Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I am seeking recommendations for management tools for high-end firewalls, such as the Juniper SRX3000 series. When I say "management", I mean operations, configuration management, policy management, log/alert management are all in scope. My requirements:

-Juniper SRX/JunOS 10.x must be supported; other manufacturers' firewalls should also be supported
-Configuration management (versioning, backup/restore, audit of config changes)
-Policy management to help manageability of complex policies
-Log/alert management to help isolate faults and detect anomalies would be nice, though I'm not looking for a SEIM.
-Cluster/high-availability management
-Ultimate goal is to improve auditability for HIPAA, PCI, SOC1/2/3, etc.

Basically I'm asking for your experiences (good or bad) with tools that help bring firewall management from a low-level-config kind of view up toward an operations-management level. The kind of packages I've found from a little research that sound right are: Firemon, Skybox, Algosec, RedSeal, LogLogic, or perhaps capabilities from vendors like HP, CA, IBM.

I'm looking for tools that are enterprise quality in terms of stability and feature set, but they can be commercial or open source, Windows, Linux, appliance, platform doesn't matter as much as features.

share|improve this question
add comment

closed as off-topic by Scott Pack, NULLZ, Iszi, AviD Nov 26 '13 at 9:06

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

3 Answers

I don't think you're going to find one tool that has each of the features you want. You may have to look at a combination of tools. You should also add Athena Security's tools to the list.

share|improve this answer
    
Yes, I agree that this is probably not just one tool I am looking for! Thanks for the suggestion for Athena Security. Do you have any specific experiences with Athena's tools you could share? –  Mark Beadles Feb 10 '12 at 15:59
add comment

Some of the founders from the open source Firewall Builder project (http://www.fwbuilder.org/) are working on a new solution that might fit what you are looking for. If you are interested in hearing more send an email to mike@netcitadel.com and I would be happy to share more details with you.

Disclaimer - I'm one of the founders from Firewall Builder.

share|improve this answer
add comment

I work for AlgoSec, and I believe our solution addresses everything that you listed. The best way to check it of course is to evaluate the product. You can do it free of charge at algosec.com/eval

Also, you can take a look at this 2 minute video to learn more about our automated PCI compliance reports and check out some customer testimonials.

Hope this helps and thanks for considering us, Nimmy Reichenberg

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.