I am seeking recommendations for management tools for high-end firewalls, such as the Juniper SRX3000 series. When I say "management", I mean operations, configuration management, policy management, log/alert management are all in scope. My requirements:
-Juniper SRX/JunOS 10.x must be supported; other manufacturers' firewalls should also be supported
-Configuration management (versioning, backup/restore, audit of config changes)
-Policy management to help manageability of complex policies
-Log/alert management to help isolate faults and detect anomalies would be nice, though I'm not looking for a SEIM.
-Ultimate goal is to improve auditability for HIPAA, PCI, SOC1/2/3, etc.
Basically I'm asking for your experiences (good or bad) with tools that help bring firewall management from a low-level-config kind of view up toward an operations-management level. The kind of packages I've found from a little research that sound right are: Firemon, Skybox, Algosec, RedSeal, LogLogic, or perhaps capabilities from vendors like HP, CA, IBM.
I'm looking for tools that are enterprise quality in terms of stability and feature set, but they can be commercial or open source, Windows, Linux, appliance, platform doesn't matter as much as features.