topic Re: Firewall analyzers in General Topics

Firewall analyzers

JessMayfield — Thu, 18 Jan 2018 23:33:23 GMT

Can anyone let me know about their experience with firewall analyzer tools? I work at a university and we have 20 PANs, but we're expanding to new campuses in a few cities in the US and one in Italy. It's going to be tough to manage double the number of devices, but I can't find anyone with good experiences with these tools.

Gartner and Forrester have been no help. Waste of time.

Thanks!

Jess

Re: Firewall analyzers

reaper — Fri, 19 Jan 2018 08:44:37 GMT

Hi @JessMayfield

Are you looking for a tool to manage all your firewalls at once, or a tool to analyze your firewalls for conformity/best practices/proper configuration ?

there's several things we have at your disposal which may be helpful:

Panorama is a centralized management platform which looks and feels the same as your firewalls, but it allows you to build configuration in one spot and deploy it to one, several or all of your firewall appliances out in the field. It comes in a VM and physical chassis flavor, depending on your requirements

If you'd simply like your configs verified, you can reach out to your sales team and they can perform a best practices assessment on your firewalls and get you a heatmap and recommendations to improve or tweak your configuration

hope this helps

Re: Firewall analyzers

OtakarKlier — Fri, 19 Jan 2018 19:43:19 GMT

Hello,

Are you referring to 3rd party tools such as firemon?

Regards,

Re: Firewall analyzers

JessMayfield — Tue, 13 Feb 2018 12:46:55 GMT

Otakar,

Yes...looking for systems like FireMon (or others) that can help me with compliance reporting and determine if rules are risky/need cleanup. A friend of mine suggested to POC a few vendors, but I'd like to get to a short list.

Have you had any experience with these tools?

Re: Firewall analyzers

JessMayfield — Tue, 13 Feb 2018 12:48:06 GMT

The trouble I have with PAN is being able to report details on the traffic flows and compliance implications. But I have never used these other tools, and don't know which should be on my short list...

Re: Firewall analyzers

BPry — Tue, 13 Feb 2018 14:40:37 GMT

@JessMayfield,

The only ones I've seen that would be worth testing would be FireMon or Tuffin.

Re: Firewall analyzers

jdprovine — Tue, 13 Feb 2018 14:43:27 GMT

@JessMayfield

I did a on premise 30 day trial, contact a vendor and see if they are willing to do that for you and you can decide it does what you need it too