|
Firewall Rule Analysis Services
The most efficient tool for Internet/Intranet security is firewall hardware or software. Today, companies reserve a considerable portion of their security budgets for setting up firewall systems to protect their essential information and systems. Firewall systems can be positioned between different networks as gateways to allow safe access to sources and services.
It is highly possible that mistakes or omissions made while creating firewall rules may lead to gaps, allowing for unwanted connections to systems which should be protected. As the number of rules and firewall administrators increases, the potential risk and the possibility of mistakes rise as well.
Another potential problem is failure to change old rules in long-standing firewall systems. These rules are often left untouched on the assumption that their removal would cause connection problems, but when not removed they are prone to cause security risks in due time.
With respect to the risks mentioned above, the following controls should be carried out in order to detect any potential problems in existing firewalls:
- Checking for security rules creating risk potential
- Checking object database
- Checking firewall components
- Firewall log analysis
- Checking VPN settings
- Other controls
|
Site Map
