewall analysis and reports for change tracking: Visual display of the firewall policy, including topology, traffic, rules and objects. It also includes analysis of the routing table and provides a connectivity diagram. Shows changes from previous reports on the same firewall.
• Group reports for change tracking: Create a report on a group of firewalls with either predefined or ad-hoc firewall definitions.
• Customized report scheduling: Schedule an analysis on a per firewall or group of firewalls based on pre-defined intervals (daily, weekly, monthly, etc) and issue a report.
• Report comparisons: Compare any two reports – either the same firewall or different firewalls or different firewall vendors. Track the changes in a firewall policy between reports of any two dates.  Show the changes in traffic, rules, services, host groups, topology and objects.
• eMail notifications: Send emails to pre-assigned users following a firewall analysis with the summary of the analysis and the changes from previous reports.
• Queries: Query a specific firewall or a group of firewalls to determine which rules control traffic between specific sources and destinations. This enables help desk teams to easily troubleshoot and prevent disruptions. It also provides for seamless server IP migration and security checking.
• Real time change alerting: Continuously poll firewall policy changes and send email alerts when a change is detected.
• Basic compliance: By exploring the policy and change history an auditor receives the required information to produce a report that complies with corporate and regulatory standards such as the Sarbanes-Oxley Act, Basel II Capital Accord, HIPAA, BS 7799 / ISO 17799, FISMA, Payment Card Security Standard (PCI DSS) and Cyber Security Standards (CIP).
• What-if analysis: Analyze a firewall policy before actually pushing it into production. Allows planned changes to be tested to ensure that the change in policy will produce the required results.

In addition to the features listed above all editions provide the infrastructure software features for the AlgoSec Firewall Analyzer that include:

• Graphical user interface
• Data collection setup
• User management and access control
• Reporting infrastructure