Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 6 down vote favorite
1

I am looking for a solution to be able to distribute and sync firewall rule-sets to multiple devices. There are a few solutions out there such as Playbook by Matasano but it comes with an expensive price tag.

Is anyone familiar with any other solutions that are cheaper or ideally free and allow for the syncing of Cisco and iptables rule-sets?

share|improve this question

2 Answers

up vote 1 down vote

Most enterprise class firewalls (I know Check Point and MS ISA, I'm sure others too - but not iptables) allow you to distribute rulesets etc to all the managed firewalls, from a single management console.

Of course, thats each for a single vendor's product... For different types of firewalls, I'm familiar with Tufin, but I think they're pretty high-end - and expensive.

share|improve this answer
up vote 5 down vote

A couple engineers I know are using puppet to maintain iptables rule sets.

http://projects.puppetlabs.com/projects/1/wiki/Module_Iptables_Patterns
https://github.com/camptocamp/puppet-iptables

share|improve this answer
Puppet looks really interesting. Going to give it a go next week. – Mark Davidson Nov 27 '10 at 20:19
I'm one of those 'engineers'. I use the first method, and it works great. I have on my list testing the second. – Scott Pack Dec 11 '10 at 4:40

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.