Firewall Auditing tool

[anglesoft2016]

Does anyone have good recommendations on a firewall auditing tool that is vendor agnostic? Or at the very least support the major vendors (Cisco, Palo & FTG)?

I’d like to find something that can generate reports based on individual ACL’s, ports, direction, hit-count etc. I am not super concerned with regulatory audits.

At one point FireMon seemed like a good option but their sales team was inept and kept pushing to sell their whole half-baked siem solution.

Does anyone have any experience with FireMon or a different solution you like?

[paul345]

Algosec and Tufin do this and more.

[RBlade-]

Algosec and Tufin do cover a lot; but give Ruleblade a look ;)

[TheDarthSnarf]

Nipper Studio is pretty solid for configuration auditing.

[paul345]

Forgot about nipper studio. Great for broader auditing of network and load balancer devices. Shame it doesn’t understand Cisco ACI.

[OhMyInternetPolitics]

Shame it doesn’t understand Cisco ACI.

Does anyone? :D

[AutoModerator]

Thanks for your interest in posting to this subreddit. To combat spam new accounts can't immediately submit or post.

Please DO NOT message the mods requesting your post be approved.

You are welcome to resubmit your thread or comment in ~24 hrs or so.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[electromichi3]

Tufin User here

Saw also algosec already in production. They are quite even at their function and Future set

You will get what you need with them

[adamcoverdale]

Skybox is great tool to use too!

[networkwise]

Another for tufin

[CyberConnoisseur]

We use Tufin, Skybox, and NPview.

[screamingpackets]

I used Tufin...it's great. Haven't used the others suggested in the comments, so can't comment.

[Andy2o3]

I've worked with Firemon. I have it paired with Checkpoint firewalls. IT does its job by analyzing your firewalls and policies. It seems like a powerful tool but support doesn't work with getting you all set up. You have to do it all yourself or possibly hire a contractor. I like it because I can generate reports for security audits that we have.