SANTA BARBARA, Calif. -
"Everyone thinks firewalls are solid," said John Abraham, president of Redspin, which conducted the research and found that nearly 30% of firewalls are failing at their job. "It's the basic assumption you build the rest of your network security on. Unfortunately, that turns out to be a bad assumption. We logged firewall configuration problems during a year's worth of security audits and found that 30% of them violate their organization's own security policy. That's not good."
Firewall configurations consist of Access Control Lists (ACLs), which are strings of configuration code that include network addresses, protocols, and vendor specific commands. They may be easy to understand individually, but as a whole can be very difficult to read and analyze because they are order dependent. Also, they are affected by the firewall's implicit default rules that affect every other rule but are not shown in the configuration file. Redspin said this can introduce errors in implementation. Many IT administrators typically have wide-ranging responsibilities rather than a network engineering focus and may inadvertently overlook these subtleties, the company said.
Pink Floyd may have wanted to "tear down the wall," but Redspin said that is an IT manager's worst nightmare. To help banks and credit unions address these problems, Redspin is introducing a new software tool: the Redspin Firewall Configuration Analysis Tool (CAT), which the company said simplifies and automates the complex problem of auditing firewalls and identifying configuration problems by creating a visual representation of the firewall rules.
Redspin uses CAT as part of its security audits to analyze firewalls for banks and credit unions. In addition, Redspin is making the CAT publicly available at no charge for three months.
For info: www.redspin.com.
