New Feature Series - 3 :: Firewall Analyzer 7 - All New Security Audit and Configuration Analysis Report

Why Security Audit and Configuration Analysis required?

The review of the Firewall rules is one of the important part of the security audit.Firewall Analyzer performs a comprehensive security audit of your device configuration settings, equivalent to that performed by a professional security auditing companies.

Latest Firewalls and other security devices offer quite complex and wide rage of configuration option. The settings are sometimes not clear for even an experienced network administrator. Firewall Analyzer offers clear and consistent configuration reports for your devices.

How Firewall Analyzer addresses this

Firewall Analyzer takes a step forward in addressing the regulatory compliance requirement of Firewall device. It generates an elaborate report which covers the security audit and configuration analysis of the device. The report is in HTML format.

The report provides an overall issue rating and consists of three parts:

Security Audit
Security Best Practices
Device Configuration

Each security/configuration issue is analyzed and report consists of the following:

Finding
Impact
Ease
Recommendation

Each issue is rated for these headings.

How to get the 'Security Audit and Configuration Analysis' compliance report?

Firewall Analyzer uses the security audit report package to generate this report.

For Firewall Analyzer Windows installation:
In the case of Firewall Analyzer Windows installation, the necessary files for the report package are bundled. Just check the Compliance Reports column of the individual device in Security Statistics tab in the dashboard or in the client Setting > Device Rule screen, for the latest generated compliance report. If it is not the latest report and you want to generate the report, click the option to generate compliance report.

For Firewall Analyzer Linux installation:
In the case of Firewall Analyzer Linux installation, the necessary files for the report package may be available. If it is not available, you will get an error message 'Unable to generate compliance report. Reason: failed to locate ....' in the Setting > Device Rule > Add Device Info screen in the dashboard. In this case, follow the procedure given in the help document.
Now, check the Compliance Reports column of the individual device in Security Statistics tab in the dashboard or in the client Setting > Device Rule screen, for the latest generated compliance report. If it is not the latest report and you want to generate the report, click the option to generate compliance report.

If the device is not listed in the Device Rule Info screen or the device listed in the Security Statistics tab does not contain the report under the Compliance Report column, add the device using the menu Setting > Device Rule > Add Device Info.
Follow the procedure given below:

Click + Device Info link. Add Device Info screen opens up.
Select the device, for which the compliance report needs to be generated, from the Select Device drop down list.
Enter the required device credentials or use credential profile or create a new profile in the Fetch Rules > Primary Info section.
If required also fill the Secondary Info.
Select the Compliance Report check box.
Click Test Now button to check validity of the device credentials. The result is displayed in a pop up window. Close the window if the validation is successful.
Click Save to save the configuration to fetch device rule info or Cancel to cancel the operation.
After saving the device appears in the Device Details list of Device Rule Info screen and the compliance report start to get generated.