Detect overlaps, shadowing, conflicts, and duplicates in multi-vendor firewall rules.
npx skills add https://github.com/dgethings/netclaw --skill fwrule-analyzer
Please help me install this Agent Skill. Skill: fwrule-analyzer Source: https://github.com/dgethings/netclaw/tree/main/workspace/skills/fwrule-analyzer Command: npx skills add https://github.com/dgethings/netclaw --skill fwrule-analyzer
Analyze firewall rules across multiple vendors to detect overlaps, shadowing, conflicts, and duplicates, enabling consistent policy governance and faster audits.
Provide vendor configs or a pre-normalized JSON payload for analysis and receive a unified report of overlaps, shadows, conflicts, and duplicates.
High-intent search queries and answers about installing and using this skill.
Firewall rule shadowing and overlaps across multiple vendors are detected by parsing vendor configurations or pre-normalized JSON, producing a normalized view for dimensional analysis across zones, addresses, services, protocols, actions, and applications.
You can analyze firewall policies from PAN-OS, ASA, FTD, IOS, Check Point, SRX, Nokia SR OS, and FortiOS in one pass by normalizing the configurations to identify conflicts, duplicates, and overlaps simultaneously.
The best way to perform pre-change validation for firewall rulesets is to analyze proposed changes for dimensional overlaps, shadowing, conflicts, and duplicates before deployment, ensuring consistent policy governance and ruleset hygiene.
You do not need pre-normalized JSON to audit cross-platform firewall rules; the analysis accepts native vendor parsers for configurations directly or pre-normalized JSON input to produce a unified report.
Conflicting rules in a firewall ruleset are identified during a cross-platform audit when the analysis detects overlapping dimensions across actions, services, or addresses that create contradictory policy enforcement behavior.
vahagn-madatyanAnalyze vendor-agnostic ACLs and firewall rules to generate a structured remediation report.
jassicsReview network segmentation and firewall/ACL design for security.
dgethingsIdentify live hosts and open ports on a subnet using nmap.
alexchlouAnalyze AI practice outputs and assessments to detect policy gaps.
