Compliance and NGFW Policy Audit?

Hi Hannu,

               NetBrain is Highly Customizable platform for building automations. you can build Automation for this requirement using Network Intent [NI] & Network Intent Cluster [NIC] which is No-Code/Low-Code feature available in NetBrain.

NI Example for Checking FW Policy Compliance:

• Step1: You need to retrieve output of relevant CLI Command for FW Policy Check then Define Variables as mentioned in below snip.

• Step2:  You need to Define Diagnosis which will verify FW Policy compliance and check for any deviations from Baseline data.  In this Section we can also configure Diagnosis Notes and alerts in case of FW Policy non-compliance.

In this Example I have shown you the CLI command Diagnosis for FW Policy Compliance check and similarly you can build FW Rule Compliance, Access Compliance. For this, you need relevant CLI commands then you can create parsers / Define Variables [Step 1 in NI] and Define Diagnosis [Step 2 in NI].

As the Network intent is Device specific, we can create NIC [Network Intent Cluster] to replicate the NI Logic across all list of Devices on which we would like to check FW Policy Compliance. 

• Below snip shows the NIC in which we are able to replicate the NI Logic to 6 devices.

I Hope this answered your question. Please raise a support case for any further assistance.

Thank you.!