Stay Ahead With Linux Security News

security toolsrisk assessmentfirewall audit

Essential Guidelines for Conducting Firewall Audits and Risk Assessments

Firewall audit products are maturing, but the product class is still a relatively young, small market, defined by compliance requirements. You have a fairly limited choice of vendors, including Tufin Software Technologies, AlgoSec, Secure Passage and Athena Security, which all come with firewall audit pedigrees, and RedSeal Systems and Skybox Security, which are primarily vendors of risk-mitigation tools, and so go beyond firewall audit to feature sophisticated risk-assessment and risk-management capabilities.. Take the time to define your requirements, narrow down your choices and put candidates to the test. DO look at platform and device coverage. These products generally support all the major firewall vendors and some others, as well as major network devices, so you should be covered. Take both present and future needs into account. For example, you may run a single platform across the organization now, but future acquisitions may run on other vendors' infrastructures. These tools should be able to help whether you plan to migrate onto a single platform or continue to manage several while still realizing the efficiencies they promise. See if the vendor has a software development kit that can allow it to integrate with unsupported platforms. The link for this article located at Network World is no longer available. . Establish your security protocols, assess available solutions, and maintain adherence to industry standards proficiently.. Firewall Audit, Risk Management, Compliance Requirements. . Alex

May 12, 2010 • Alex Firewalls