FireMon Solutions CH 03.ppt

* * * * Remove Unused Access Additional low-risk high value change FireMon’s Rule Usage Reporting allows you to analyze the current policy against actual network traffic patterns You will see the highly accurate usage information about your policy as it relates to which rules (and objects!) are being used the most and which are being accessed the least This information is stored in the FireMon database indefinitely so you can go back and review rule usage for any given date range.. * * What if RISK was easier to identify from a holistic view of the enterprise network! Or more importantly what if you could prevent it? * My identifying the most likely sources of threat on the network and in-turn identify what exposures exist as it relates to the accessibility of the critical assets On can then take the necessary steps to focus remediation efforts on the key areas that expose the assets to risk. Reduce the greatest amount of risk with the least amount of effort! * * Risk Analyzer provides visual awareness to actual network susceptibility to risk. Attack paths through the network are defined and overlaid on a visual map (or “attack graph”) Understanding how network behavior and existing security controls affect the reachability of identified vulnerabilities defines the real exposure of an asset from a particular threat. Not just that a vulnerability exist to a critically weighted asset, but what is the actual susceptibility to attack in the context of the network for the critical asset. The highest return on my resource investment may not be spending repetitive cycles patching the most critical weighted assets if I can identify a way to more effectively mitigate and remediate risk at a higher level. * * * * There are many benefits of easily accessible rule documentation… FireMon Security Manager can help automate the task of documenting and tracking change to your rule documentation. And since we archive your past and most current policies… the docu