FireMon: Igniting Innovation, Guarding Security.
We currently use the security manager modules to clean and fine-tune our set of policies centrally. We additionally use a policy planner …
Overview
What is FireMon?
FireMon is a real-time security policy management solution built for today’s complex multi-vendor, enterprise environments. Supporting the latest firewall and policy enforcement technologies spanning on-premises networks to the cloud, FireMon delivers visibility and control across the entire IT landscape to…
Recent Reviews
Awards
Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards
Reviewer Pros & Cons
Pricing
N/A
Unavailable
What is FireMon?
FireMon is a real-time security policy management solution built for today’s complex multi-vendor, enterprise environments. Supporting the latest firewall and policy enforcement technologies spanning on-premises networks to the cloud, FireMon delivers visibility and control across the…
Entry-level set up fee?
- Setup fee optional
For the latest information on pricing, visithttps://www.firemon.com/request-a…
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Would you like us to let the vendor know that you want pricing?
24 people also want pricing
Alternatives Pricing
What is ManageEngine ADAudit Plus?
ADAudit Plus offers real-time monitoring, user and entity behaviour analytics, and change audit reports that helps users keep AD and IT infrastructure secure and compliant.Track all changes to Windows AD objects including users, groups, computers, GPOs, and OUs.Achieve hybrid AD monitoring with a…
What is Perimeter 81?
Perimeter 81 is a Zero Trust Network as a Service from the company of the same name in Tel Aviv, designed to simplify secure network, cloud and application access for the modern and distributed workforce.
Product Details
- About
- Integrations
- Competitors
- Tech Details
- Downloadables
- FAQs
What is FireMon?
FireMon is a real-time security policy management solution built for today’s complex multi-vendor, enterprise environments.
Supporting the latest firewall and policy enforcement technologies spanning on-premises networks to the cloud, FireMon delivers visibility and control across the entire IT landscape to automate policy changes, meet compliance standards, to minimize policy-related risk.
Since creating their policy management solution in 2004, FireMon states they've helped more than 1,700 enterprises in nearly 70 countries secure their networks.
FireMon provides solutions that extend and integrate policy management with today’s latest technologies including SD-WAN, SASE, XDR, and SOAR.
The vendor states FireMon customers experience up to 90% improvements in network security policy efficiency while eliminating common misconfigurations which lead to breaches and compliance violations.
FireMon Features
- Supported: KPI Dashboards: See the network at a glance with analysis, trending and key performance indicator widgets on a customizable dashboard.
- Supported: Traffic Flow Analysis: Monitor network traffic behavior – down to the application level – to isolate overly permissive configurations.
- Supported: Access Path Analysis: Trace every available access path across the network and visualize relationships between network devices to identify risk access points.
- Supported: Network Mapping: Visualize and interact with highly complex network security environments or segmentations.
- Supported: Change Detection & Reporting: Isolate, document and alert on every ongoing change implemented throughout an existing firewall policies.
- Supported: Assessments & Controls: Define and employ unique security controls for customized, repeatable analysis and reporting on firewall policies.
FireMon Videos
Improve Security Operations. Improve Security Outcomes.
FireMon: Enforce Compliance
FireMon: Manage Change
FireMon Integrations
- Palo Alto Networks Next-Generation Firewalls - PA Series
- Palo Alto Networks Advanced URL Filtering
- Palo Alto Networks Virtualized Next-Generation Firewalls - VM Series
- VMware NSX
- VMware ESXi
- Check Point Quantum Security Gateway Next Generation Firewall
- Check Point Quantum Smart-1 Security Management
- AhnLab TrusGuard
- Check Point FireWall-1 / SmartCenter / VPN-1 Edge including VSX
- Cisco ASA / PIX / FWSM / ASA Context
- Dell SonicWall
- F5 AFM
- Fortinet Fortigate / VDOM
- Huawei USG / Eduemon
- Hillstone SG-6000 series
- IBM Proventia MFS
- Juniper Netscreen / SRX / ScreenOS / VSYS
- Secui NXG / MF2
- Stonesoft Management Center and detected firewalls
- Topsec Firewall
- WeGuardia FW
FireMon Competitors
FireMon Technical Details
| Deployment Types | On-premise, Software as a Service (SaaS), Cloud, or Web-Based |
|---|---|
| Operating Systems | Web based browser UI |
| Mobile Application | No |
| Supported Countries | All countries except North Korea, Iran, Sudan, Syria and Cuba |
| Supported Languages | English |
FireMon Downloadables
Frequently Asked Questions
Reviewers rate Support Rating highest, with a score of 7.7.
