Firewalls are among the devices that undergo configuration changes every day. Over time, these frequent changes can introduce misconfigurations that increase risk. Gartner has reported that the vast majority of firewall breaches stem from misconfigurations.
Firewall policy context added to SOAR playbooks and response workflows
Automated and governed acations triggered by policy analysis results
Reduced manual effort in incident response and remediation
Consistent enforcement of firewall changes through controlled workflows
Integration scope
Integrations with firewalls require API and syslog communication with firewalls. API communication brings all configuration data from firewalls and acting on firewalls is also made with APIs.
What Opinnate reads
Incident and playbook triggers from SOAR platforms
Workflow execution requests and response actions
What Opinnate can act on
Execute governed firewall policy actions through automation workflows
Provide policy analysis and context to SOAR playbooks
Support controlled remediation actions based on firewall rules and topology
Supported Vendors
Supported and planned SOAR platforms are continuously expanding.