Change automation hub

How to automate application connectivity changes across hybrid networks while keeping risk analysis, approvals, validation, and audit evidence in place.

Learn how governed cloud security policy change automation connects requests, risk checks, approvals, implementation, validation, and audit evidence.

Compare firewall compliance automation tools by fit, including NSPM platforms, native firewall managers, cloud controls, and audit tools

Learn what firewall compliance automation is, how it supports audit readiness, and what evidence teams need to manage firewall changes with governance

Learn about firewall rule automation and change management to streamline processes, reduce human error, and enhance network security with effective change controls.

Automate network management and policy changes to increase efficiency, reduce errors, and ensure security compliance across your network infrastructure.

Automate and secure network policy changes with AlgoSec Horizon FireFlow. Streamline workflows, ensure compliance, and reduce risks in your security environment.

Learn about the essential firewall change management process. Understand how to implement, track, and control changes to your firewall configurations for optimal security and compliance.

Learn about the 6 levels of intelligent automation and understand how to practically implement and apply them. Get insights into the hands-on aspects of incorporating intelligent automation into vario

Explore resources on firewall policy management with expert insights, guides, and best practices to optimize your network security with Algosec.

Explore the six levels of intelligent network automation maturity and what each level means for your security operations, starting from day one with AlgoSec.

A conversation from the DevNet zone at Cisco Live Amsterdam 2023 on automation and security with AlgoSec.

AlgoSec lives at the intersection of your infrastructure, security policy and the applications that run your business. AlgoSec’s unique technology visualizes connectivity flows and security posture by listening to the network to associate security policy with specific applications. Additionally, AlgoSec integrates with leading ITSM, SIEM, vulnerability scanners, identify management, and orchestration systems to promote a holistic, more robust security posture. AlgoSec’s platform delivers a unified way to visualize and manage the application connectivity and security policies across all public clouds, private clouds, containers, and on-premises networks. Its real-time network map provides a complete view and connectivity flows across all security and filtering technologies. Using its unique vendor-agnostic deep algorithm for change management automation, AlgoSec enforces application connectivity and security policy, thus preventing human errors, substantially reducing exposure to securi

Gain invaluable insights from Kyle Wickert, a seasoned professional, as he shares tips and best practices for leveraging AlgoSec's automation features effectively.

Join us on this enlightening journey of transformation and discover the keys to executing changes with a timely turnaround, ultimately securing a competitive edge in today's fast-paced business landscape. Don't miss out on the insights that can revolutionize your approach to change management.

Why the application drives security policy changes, and how AlgoSec secures application connectivity across the data center, branch, campus, and cloud.

Welcome to FireFlow, the AlgoSec change management system that automates your entire workflow and streamlines your organization's policy change lifecycle. Accelerate your provisioning, auditing, rule removal, and rule certification.

For every traffic change request, get a clear indication on its possible business implications

Users can set their change management workflow to run automatically from planning through to resolution, unless an exception or pre-defined event occurs – thereby significantly s...

Managing Business Application Connectivity: Lesson 5 Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Best Practices for Amazon Web Services (AWS) Security: Lesson 7 Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Firewall Management 201: Lesson 17 PCI-DSS 3.2 regulation requirement 6.1 mandates that organizations establish a process for identifying security vulnerabilities on the servers that are within the scope of PCI. In this new lesson, Professor Wool explains how to address this requirement by presenting vulnerability data by both the servers and the by business processes that rely on each server. He discusses why this method is important and how it allows companies to achieve compliance while ensuring ongoing business operations. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Best Practices for Incorporating Security into DevOps In theory adding capacity should be fairly straightforward, with minimal need for any intervention by the organization’s security team. But in practice it’s a little more complex. In this video Professor Wool provides some tips and best practices to help you add capacity without having to change your security policies, complete a security review or worse still, cause an outage or gap in the security perimeter. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Firewall Management 201: Lesson 15 Many organizations have both a firewall management system as well as a CMDB, yet these systems do not communicate with each other and their data is not synchronized. This becomes a problem when making security policy change requests, and typically someone needs to manually translate the names used by in the firewall management system to the name in the CMDB, which is a slow and error-prone process, in order for the change request to work. In this lesson Professor Wool provides tips on how to use a network security policy management to coordinate between the two system, match the object names, and then automatically populate the change management process with the correct names and definitions. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Firewall Management 201: Lesson 16 Some companies use tools to automatically convert firewall rules from an old firewall, due to be retired, to a new firewall. In this lesson, Professor Wool explains why this process can be risky and provides some specific technical examples. He then presents a more realistic way to manage the firewall rule migration process that involves stages and checks and balances to ensure a smooth, secure transition to the new firewall that maintains secure connectivity. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Firewall Management 201: Lesson 14 Many organizations have different types of firewalls from multiple vendors, which typically means there is no single source for naming and managing network objects. This ends up creating duplication, confusion, mistakes and network connectivity problems especially when a new change request is generated and you need to know which network object to refer to. In this lesson Profession Wool provides tips and best practices for how to synchronize network objects in a multi-vendor environment for both legacy scenarios, and greenfield scenarios. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Best Practices for Incorporating Security into DevOps In this lesson, Professor Wool examines the need for and the process of adjusting application connectivity throughout each stage of the DevOps lifecycle.