The most common users of FireMon are from Enterprises (1,001+ employees).
FireMon Customer Size Distribution
| Consumers | 0% |
|---|---|
| Small Businesses (1-50 employees) | 8% |
| Mid-Size Companies (51-500 employees) | 15% |
| Enterprises (more than 500 employees) | 77% |
Comparisons
Compare with
Reviews and Ratings
(113)Attribute Ratings
Reviews
(1-16 of 16)Companies can't remove reviews or game the system. Here's why
October 23, 2023
FireMon in a 100+ firewall environment.
We use FireMon to track changes in traffic, find rules that we can clean up and restrict, and report to higher-ups. I personally use it to export lists of potential rules to change based on control failures. We use it in most of our separate business units for a variety of reasons, but most are using it to improve security posture.
- Regular reporting.
- Dashboarding
- When my query is too complicated, the search bar changes to an advanced mode. I'd love for it to always be capable of the beginner mode since it takes a long time to get all the pieces of the query I need in advanced mode.
- Sometimes our active VPN tunnels will show "unused" in FireMon when they are used.
- I use the allowlisting feature frequently, but it's not possible to bulk-allowlist items.
- I'd love to be able to report on new control failures. There are a lot of reporting options available, but it seems like a manual export of a CSV is my only choice if I want to look at control failures.
February 25, 2023
Work in progress
We use FireMon to validate rules, test traffic pathing and to do TFAs for minimizing overly permissive rules.
- TFA and TFA output is fantastic
- Finding misconfigured rules is very easy
- We arent leveraging very much from FireMon
- The support site isnt the best
October 16, 2020
FireMon: Great Product
We currently use FireMon for reviewing/cleaning up rules and plan to implement policy planner by the EOY. It improves and simplifies documentation.
- Lets you know what is unused so you can lock it down
- Improves the process of review rules
- Open up knowledge base on Google, to make searching easier with better results
July 24, 2020
One more step in protecting firewalls
FireMon is used for tracking and reviewing firewall rules on a regular basis. It is used to save an old process of manually tracking all of the firewall rules.
- It can be customized in a lot of ways because you can write your own queries and assign them to controls.
- When the system has proper resources, FireMon is quite reliable and quick to pull new firewall rules.
- The user interfaces has a lot of options to use like revisions. It is helpful to look at revisions before and after changes to make sure everything went as planned. It also has some pie graphs that are good for showing in reports.
- There needs to be functionality to roll back changes to FireMon, or save copies of firewall documentation that can be reverted back. There are some manual fields you can fill in for firewall rules in FireMon (things such as notes about audits of the rules, when they were last audited, etc). If they are removed, there is no way to re-add them. There also needs to be an option to copy documentation from one firewall to another in case you have to RMA a firewall. I have been advised that the development team is adding these features sometime in the next year, but it has bit us a few times.
- I get the impression that the development team needs to give better documentation to the support team.
- No root access to the box. This has caused some issues such as not being able to eject a CD rom from a VM and not being able to install a backup client requiring us to code a backup script in house. There used to be sudo access, but it was removed.
July 03, 2020
FireMon provides a nice view
FireMon is used for firewall change management from request to implementation and verification. Security Manager is used extensively for policy test, and to enable cleanup and migration.
- FireMon provides a live view in to firewalls across the enterprise in a single tool.
- Policy Planner is customizable, and can be fit to your company's workflow requirements, to include API for Service Now.
- FireMon provides policy testing capability, and traffic flow analysis, which is critical for timely troubleshooting.
- The FireMon interface has evolved from a desktop client to a browser-based portal, but added many layers to navigating commands. A simpler interface with most commands and functions one click deep (and all visible) would be more efficient for daily ops workflow.
- Policy test is great, but doesn't differentiate when a policy is a user-auth rule, so the result may show that policy is already in place, when it is actually not usable.
June 26, 2020
FireMon – Bringing the heat!!
FireMon is actively being used by our security team to enforce oversight and compliance standards for our firewall environment. Additional business units are also leveraging the solution to help with reporting. Change management will use the tool to identify rogue changes or changes that may have been implemented outside of our internal change management guidelines. Firewall admins will use the solution to improve the quality of the rules that they generate and to assist with the review and approval workflow. Compliance leverages the solution to help prioritize which devices may need more assistance or a greater amount of overhead needed to remediate.
