Athena FirePac 2.1.1

Following devices are supported:

• Cisco PIX
• Netscreen
• Checkpoint FW-1

FirePAC provides comprehensive firewall analysis with three essential must-have capabilities for every network engineer.Three types of report are generated using Athena FirePAC:

• The comprehensive report includes report based on packet filtering ACLs, routing tables, and NATs. It will also evaluate the policies against industry best practices
• The Rule Conflict Report identifies rule conflicts in firewalls by identifying redundant, correlated, generalized and shadowed rules
• The policy query report analyzes the firewall policy. It is possible to query the policy for a specific address space. The policy diff report compares the firewall policy between two configurations.

Policy Analysis – a remarkably straightforward way to understand all the services allowed to, from or through a device.Comprehensive policy analysis is based on any combination of source, destination, service, or interface. Using the configuration file for input, FirePAC generates reports based on packet filtering ACLs, routing tables, and NATs. It details the specific configuration rules that give rise to any specific policy. It will also evaluate the polices against industry best practices so that zeroing in on the root cause of problems becomes a cinch.

Anomaly Detection – the industry’s most thorough display of duplicated/unneeded rules for cleaning-up firewall rule sets.

Athena is an expert at inferring higher level policies from firewall rules. We use this ability to provide the most accurate and complete detection of redundant and covered rules that have no effect on packet accept or deny policies because there are other rules or combinations of rules that achieve the same thing. This analysis is provided as a report that fully displays all the rules and also provides the rule or line number for easy reference.

Compare Policies – An elegant and concise presentation of added or dropped services resulting from a configuration change.

This report shows just enough of what you need and nothing you don’t. It only lists the changes, grouped by output interface and service, correlated to the actual impact. Comparing policies, rather than configurations, is the most clear-cut way to understand what is happening on a firewall. Use it before a change is committed, or after, to verify that the rules implement a given security policy correctly.

Enhancements:

• Major Performance improvement using Query Based Algorithm.
• Support for Multiple Contexts in Cisco ASA Device. Shared interfaces.
  

Requirements:

• Cisco PIX
• Netscreen
• Checkpoint FW-1
• Java Runtime Environment (JRE) 5.0 and 6.0
• Intel Pentium-compatible 2 GHz or faster
• 2 GB memory (RAM).
• 1 GB of drive space (and 5GB of temp space, up to 25MB of disk space for each firewall reports).