For IT Managers with a firewall rule base that’s grown organically for years — the most common “someone left and nobody understood their rules” scenario.
The Problem
Rule bloat, shadowed and duplicate rules, “any-any” rules nobody wants to touch, no documented rule-owner or business justification per rule.
Methodology
Rule-base export (all in-scope firewalls) → automated shadow/duplicate/unused-rule detection → manual review of any-any and broad-CIDR rules → rule-owner/justification gap check → logging configuration review per rule.
What’s Included
- Rule-base export and automated analysis
- Shadow, duplicate, and unused rule identification
- Risk-tagged cleanup recommendations
- Hands-on cleanup implementation (Standard and Premium tiers)
Deliverables
- Annotated rule-base audit flagging shadowed, redundant, overly permissive rules — findings grouped by firewall then by risk rating
- Each finding scored on a Likelihood × Impact matrix, not just labeled “High risk” with no reasoning shown
- A remediation spreadsheet at rule-level granularity: finding, recommendation, owner, priority, target date, status
- A 2–3 page executive summary in plain language, with a before/after rule-count and risk-reduction projection
Before We Start
You’ll get a short pre-engagement questionnaire covering firewall vendor/model/firmware, last cleanup date, whether a change-management process exists, and any known “someone left and we don’t touch that rule” situations — this keeps the kickoff call focused instead of spent on discovery.
Engagement Phases
1. Export & Analysis
Automated rule-base analysis (2–3 days)
2. Manual Review
Risk tagging (3–5 days)
3. Cleanup
Standard and Premium tiers only — scoped after findings are reviewed together
Pricing
| Tier | Scope | Price |
|---|---|---|
| Basic — audit only | Single firewall, up to ~200 rules. Findings and remediation list, no hands-on cleanup. | ₹65,000 / Intl $700 |
| Standard | Up to 3 firewalls or ~500 rules. Audit plus hands-on cleanup implementation. | ₹1,60,000 / Intl $1,700 |
| Premium | Enterprise multi-vendor estate. Audit plus full cleanup. | Get a Quote |
Not sure what your rule base actually looks like? Start with the free Firewall Review Checklist.
Get your firewall rules reviewed by someone who reads the actual rule base, not a vendor dashboard summary.