firewall-review

Audit firewall rules against CIS Controls v8 (4.4, 4.5) and NIST SP 800-41 Rev 1 by loading the skill and targeting your configuration directory. It evaluates inbound and outbound enforcement, identifying security-control gaps with prioritized, evidence-based findings.

Firewall rule shadowing occurs when a preceding rule blocks or allows traffic that a subsequent rule intended to handle. Detect shadowing, unused rules, and default-deny violations through ordered rule evaluation to ensure your network security policy functions as intended.

Check firewall configurations for insufficient egress filtering and logging gaps by performing a structured audit. The process verifies logging-gap compliance and identifies overly permissive any/any rules to ensure outbound network traffic enforcement meets security standards.

Yes, you can audit firewall configurations, ACLs, and network security policies for both traditional and cloud-native platforms. The structured review targets firewall rule bases across diverse environments to find risky misconfigurations and weak defaults.

Prioritize firewall misconfigurations by classifying issues by severity (Critical, High, Medium, Low) and tying each finding to specific control references and rule evidence. This generates a prioritized remediation report with traceable evidence.

A firewall review fails to identify overly permissive any/any rules when it lacks deterministic discovery of config files and ordered rule evaluation. Applying a structured audit framework ensures permissiveness checks and default-deny verification catch weak configurations.