Firewall Audit
"Performance and Security in Perimeter Protection"
The Firewall Audit Service from Future Com Professional Services provides an analysis of your existing perimeter protection to determine secure operation and identify any performance and operational enhancements.
When configured and deployed correctly, a firewall can defend the network perimeter; enforce desktop security; and monitor security logs and alerts all from one centralized console. The purpose of this audit is to review the following areas:
- Physical security of device
- Version and patch levels
- Rule Base and Implied rules
- Firewall objects
- IDS/IPS signatures (if internal to firewall)
- Topology and Design
- Device Configuration
- Logging and Event Notification
- Fault tolerance/Disaster Recovery
Being in the industry for over seventeen years, Future Com recognizes the challenges faced by today’s IT managers and administrators and the need for proper product implementation and tuning. Too often companies spend a great deal of money on equipment that is installed and configured utilizing basic features and evolved network architectures. With certified network engineers, Future Com can address this issue through professional services that ensure correct deployment, tuning and knowledge transfer. IT administrators live in a “Perception is Fact” world and when companies spend money on solutions that is what they expect...solutions, not equipment. Future Com is ready to help you maximize resource utilization, simplify your operation and improve network security.
Scope of Engagement
Future Com will provide one day (8 hours) of consulting engagement to fulfill the requirements of this Statement of Work as described. Four (4) hours of services will be performed onsite and four (4) hours will be performed offsite for analysis, design, documentation, and follow up.
The scope of work under this engagement will be limited to the firewall devices, management server, and associated components only.
Project Tasks Performed During Audit
- Verify physical security of firewalls and management servers.
- Review version and patch levels for known vulnerabilities.
- Review network topology and firewall architecture.
- Review Global Properties/Implied Rules.
- Review firewall objects for duplicate entries/configurations.
- Review overall configuration for performance enhancements.
- Review Rule Base for possible security improvements.
- Review IDS/IPS signatures (if internal to firewall.)
- Assess recoverability in case of failure.
- Review logging and alerts.
- Recommendations/Best Practices.
Deliverables
- Complete review of existing firewall deployment.
- Define best practices for firewall policies.
- Documentation of firewall configuration.
- Recommendations for security and performance improvements.
Professional Services Firewall Audit Ordering Information
FCS-PROFSVCS-CKPFW-10 Check Point
FCS-PROFSVCS-JNPFW-10 Juniper NetScreen
FCS-PROFSVCS-PIXFW-10 Cisco PIX
Additional Related Future Com Professional Services offerings:
Network Optimization Assessment
Security assessment
Content Filtering
McAfee ePolicy Orchestrator Audit
Information Leak Protection