The main benefit at this time is that it helps us help ourselves and reduce the amount of calories we burn each month or quarter in identifying what issues we need to address in our environment. Getting ready for audit, or quarterly reviews of devices is exponentially easier. Having the ability to automate many of our controls into our workflow on an ongoing basis also reduces the amount of time spent in each of those scheduled reviews/clean up efforts.
- BU Reporting - Concerned about role segmentation? Want other business units to peek into how things are going on your devices but without having to give everyone under the sun admin credentials for those devices? FireMon accomplishes that for us. I'm able to take this solution to various business units and shop it around...and increase its ROI by getting additional processes or procedures built around its functionality.
- Remediation Reporting - A flexible interface allows for very granular information to be generated, exported, and manipulated. Want to export a list of expired rules, done. Rules that allow traffic but don't have logging enabled, done. Find a change that took place outside of your change window and identify who's manager to speak to - done.
- Support - Although this isn't a "Security Manager" specific example its worth emphasizing that with such a flexible and vestal tool there are multiple ways of doing things. Usually there is the way that I can find to fit my needs right now - but the support staff have been amazing as offering improvement suggestions for the way that I use the tool to accomplish the tasks I have to complete. Quick turnaround on tickets, and no micro-managing of prerequisites before offering a to schedule a webex or best guess first step.
- More granular documentation - A flexible tool is great, but with flexibility comes gaps in documentation. Nothing serious, but I have found myself asking questions to support on more than one occasion because I couldn't independently find the solution in the default documentation. "How can I generate a query that uses this argument rather than this one..." kinda stuff.
- More granular ability to "whitelist" specific rules - If security teams had perfect security, the business wouldn't be allowed to operate. That being the case there will always be compromises. Although I may care about a specific control as far as my environment is concerned, I will find myself with a laundry list of rules that will take an extended effort to clean up, or there is no good way around. Being able to acknowledge these and then circle back to them at regular intervals for review would be good - as opposed to having to make sure I filter those specific rules out of larger exports that I may dump into a ticket for remediation.
May 18, 2020
FireMon - Great tool for a clean environment
Currently, FireMon is used as an auditing tool to track all changes. Also, we use it for quarterly reviews to do rule cleanup on firewall rules. It is only being used by our IT Security Team for our firewall assets. This tool is required for record retention.
- Tracking all changes that occur on assets.
- Able to quickly identify duplicate or unused rules.
- Automation and workflow.
- Network maps have a lot of room for improvement
- How FireMon is updated; not able to pull updates directly from the system.
April 10, 2019
Another Fire-something, but a good one!
FireMon is a global tool that has been purchased to get a centralized view of our firewalls. This enables us to review our security posture and implement a compliance strategy with our customers.
- Customization of reporting is a nice feature. This is not available with other similar tools in the industry.
- Traffic Flow Analysis is widely used for looking at overly permissive rules.
- The dashboards are simple and enable us to do a presentation for non-technical audiences.
- The integration of firewalls is quite easy.
- Support is fast to respond and generally knowledgeable.
- The main area where FireMon will need improvement is a true knowledge base for customers and users. There is a lack of documentation and known facts. This means that as a user, the need for opening tickets for simple tasks is sometimes frustrating.
January 08, 2018
FireMon - Worth it.
FireMon is used by firewall administrators and security analysts on a regular basis. Administrators analyze proposed changes and existing rules base. Security analysts use it to audit.
- Fast analysis of flaws in the rules set
- Dynamic mapping
- Normalize varied platforms into a standard appearance
- Quickly find unused rules and objects
- Useful canned reports
- While you can evaluate potential changes to firewall rules, you can not implement the rules from FireMon.
- The GUI is easy to navigate, but learning where to go for the useful features takes a little practice.
- While the base product has reports for analyzing vulnerabilities, a separate license is required to get the full benefit.
January 17, 2017
Comprehensive firewall management tool review.
FireMon Security Manager is used to monitor our internal firewall usage, daily firewall changes, and is also used for firewall report creation. It is currently used just by the information technology department, although it is used by various users including technicians, administrators, and analysts. FireMon Security Manager helps the business comply with payment card industry data security standard compliance.
