domains / families / security / cisco-firewall-audit

cisco-firewall-audit

separate

Dual-platform Cisco ASA and Firepower Threat Defense (FTD) firewall audit with ACL analysis, NAT policy validation, Modular Policy Framework / Access Control Policy evaluation, Snort IPS assessment, VPN configuration review, and logging completeness verification.

When to use

• ACL review after rule changes or migration from ASA to FTD
• Annual or quarterly compliance audit requiring per-rule justification
• Post-incident rule assessment to identify how traffic was permitted
• **[ASA]** Security level and interface ACL gap analysis
• **[ASA]** Modular Policy Framework audit — verifying inspection maps
• **[FTD]** Access Control Policy rule ordering and IPS coverage review
• **[FTD]** Snort IPS policy tuning assessment — false positive vs detection gap balance
• NAT policy validation after network re-addressing or migration

Skill page

Source