Firewall Audit

A focused, standalone audit of your firewall rule base — rule-level findings, risk-rated, with a remediation list you can actually work from.

Methodology

Rule-base export (all in-scope firewalls) → automated shadow/duplicate/unused-rule detection → manual review of any-any and broad-CIDR rules → rule-owner/justification gap check → logging configuration review per rule.

What You Get

• Annotated rule-base audit, findings grouped by firewall then by risk rating
• Each finding scored on a Likelihood × Impact matrix — not just labeled “High risk” with no reasoning shown
• A remediation spreadsheet at rule-level granularity: finding, recommendation, owner, priority, target date, status
• A 2–3 page executive summary in plain language, with a before/after rule-count projection

Before We Start

You’ll get a short pre-engagement questionnaire covering firewall vendor/model/firmware, last cleanup date, whether a change-management process exists, and any known “someone left and we don’t touch that rule” situations — this keeps the kickoff call focused instead of spent on discovery.

Pricing

Larger estates (multiple firewalls, ~500+ rules, multi-vendor) — see Firewall Optimization for Standard/Premium scope.