skybox notes - Revision history

Nighthawk at 18:25, 17 February 2016

2016-02-17T18:25:59Z

Nighthawk at 18:22, 17 February 2016

2016-02-17T18:22:26Z

Nighthawk at 18:21, 17 February 2016

2016-02-17T18:21:50Z

Nighthawk at 18:19, 17 February 2016

2016-02-17T18:19:30Z

Nighthawk at 17:48, 17 February 2016

2016-02-17T17:48:40Z

Nighthawk: Created page with "skybox Firewall Optimization and Cleanup shadowed rules redundant rules rule usage, unused identified Firewall Policy Compliance out of the box cis benchmarks exampl..."

2016-02-14T01:48:51Z

Created page with "skybox Firewall Optimization and Cleanup shadowed rules redundant rules rule usage, unused identified Firewall Policy Compliance out of the box cis benchmarks exampl..."

New page

skybox

Firewall Optimization and Cleanup
shadowed rules
redundant rules
rule usage, unused identified

Firewall Policy Compliance
out of the box cis benchmarks

examples: snmp community string violations

access (rule) policy violations
example: login services to dmz

Network Visibility and Intelligence
firewall map
zones
validation
missing hops
export as image or visio

access analyzer!! will show which firewalls allow and which deny, identify which devices need rules

@@ Line 26: / Line 26: @@
 '''Vulnerability Control -Context-Aware Prioritization'''
 *hotspots mapped to business units, geography, vendor platforms and/or security bulletins
 *threat origins defined
    example: inside or outside

← Older revision		Revision as of 18:22, 17 February 2016
Line 28:		Line 28:
	*hotspots mapped to business units, geography, vendor platforms and/or security bulletins		*hotspots mapped to business units, geography, vendor platforms and/or security bulletins
	*threat origins defined		*threat origins defined
		+	example: inside or outside

← Older revision		Revision as of 18:21, 17 February 2016
Line 26:		Line 26:

	'''Vulnerability Control -Context-Aware Prioritization'''		'''Vulnerability Control -Context-Aware Prioritization'''
		+	*hotspots mapped to business units, geography, vendor platforms and/or security bulletins
		+	*threat origins defined

← Older revision		Revision as of 18:19, 17 February 2016
Line 20:		Line 20:
	*export as image or visio		*export as image or visio
	*access analyzer!! will show which firewalls allow and which deny, identify which devices need rules		*access analyzer!! will show which firewalls allow and which deny, identify which devices need rules
		+
		+	'''Vulnerability Control - Actionable Remediation'''
		+	*risk = impact x likelyhood
		+	*remediation tickets and tracking
		+
		+	'''Vulnerability Control -Context-Aware Prioritization'''

@@ Line 1: / Line 1: @@
-skybox
+skyboxsecurity
-Firewall Optimization and Cleanup
+'''Firewall Optimization and Cleanup'''
-  shadowed rules
+*shadowed rules
-  redundant rules
+*redundant rules
-  rule usage, unused identified
+*rule usage, unused identified
-Firewall Policy Compliance
+'''Firewall Policy Compliance'''
- out of the box cis benchmarks
+*out of the box cis benchmarks
-access (rule) policy violations
+'''Network Visibility and Intelligence'''
-example: login services to dmz
+*firewall map
+*zones
+*validation
+*missing hops
-Network Visibility and Intelligence
+*export as image or visio
-firewall map
+*access analyzer!! will show which firewalls allow and which deny, identify which devices need rules
- zones
- validation
-    missing hops
- export as image or visio
-−
 access analyzer!! will show which firewalls allow and which deny, identify which devices need rules