Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I am looking for a solution to be able to distribute and sync firewall rule-sets to multiple devices. There are a few solutions out there such as Playbook by Matasano but it comes with an expensive price tag.

Is anyone familiar with any other solutions that are cheaper or ideally free and allow for the syncing of Cisco and iptables rule-sets?

share|improve this question
add comment

2 Answers

A couple engineers I know are using puppet to maintain iptables rule sets.

http://projects.puppetlabs.com/projects/1/wiki/Module_Iptables_Patterns
https://github.com/camptocamp/puppet-iptables

share|improve this answer
    
Puppet looks really interesting. Going to give it a go next week. –  Mark Davidson Nov 27 '10 at 20:19
    
I'm one of those 'engineers'. I use the first method, and it works great. I have on my list testing the second. –  Scott Pack Dec 11 '10 at 4:40
add comment

Most enterprise class firewalls (I know Check Point and MS ISA, I'm sure others too - but not iptables) allow you to distribute rulesets etc to all the managed firewalls, from a single management console.

Of course, thats each for a single vendor's product... For different types of firewalls, I'm familiar with Tufin, but I think they're pretty high-end - and expensive.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.