AlgoSec Security Management Suite

Manual and disjointed processes to manage firewall policies and perform compliance audits, change management and risk analysis are not only labor-intensive and costly, but also error-prone. In today’s increasingly complex network environment, organizations must manage security policies in a new way that enables them to improve operational efficiency, ensure compliance and business continuity, and reduce risk.

The AlgoSec Security Management Suite (ASMS) provides network security and operations teams with visibility and control of network environments through the intelligent automation of firewall policy management. The AlgoSec Security Management Suite combines AlgoSec Firewall Analyzer (AFA), AlgoSec FireFlow and AlgoSec BusinessFlow with AlgoSec's patented Deep Policy Inspection™ technology to automate firewall operations, simplify auditing and compliance, reduce risk and streamline the security change lifecycle across all leading traditional and next-generation firewalls, routers, VPNs, proxies and related security devices.

Click on the diagram to learn more about each AlgoSec Security Management Suite component

ASMS is trusted by more than 1000 organizations in over 50 countries, and features the most comprehensive technology for efficiently and effectively managing complex security policies.

"AlgoSec has allowed us to change the skills profile of the team that we use to do our rule implementation and authorization. This is because the tool does the heavy lifting for us. It allows the engineers to focus more on providing greater levels of security than on process and change.."

– Phil Packman, GM Security Gateway Operations, BT
Watch the video testimonial

Features
Specifications

Multi-Vendor Firewall Support – AlgoSec automates firewall policy management across all leading vendors and devices, including Check Point, Cisco, Juniper, Fortinet, McAfee and Palo Alto Networks. Key policy management capabilities include:
- Optimization and cleanup
- Risk assessment
- Compliance verification
- Change management
Next-Generation Firewall Support – AlgoSec introduces the industry’s only solution to offer both automated policy analysis and complete change lifecycle management for Palo Alto Networks and Check Point next-generation devices. AlgoSec improves IT productivity by simplifying the management of application and user aware security policies, including risk analysis, compliance reporting and change monitoring.
Integrated Suite – Only the AlgoSec Security Management Suite enables organizations to efficiently integrate policy analysis and change management, by automatically opening change requests in AlgoSec FireFlow based on AlgoSec Firewall Analyzer recommendations.
Enterprise Ready– ASMS is field-proven to scale to the needs of the world’s most demanding enterprises, and supports geographically distributed architecture, and requirements such as high-availability, disaster recovery and load-sharing.
Role-based Access Control – ASMS enables efficient maintenance of user rights and permissions, through role-based access control (RBAC) and optional interfacing with ActiveDirectory / LDAP to support the central enterprise roles directory.
Integration with Existing Infrastructure - AlgoSec Security Management Suite seamlessly integrates with the corporate Single-Sign-On (SSO) infrastructure as well as with leading change management systems such as BMC Remedy, HP Service Manager and CA Service Desk Manager.
Multi-Domain Support – AlgoSec Security Management Suite enables large organizations and MSSPs to easily manage multiple domains through a single view and apply strict enforcement of access rights according to user permissions.

Supported Devices

Check Point	FireWall-1®, Provider-1®, SmartCenter	v3.0 and up, NG, NGX, Software Blade Architecture (R7x) – including Application and Identity Awareness Software Blades
	VSX	All versions
	Security Gateway VE	All versions
Cisco	PIX, ASA Series	v4.4 and up
	Firewall Services Module (FWSM)	v1.0 and up
	IOS Routers & Switches	All versions
	Cisco Layer-3 Switches	Nexus Routers - All versions
	Cisco Security Manager	v4.3
Juniper	NetScreen Series	v5.0 and up
	Network and Security Manager (NSM)	v2008.1 and up
	SRX Series	All versions
Fortinet	Fortigate	FortOS 3.x and up, including VDOM
Fortinet	FortiManager	v4.x
Palo Alto Networks	PAN-OS	V4.X and up
McAfee	Firewall Enterprise (formerly Sidewinder)	v7.X and up
Blue Coat	Proxy SG	V5.X and up

Supported Change Management Systems*

BMC	Remedy
HP	Service Manager
CA	Service Desk Manager
* Additional change management systems can be supported by AlgoSec professional services.

Supported Devices for Change Monitoring*

F5	Big-IP Family
Juniper	Secure Access SSL VPN
Linux	Netfilter/Iptables
Stonesoft	StoneGate
WatchGuard	XTM
* Additional devices can be added via the AlgoSec Extension Framework.

System Requirements

The AlgoSec Security Management Suite can be delivered as software only, or preloaded on a virtual or physical appliance.

Physical appliances can be deployed in high-availability mode and support load-sharing for increased scalability.

Software	Memory	2GB
	CPU	3Ghz
	Storage	300 GB (2GB and additional 50MB per report)
	Operating System	Red Hat Enterprise Linux v4/v5 CentOS 4 - 5 Microsoft Windows 2000/XP/Vista (VMware)
	Browser	Internet Explorer 7.0 or higher Firefox 3.0 or higher
Virtual Appliance	VMware virtual appliance can run on a hosting Windows server with 1GB of RAM (2GB RAM or more is recommended).
AlgoSec Appliance	AlgoSec 1020 – low cost entry level, best for up to 150 firewalls AlgoSec 1080 – High-performance, best for up to 1000 firewalls AlgoSec 1160 – Enterprise level, best for up to 2000 firewalls *The number of firewalls supported by each appliance may vary according to policy complexity and the amount of logs collected.