Firewall Configuration Audit Tool
Audit Cisco IOS, ASA, and NX-OS, Juniper, Palo Alto, and Fortinet firewall configs for weak services, SNMP, and encryption.
Vendors this audit supports
Configuration auditing accepts exports from Cisco IOS, Cisco ASA, and Cisco NX-OS, plus Juniper, Palo Alto, and Fortinet. Those are the vendors the product checks today.
What is checked
The audit looks for insecure management protocols, default SNMP community strings, weak VPN encryption, and gaps against CIS and vendor hardening guidance. Sample findings on a Cisco ASA include Telnet left enabled, the SNMP community public, and DES used for IPsec.
A sample report scores the device, lists passed and failed checks, and shows a remediation command such as disabling Telnet in favor of SSH.