OPSEC Partners
FireMon
Product Version Certified: FireMon® 5.1 for Windows and Linux
Certified For Use With:
Check Point FireWall-1®; NG™ FP3 and later
Check Point VPN-1 Edge™ NGX™ and later
Check Point Provider-1® Multi-Domain Server (MDS) NG FP3 and later
Check Point Provider-1 Customer Management Add-on (CMA) NG FP3 and later
Check Point SmartCenter™ NG FP3 and later
Check Point Log Servers NG FP3 and later
Check Point SecurePlatform™ NG FP3 and later
Product Description: FireMon® is software that helps you manage your firewalls. FireMon will plan and report on any changes to the firewall policy, increasing visibility and reducing the cost of making changes. It will show you which of your rules are unused and how traffic flows through each rule, letting you clean up unnecessary access and tighten down existing rules. And, with continued, automated analysis of things like PCI and NSA guidelines, FireMon will greatly improve your compliance posture. It'll even help you with security management on other devices in the Enterprise, like routers and load balancers.
FireMon offers an innovative approach to firewall management with these key capabilities:
- Change Management – Manage change with an automated change control process.
- Policy Cleanup and Analysis – Understand and simplify your policies to make them more manageable.
- Firewall Compliance – Reduce costs with recurring, actionable reporting.
- Managed Services – See how FireMon is specifically engineered to support large managed service customers.
Company Description: FireMon is a customer-focused company that brings innovative solutions to security management. The leading provider of firewall policy, risk, and compliance management solutions, FireMon’s flagship product, Security Manager, simplifies and automates the analysis of configuration and change management processes to enhance security, optimize performance, and speed compliance reporting. FireMon analyzes changes and performs audits in real time; simplifies policy management; and enforces configuration governance across firewalls, switches, routers, and other network devices. FireMon is the only solution on the market that can be customized to meet the unique audit and compliance reporting requirements for networks of all sizes while enabling IT organizations to do more with less effort. FireMon has been recognized by industry experts and emulated by competitors since we invented the firewall management space in 2001.
Key Features/Benefits:
- Policy Usage Analysis
- Change Reporting
- Security Analysis
- Change Control Process
- Compliance & Regulations
OPSEC Integration:
The FireMon Data Collector uses the OPSEC CPMI API to retrieve policy information from Check Point management servers. Administrators can select their preferred SIC method for CPMI authentication and encryption. And through CPRA, FireMon provides automatic OPSEC object creation and SIC certificate generation to accelerate the monitoring setup process.
The FireMon Data Collector uses the OPSEC LEA API to collect usage data from Check Point log servers. This valuable rule and object usage is the basis for FireMon’s policy optimization feature, which highlights usage and inefficiencies in firewall policies.
Additional Resources: