Firewall Audit Tools (Redseal, Skybox, Algosec, etc.)

[Jolie-Pitt]

I want to know if anyone here is aware of firewall audit tools, I have heard of RedSeal's SRM, Skybox's Security Assure or Algosec's Firewall Analyzer but i am not able to make out the best one amongst them. Any helpful suggestion on this will be highly appreciative, Thanks in advance.

[avishai_w]

In that case i will suggest you to check out "AlgoSec Firewall Analyzer". It is capable of doing firewall policy audit for firewall from Point/Cisco PIX/Juniper Netscreen. There other several feature if it like Change Management,Change Management etc, you can get it from here.

[penrod]

I want to know if anyone here is aware of firewall audit tools, I have heard of RedSeal's SRM, Skybox's Security Assure or Algosec's Firewall Analyzer but i am not able to make out the best one amongst them. Any helpful suggestion on this will be highly appreciative, Thanks in advance.

Where Skybox and Redseal are concerned, they encompass more than firewall auditing. Rather they provide an overall threat model of the network and systems attached to it.

We evaluated both Skybox and Redseal for at least a year. We chose Redseal and have had it in place for six months or so now.

We ingest Checkpoint, Cisco PIX/ASA, Foundry ACL, Cisco ACL, and Nessus data on about 3000 hosts.

We use the product to look at the overall threat from both internal and external risks.

Shoot me a PM, I would be happy to provide more detail offline.

John Penrod
CISO
The Weather Channel

[rompah_incarnate]

I'm also embarking on the same evluation/comparison (Redseal vs Skybox).
That is the Redseal Security Risk Manager against the Skybox Assure/Secure suites.

I'd be interested in your verdicts on both of these.