Firewall Management 201: Lesson 13 In this lesson, Professor Wool highlights the challenges, benefits and trade-offs of utilizing zero-touch automation for security policy change management. He explains how, using conditional logic, its possible to significantly speed up security policy change management while maintaining control and ensuring accuracy throughout the process.

Next Generation Firewalls: Lesson 3 Next generation firewalls (NGFWs) allow you to manage security policies with much greater granularity, based on specific applications and users, which provides much greater control over the traffic you want to allow or deny. Today, NGFWs are usually deployed alongside traditional firewalls. Therefore change requests need to be written using each firewall type’s specific terminology; application names and default ports for NGFWs, and actual protocols and ports for traditional firewalls. This new lesson explains some of challenges of writing firewall rules for a mixed firewall environment, and how to address them. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Next Generation Firewalls: Lesson 4 As part of the blacklisting approach to application security, most NGFW vendors now offer their customers a subscription based service that provides periodic updates to firewall definitions and signatures for a great number of applications especially the malicious ones. In this lesson, Professor Wool discusses the pros and cons of this offering for cyber threat prevention. It also discusses the limitations of this service when home-grown applications are deployed in the enterprise, and provides a recommendation on how to solve this problem. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Best Practices for Amazon Web Services (AWS) Security: Lesson 3 Once you start using AWS for production applications, auditing and compliance considerations come into play, especially if these applications are processing data that is subject to regulations such as PCI, HIPAA, SOX etc. In this lesson, Professor Wool reviews AWS’s own auditing tools, CloudWatch and CloudTrail, which are useful for cloud-based applications. However if you are running a hybrid data center, you will likely need to augment these tools with solutions that can provide reporting, visibility and change monitoring across the entire environment. Professor Wool provides some recommendations for key features and functionally you’ll need to ensure compliance, and tips on what the auditors are looking for. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Firewall Management 201: Lesson 9 In this lesson, Professor Wool explains how you can create templates - using network objects - for different types of services and network access which are reused by many different servers in your data center. Using this technique will save you from writing new firewall rules each time you provision or change a server, reduce errors, and allow you to provision and expand your server estate more quickly. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Firewall Management 201: Lesson 8 A business owner makes a simple change request to allow traffic to a new application. You now need to figure out the right firewall rules to change. This should be pretty simple… but what if you’re using NAT (Network Address Translation) in your environment? In this lesson, Professor Wool explains some key principles of NATing and why it’s critical to understand your NAT policy in order to identify the right paths for network traffic, which firewalls rules really need to be modified, and how to write your security policy correctly. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Firewall Management 201: Lesson 3 In this lesson, Professor Wool offers some recommendations for simplifying firewall management overhead by defining and enforcing object naming conventions. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Firewall Management 201: Lesson 7 In this lesson, Professor Wool examines the complex challenges of accurately simulating network routing, specifically drilling into three options for extracting the routing information from your network: SNMP, SSH and HSRP or VRPP. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Firewall Management 201: Lesson 10 In this lesson, Professor Wool examines the challenges of migrating business applications and physical data centers to a private cloud and offers tips to conduct these migrations without the risk of outages. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Firewall Management 201: Lesson 4 In this lesson, Professor Wool examines some tips for including firewall rule recertification as part of your change management process, including questions you should be asking and be able to answer as well as guidance on how to effectively recertify firewall rules. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Firewall Management 201: Lesson 1 In this lesson, Professor Wool discusses his research on different firewall misconfigurations and provides tips for preventing the most common risks. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Firewall Management 201: Lesson 2 In this lesson, Professor Wool examines the challenges of managing firewall change requests and provides tips on how to automate the entire workflow. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Next Generation Firewalls: Lesson 2 In this lesson, Professor Wool examines the pros and cons of whitelisting and blacklisting policies and offers some recommendations on policy considerations. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

Next Generation Firewalls: Lesson 1 In this lesson, Professor Wool examines next-generation firewalls and the granular capabilities they provide for improved control over applications and users. Learn more about AlgoSec at http://www.algosec.com and read Professor Wool's blog posts at https://www.algosec.com/blog

SANS instructor Kevin Garvey on reducing manual review of connectivity changes with automation to accelerate application changes and build a more resilient operating model.

Join us to explore the top application security challenges—and see how leading companies are turning complex, time-consuming processes into faster, simpler, and more secure operations. Gain practical knowledge, tools, and strategies to simplify application security and accelerate business agility. • Actionable insights on application connectivity – Best practices to simplify application mapping, reduce downtime, and streamline change management. • Expert guidance – Advice from industry leaders on securing applications across hybrid and multi-cloud environments. • Automation to reduce risk – Learn how intelligent automation accelerates application changes, cuts manual work, and minimizes errors. • Case studies real-world solutions – Hear how leading companies are securing and streamlining their applications to support business growth.

