A new version of the AlgoSec Security Management Suite addresses the challenges of consolidating and migrating data centres – and the applications they support – to private, public or hybrid clouds through simplified, automated change workflows and the ability to easily discover the rules, objects and IPs that support specific business applications.
In addition to delivering business impact analysis of network changes and providing capabilities to ensure application connectivity is maintained during a data centre or server migration, the new release also includes out-of-the-box baseline configuration reports for all of the leading firewalls and routers, and extended capabilities for managed security service providers (MSSPs).
The AlgoSec Security Management Suite enables organizations to manage security at the speed of business by delivering an automated and application-centric solution for managing complex policies across firewalls, routers, switches and secure web gateways.
The Suite bridges traditional gaps between security, network and application teams by combining AlgoSec BusinessFlow, FireFlow and Firewall Analyzer to streamline security operations and change management, ensure continuous compliance, maximize application availability and service delivery, and deliver a tighter security policy that offers better protection against cyber-attacks.
“While more organisations are moving physical data centres and business applications to private and hybrid clouds, migrating the security policy can be extremely complex, time-consuming and costly,” said Avishai Wool, CTO, AlgoSec. “Through an automated and application-centric approach, the AlgoSec Security Management Suite helps organisations accelerate the migration and ensure the availability of critical applications while maintaining a secure and optimized network security policy.”
New features include:
Business impact analysis of network changes – The AlgoSec Suite provides insight into business applications and the underlying connectivity flows that may be impacted by firewall rule changes and planned or unexpected server and device outages. This is critical for understanding the impact to key applications when conducting data centre migrations or decommissioning a server.
Discovery of dependent IP addresses across the entire security policy – The AlgoSec Suite simplifies the discovery of IP addresses during a migration by enabling a single search across multiple policies for IP addresses contained within objects and rules. A report that includes the discovered policies, pertinent rules within each policy and where the IP or object resides helps ensure the security policy is properly migrated along with the network components.
Closed loop for application-related rule changes – Business application owners can now continuously track the status of the entire change process related to their application connectivity requirements.
Out-of-the-box baseline configuration compliance reports – New, out-of-the-box baseline configuration reports eliminate device misconfiguration often exploited in cyber-attacks. In addition to support for Check Point, Cisco firewalls and IOS routers, baseline configuration reports are now automatically generated for McAfee, Fortinet, Palo Alto Networks and Juniper firewalls as well as Cisco Nexus switches and routers and BlueCoat web filters.
Extended MSSP support – MSSPs now have even more flexibility through a Web Services API that integrates the Suite with external applications to perform device analysis, manage devices and groups, manage users, create domains, as well as improve license provisioning.