Firewall review
Review of your firewall
Your firewall is the door to your network, and over the years it piles up rules nobody remembers the reason for. We review them one by one and test from the internet what was left open.
Configuration review against the vendor’s CIS benchmark, rule analysis (permissive, shadowed, unused, ownerless), management and logging, and an external scan of exposed services.
- Duration
- 5 business days
- Start
- Within 1 week
from US$1,200
Buy it on its own or add it to an audit. Retests: added to an audit, the same as that audit; on its own, 3 months at no charge.
Review my firewallSeeing odd connections or were you told a remote access port is open? Write to us today.
It is for you if
- You have a firewall in the office or in the cloud (Fortinet, Palo Alto, pfSense, Sophos, MikroTik or other).
- Someone who has left, or a vendor who does not review it, set it up.
- Your insurer or a customer asks you for a network review.
What we check
Who can log in to manage it and from where.Management access, MFA, local accounts, version and patches (CIS benchmark).
Whether remote access for working from home is safe.VPN: encryption, MFA, segmentation of remote access and known device vulnerabilities.
Whether there is a record of what happens, so you know what occurred if something goes wrong.Logging, retention and forwarding to an external system.
What an attacker sees from the internet when looking at your network.External scan of exposed ports and services, checked against the rules.
How we work
Day 1
Configuration
You send us the firewall’s exported configuration. We explain how to get it.
Configuration export (no plain-text secrets) and signed authorization for the external scan.
Days 2 to 4
Review
We go rule by rule and test from outside what is open.
CIS review, rule analysis and external scan.
Day 5
Report
We hand you what to close, in which order, and walk through it together in 30 minutes.
Report with prioritized findings, affected rule and proposed change; wrap-up meeting.
What you get
- The list of rules to delete or tighten, in order of risk.
- Findings per rule with severity and proposed change.
- What your vendor has to change in the configuration.
- Deviations from the CIS benchmark with the fix for each.
- Every change tested again.
- Retest on the new configuration; terms depend on how it is bought.
Scope limits
Includes
- 1 firewall.1 appliance or 1 virtual instance.
- Fully remote, no visit to your office.Review of the exported configuration and scan from the internet.
Does not include
- We do not go into your internal network: that is Warren.No internal or segmentation pentest.
- We do not touch the firewall: your vendor or Lop Fix makes the changes.No production changes; remediation available with Lop Fix.
Two appliances in high availability or several sites? We give you a fixed price before signing.
Questions before you buy
Do I have to give you the firewall password?
No. The exported configuration, without passwords, is enough. We do not need to log in to the device.
Can I buy it without an audit?
Yes. Buy it on its own or add it to Dig, Rabbit Hole or Warren.
How long since anyone looked at your firewall?
In 5 business days we tell you which rules are excess and what is open from the internet.