Joint Analyst webinar with Alexei Balaganski, Lead Analyst at KuppingerCole

In this example Nitin Rajput, Director Sales Engineering – APAC Middle East, demonstrates of how AlgoSec customers can utilize the AlgoSec platform to intelligently automate contract implementation in their Cisco ACI fabric being managed through Nexus Dashboard Orchestrator (NDO).

Oren Amiram, Director of Product at AlgoSec, explains why misconfigurations continue to plague public cloud network services and how...

What is network change management? Network Change Management (NCM) is the process of planning, testing, and approving changes to a network infrastructure. The goal is to minimize network disruptions by following standardized procedures for controlled network changes. NCM, or network configuration and change management (NCCM), is all about staying connected and keeping things in check. When done the right way, it lets IT teams seamlessly roll out and track change requests, and boost the...

A recent news article from Bleeping Computer called out an incident involving Japanese game developer Ateam, in which a misconfiguration...

The best security posture is a multi-layered security posture. Enterprise security leaders understand that no single tool or solution can...

Firewalls are one of the most important cybersecurity solutions in the enterprise tech stack. They can also be the most demanding....

All organizations eventually inherit outdated technology infrastructure. As new technology becomes available, old apps and services...

Firewalls form the first line of defense against intrusive hackers trying to infiltrate internal networks and steal sensitive data. They...

Problems with firewalls can be quite disastrous to your operations. When firewall rules are not set properly, you might deny all...

Security policy automation is the process of automating certain cybersecurity tasks like threat detection (ransomware, malware, security rules, network changes), investigation, and remediation. Automating such practices reflects in the policy that governs them. Thus, security policy automation is the process of automating network security controls using a programmatic solution. In present-day security operation centers (SOCs), NSPM solutions can facilitate automation. These work by...

Firewall misconfigurations are one of the most common and preventable security issues that organizations face. Comprehensively managing access control, addressing vulnerabilities, and detecting configuration mistakes under these conditions is not easy It’s especially challenging for organizations that use the default firewall rules provided by their vendor. Your firewall policies should reflect your organization’s unique cybersecurity risk profile. This requires some degree of customization,...

If your firewall shows a notification that it has detected a new network, it means it is doing one of its fundamental jobs properly. But good network security does not stop with just detecting a new network. You will have to analyze the network location, ensure it is authorized to connect with your network, automate this process, and ensure full-on monitoring so that none of the intrusive attempts ever go unnoticed. A good amount of all these tasks can be made more efficient, accurate, and...

A firewall that runs 24/7 requires a good amount of computing resources. Especially if you are running a complex firewall system, your...

Information security is vital to business continuity. Organizations trust their IT teams to enable innovation and business transformation...

Avivi Siman-Tov, Director of Product Management at AlgoSec, discusses the benefits of network automation and takes us through a...

Tal Dayan, security expert for AlgoSec, discusses the secret to passing audits seamlessly and how to introduce automated compliance...

So we’ve made it to the last part of our blog series on PCI 3.0 Requirement 1. The first two posts covered Requirement 1.1...

It goes without saying that security is the cornerstone of any organization today. This includes ensuring access to corporate data is...

Insecure Service Protocols and Ports Okay, we all have them… they’re everyone’s dirty little network security secrets that we try not to...

NAT Network Security I came across some discussions regarding Network Address Translation (NAT) and its impact on security and the...

How to Secure Your Local Area Network In my last blog series we reviewed ways to protect the perimeter of your network and then we took...

Podcast: Differences between UTM and NGFW In our recent webcast discussion alongside panelists from Fortinet, NSS Labs and General...

See what 102 AlgoSec customers say about application-centric security, automation and AI, from application visibility to smarter security operations.

How AlgoSec integrates with Cisco Meraki to bring consistent visibility, effective policy, and risk management to cloud-managed branch and campus networks.

How AlgoSec integrates with Cisco Catalyst SD-WAN to bring consistent visibility, effective policy, and risk management to branch, campus, and remote site networks.

A whitepaper making the business case for unified hybrid cloud security and automation in place of fragmented tools, manual processes, and operational silos.

A whitepaper on the shifting compliance landscape and the path from manual, spreadsheet-driven audits to automated security compliance.

An AlgoSec whitepaper on the six levels of intelligent automation in network security change management, from manual control to very high automation.

A whitepaper on whether automation is advanced enough for cybersecurity experts, and how AlgoSec safely automates every step of the security policy change process.

Leverage intelligent automation to confidently automate your security policy change process — from planning through risk analysis, implementation and validation Process security...

Six best practices for simplifying firewall auditing and compliance, and reducing risk.

AlgoSec's six levels of intelligent automation for security policy change management, modeled on autonomous driving and defined by how much expert interaction each level needs.

Validating the compliance of corporate firewalls and routers with PCI-DSS requirements is not an easy task. This whitepaper explains how to quickly and automatically assess firewall...