Rule Documentation and Recertification

Keep Your Security Policy up to Date

A key best practice for security policies is to periodically review each rule and remove the ones that are no longer required. Since policies regularly contain hundreds of rules, and there is often more than one administrator making changes, it’s optimal to document each rule as its created, and to assign an expiration date.

Automating the Rule Certification Process

SecureTrack Rule Recertification enables firewall managers to continuously weed out rules that are no longer needed and prevent rule bases from growing out of control. With SecureTrack, you can document each rule, identify the technical and business owners, and indicate an expiration date upon which the rule must be reviewed and either removed or recertified. You can schedule triggered alerts and reports for expiring rules, rule owner, or any other field so that you always know when a rule needs to be recertified.