Key Benefits
What We Do
How It Helps Your Business
What We Assess
Full review of all firewall rules — identifying any-any rules, overly broad permits, shadow rules, and rules that conflict with security policy
Review of network zone design, trust levels, DMZ configuration, and whether zone policies match intended segmentation
Management access controls, administrative authentication, out-of-band management, and logging of admin actions
Source and destination NAT rules, hairpin NAT, and rules that may inadvertently expose internal services
HA configuration consistency, failover testing status, and synchronisation of rules across HA pairs
Log configuration, which traffic is logged, SIEM integration, and alerting rules for critical events
Alignment with vendor-specific hardening guidance for Palo Alto, Fortinet, Cisco, Check Point, and others
Review of change management processes for firewall modifications approval, testing, and rollback procedures
Our Process
We identify all firewalls in scope and obtain read-only access to configuration files and management consoles.
We export firewall configurations, rule bases, and policy objects for analysis in a secure, isolated environment.
Automated policy analysis identifies shadow rules, redundant rules, any-any permissions, and compliance deviations at scale.
Our firewall specialists manually review findings, assess business context, and identify risks that automated analysis may miss.
Findings are rated by severity critical rules that directly expose the network are prioritised above housekeeping recommendations.
Full technical report with rule-level findings, a rationalised ruleset recommendation, and an executive summary for leadership.
Frequently Asked Questions
Do you need live access to our firewall management console?
We can work from exported configuration files alone, which is our preferred method for minimising operational risk. Where live access would add value, we use read-only credentials.
Which firewall vendors do you support?
We support all major enterprise firewall platforms including Palo Alto Networks, Fortinet FortiGate, Cisco ASA and FTD, Check Point, Juniper SRX, and Sophos.
How many rules can you analyse?
We have analysed rulesets containing tens of thousands of rules. We use a combination of automated tooling and expert review to handle large rulesets efficiently.
Deliverables
- Full firewall configuration audit report with rule-level findings
- Shadow rule and redundant rule analysis
- Prioritised remediation roadmap
- Rationalised ruleset recommendations
- Executive summary for leadership and auditors
Who Is This For?
- Organisations with firewall rulesets that have grown organically over many years
- IT and network teams preparing for a regulatory audit or ISO 27001 certification
- Companies that have merged infrastructure through acquisitions and need ruleset rationalisation
- Security teams that have detected unexpected traffic bypassing intended controls
- Enterprises running Next-Generation Firewalls and wanting to validate application-layer policy effectiveness
