Find security problems in firewall rules

Validate Firewall Rules With Matasano Flint

Got a Cisco firewall? Check out Flint, Matasano's free, GPL-open-source tool for inspecting firewall rules. Flint detects over 100 firewall problems, from duplicate or inefficient rules to known-insecure protocols, and provides information about the services and networks you're allowing through your firewall. You can download it and run it right now, along with the source code, and it won't cost you a penny (or force you to fill out a purchase order).

Firewall Sync

Playbook acquires your firewall rules directly and puts them in a web console. To make a rule change that affects every firewall in your enterprise, there’s a single place to write and track the change. All your changes are tracked. When it’s time to deploy the change, you click a button, and Playbook handles the drama.

Code Review

Playbook makes change management transparent. Each firewall change includes a review step. You can delegate work across a group and have it reviewed by senior staff before it's deployed. Rule changes are highlighted for easy comparison. Comments for changes are visible, allowing for a transparent dialogue between change and approval.

Firewall Rule Analysis

Because Playbook fully understands the rules that it manages, it can detect common syntax errors and flag them before allowing the network to be disrupted by broken configurations.

Intelligent Search

Playbook fully parses firewall rules and indexes them based on their semantic meaning. It can quickly answer ques- tions about which rules reference hosts, protocols, and ports, across multiple device types.