Firewall management is a challenging part of security operations because of the level of resource needed as well as expertise required. Devices must be provisioned, deployed, upgraded and patched to keep up with the latest threats. Security policies and configurations must be updated to ensure appropriate access controls are consistent with changing business environments. Network traffic must be monitored continuously to identify and respond to threats before damage is done.
Cautela Labs Firewall Management service provides 24x7x365 firewall administration, log monitoring, and response to security and device health events.
Highlights:
- Preemptive protection from known and emerging security threats
- Multi-vendor support that helps maximize your existing security investments
- Designed to reduce risk and improve regulatory compliance through real-time views of your security posture
- Resolution of security issues with expedient and cost-effective processes
- Comprehensive and customizable reports, including executive and technical reporting options
- Lower total cost of ownership (TCO), due to reduced staffing requirement and reduced maintenance, infrastructure and training costs
- This service integrates with other Cautela Labs Security Services to enhance service functionality.
- This service offers a vendor-neutral approach to maximize your existing security investments while delivering around-the-clock monitoring, management and analysis of firewall logs. We help companies of all sizes stay ahead of the threat while reducing risk and improving regulatory compliance.
Firewall rules assessment and optimization:
Key areas of remediation:
- Find unused rules and objects
- Find hidden and redundant rules with actionable steps to remediate these conflicts
- Optimize highly utilized rules to dramatically improve performance
- Traffic flow analysis to reduce overly permissive rules by identifying exactly what traffic is flowing through a rule
Real-time Change Management: Continuous monitoring of all devices for any change to the configuration or policy. Understand what changed, when it changed, why it changed and the impacts of the change.
Full change management solution including:
- Automatic change detection in real-time
- Audit log detailing all changes
- Comprehensive and easy to understand comparison views in familiar policy layout
- Change notifications
Firewall Configuration Analysis: Review effectiveness and correctness of enforced policies on firewalls to identify gaps in protection and inconsistencies in configuration as well as enforce internal access controls.
Access Path Analysis: Identify and review the implications of every available path of access across the entire infrastructure to ensure proper enforcement and asset protection.
- Trace the path through the network to find impacted device
- Troubleshoot connectivity issues
- Detailed, step-by-step firewall behavior analysis including routing, access control and NAT
On-going Policy Compliance Auditing: Audit and validate configuration of network security device policies to ensure compliance with standards such as PCI, FISMA, NIST and HIPAA regulations.