- Real-Time email alerting for firewall changes and the availability to review the new configuration and the previous one side by side is one of FireMon Security Manager’s strengths.
- Easy to read Overview Dashboard provides at a glance report charts of the Top 5 devices including control failures, firewall rule complexity and rules available for removal.
- The interactive network topology device mapping feature clearly shows network segments, firewall locations and external access points with the ability to access firewall rules with one click.
- The out of the box reporting is a nice feature, but the ability to build customized report with a report "wizard" would be an added benefit.
January 13, 2017
FireMon Security Manager - An Awesome Tool
We have customers that have this product and we help them with the installation. For one of them we have a managed service, and it means we manage the tool with tasks like doing firmware upgrades, adding/deleting devices and helping them with reports and other configurations. It is also used for training the customer’s users to and understand the reports and other features FireMon Security Manager has.
- Custom compliance assessments. Even [though] FireMon Security Manager has a complete suite of compliance assessments, it's a strength that we are able to build custom compliance assessments to review the status of the network based on our internal policies.
- Rule Search. Is an awesome tool because we can verify before creating a new firewall policy in the network if there is any other policy that is already created that fulfills the request. It lets you keep your firewalls clean.
- Building the maps is still a complex task to complete. It requires a lot of time to do it and it's not too intuitive.
January 13, 2017
Streamline Firewall Management with Firemon
FireMon is very useful for reporting any changes made to firewall policies in real-time. It sends an email of who, what, and when the change was made. Very using for alerting other network admins. Reports also show which firewall rules may be too open. Firewall rule cleanup is important to keep up with. FireMon makes it easier.
Another feature I like is the API. Checkpoint doesn't have an easy way to search for NATed IP addresses associated with host objects. In v7 we use a PHP script to compile the real IP address, NAT IP address, name, and comment data to be easily searchable to help find available NAT addresses to use. Unfortunately, v8 doesn't pull the NAT data from Checkpoint at this time. Support said they are working on it.
Another feature I like is the API. Checkpoint doesn't have an easy way to search for NATed IP addresses associated with host objects. In v7 we use a PHP script to compile the real IP address, NAT IP address, name, and comment data to be easily searchable to help find available NAT addresses to use. Unfortunately, v8 doesn't pull the NAT data from Checkpoint at this time. Support said they are working on it.
- The API is very useful for extracting data.
- The reporting feature is very usful for finding weaknesses in the firewall rule base.
- Notification of firewall changes to keep administrators abreast of what was changed including rule, objects, etc.
- v8 doesn't import the translated NAT address from Checkpoint like v7 does. This needs to be added back.
January 13, 2017
FireMon Review
It is used by our IT department to audit existing firewall configurations. It is helpful in finding redundant or unused rules in the configuration. We also find the traffic flow analysis tool extremely helpful. When creating new rules for new applications we find a lot of required ports are not properly documented and the flow analysis provides a great way to audit the rules traffic and narrow down the exact ports required for an application.
- Traffic Flow Analysis is an invaluable tool.
- The ability to run reports on PCI audits has been very useful.
- The logged connections history is great for showing management metrics.
- AD integration was a little difficult to set up.
- Upgrading was tricky but FireMon support did a great job working with us to complete an upgrade.
January 13, 2017
Best in class!
We are using FireMon to monitor firewall changes as well as to improve the rule base.
It is a really efficient tool, which helps us by having a slimmer and more responsive firewall, which is not cluttered by redundant rules.
- Firewall Optimization
- Audit
- Tracing traffic
- The install on column from firewall is not filtered, making it a bit difficult to analyze some rules
January 10, 2017
FireMon is Best but can improve
We use Firemon security Manager to maintain all the Cisco based firewalls across our organization. It is used to check the daily reports updates and changes on each and every firewall.
Mainly we use FireMon to get the audit reports on the firewalls.
Mainly we use FireMon to get the audit reports on the firewalls.
- Audit Reports
- Control Failures
- Policy Planner
- Policy Planner needs to be updated as per the organization
- More Detailed Reports for Auditing
January 10, 2017
Not bad
FireMon is only being used for firewall configuration monitoring purposes. In other words, any changes on the firewall we would check on FireMon.
- FireMon does a great job at monitoring any changes on the firewall rules
- Monitor any user accounts that perform the changes on the firewall
- Easy to set up
- Collecting logs of logs usage on the firewall from a SIEM device would be useful
- A report to generate all firewall rule changes within the last year