Abstract: Systems, methods, and apparatuses for comparing firewall policies are described. In one aspect, a system includes a first gateway configured to implement a first firewall having a first policy, a second gateway configured to implement a second firewall having a second policy, and a computing device configured to compare the first policy with the second policy to determine whether the first policy matches the second policy. The first firewall and the second firewall may be implemented with different technologies and/or on different platforms. The computing device may operate as, or execute, a firewall comparison tool to parse raw firewall configuration data from the different firewalls and generate data structures with a common format so that the firewall policies may be compared.

Abstract: Methods, computer-readable media, systems and apparatuses for firewall policy system are described. The firewall policy system may include a unified format converter, a firewall policy browser, and a firewall policy converter. The firewall policy converter may convert firewall policies between different configuration formats. A first firewall policy may be received in a first configuration format. The first firewall policy may be converted into a second configuration format, and a command to convert the first firewall policy from the second configuration format into a third configuration format may be received. In response to receiving the command, the first firewall policy may be converted from the second configuration format into the third configuration format. The first firewall policy may be outputted in the third configuration format.

Abstract: A method for analyzing and reporting gateway configurations and rules includes receiving configuration data from gateway devices providing access to an enterprise network. The gateway devices may be associated with multiple vendors. At least one computer processor parses the configuration information associated with each of the gateway devices to identify configuration output data for each of the gateway devices. The configuration output data for each of the gateway devices is stored in a single data structure. The configuration output data stored in the single data structure is indexed to generate one or more optimized data tables.

Abstract: Methods, computer-readable media, systems and apparatuses for firewall policy system are described. A computing system in a network comprising firewalls using a plurality of different formats may obtain configuration data of at least one firewall. The configuration data may comprise firewall policy information of the at least one firewall in a first format. A data type of each configuration item in the obtained configuration data may be determined, and a corresponding data in a second format for each configuration item based on the data type of the respective configuration item may be determined. The second format may be different from the plurality of different formats used by the firewalls. The properties of each configuration item in the second item may be stored, and the obtained configuration data of the at least one firewall may be presented in the second format.

Abstract: Systems, methods, and apparatuses for comparing firewall policies are described. In one aspect, a system includes a first gateway configured to implement a first firewall having a first policy, a second gateway configured to implement a second firewall having a second policy, and a computing device configured to compare the first policy with the second policy to determine whether the first policy matches the second policy. The first firewall and the second firewall may be implemented with different technologies and/or on different platforms. The computing device may operate as, or execute, a firewall comparison tool to parse raw firewall configuration data from the different firewalls and generate data structures with a common format so that the firewall policies may be compared.

Abstract: Methods, computer-readable media, systems and apparatuses for firewall policy system are described. The firewall policy system may include a unified format converter, a firewall policy browser, and a firewall policy converter. The firewall policy converter may convert firewall policies between different configuration formats. A first firewall policy may be received in a first configuration format. The first firewall policy may be converted into a second configuration format, and a command to convert the first firewall policy from the second configuration format into a third configuration format may be received. In response to receiving the command, the first firewall policy may be converted from the second configuration format into the third configuration format. The first firewall policy may be outputted in the third configuration format.

Abstract: A method for analyzing and reporting gateway configurations and rules includes receiving configuration data from gateway devices providing access to an enterprise network. The gateway devices may be associated with multiple vendors. At least one computer processor parses the configuration information associated with each of the gateway devices to identify configuration output data for each of the gateway devices. The configuration output data for each of the gateway devices is stored in a single data structure. The configuration output data stored in the single data structure is indexed to generate one or more optimized data tables.