Retire old firewall rules

Firewall Sync

Playbook acquires your firewall rules directly and puts them in a web console. To make a rule change that affects every firewall in your enterprise, there’s a single place to write and track the change. All your changes are tracked. When it’s time to deploy the change, you click a button, and Playbook handles the drama.

Intelligent Search

Playbook fully parses firewall rules and indexes them based on their semantic meaning. It can quickly answer ques- tions about which rules reference hosts, protocols, and ports, across multiple device types.

Ticketing and Change Management

Playbook gives your internal customers a simple ticket system to request changes. You pick up tickets and work on firewall rules. We’ve figured out what your rules mean, so you can search by hosts and ports and protocols, including inside of CIDR netmasks. You make a change. It’s tracked. Your team can review the change diff. When you commit the change —- get this —- the rule change is tracked with the ticket request, so you have an audit record. Wave that in front of your SOX auditors like a voodoo doll.

Validate Firewall Rules With Matasano Flint

Got a Cisco firewall? Check out Flint, Matasano's free, GPL-open-source tool for inspecting firewall rules. Flint detects over 100 firewall problems, from duplicate or inefficient rules to known-insecure protocols, and provides information about the services and networks you're allowing through your firewall. You can download it and run it right now, along with the source code, and it won't cost you a penny (or force you to fill out a purchase order).