firewall-auditor

Auditing UniFi firewall policies evaluates rule sets against 16 security benchmarks to detect conflicts, redundancies, and unsafe topology configurations. This skill scores findings deterministically across segmentation, egress control, and rule hygiene to reduce network exposure.

UniFi firewall policy validation checks VLAN segmentation and guest or IoT egress controls against defined security benchmarks. It identifies risky topology conditions and policy gaps to ensure traffic isolation rules function as intended across network segments.

You can generate a deterministic security score for a UniFi firewall configuration using the unifi-firewall-score script. It evaluates 16 benchmark conditions, stores rolling audit history, and computes trend deltas when the rubric version matches for recurring checks.

Yes, you need the unifi-network MCP server to run this firewall audit. It requires the server to access your UniFi policies, evaluate the 16 security benchmark conditions, and generate prioritized recommendations with remediation templates.

To get prioritized remediation recommendations for UniFi firewall findings, the audit evaluates policies against a deterministic rubric. When benchmarks define them, it produces remediation templates complete with the intended tool and parameters for threat mitigation.

Automated UniFi firewall policy validation depends on the unifi-network MCP server, meaning DNS and egress enforcement checks only run where MCP supports it. Scoring trend deltas also require matching rubric versions across the rolling audit history.