Re: How to keep firewall rules clean and up-to-date

Recently I've been using Tufin and AlgoSec to audit firewall policies.

Both tools automate much of the grunt work in discovering what rules
are no longer being used, as well as identifying rules that are
redundant for one reason or another.  I still end up manually going
through each IP address seen in a policy/object and validating whether
the server/service still exists.

Documenting each new policy entry, as they are created, is priceless.

Kevin