At a Fortune 100 Manufacturer, solutions4networks worked with the Internet and inter-company DMZs. The existing designs were assessed and recommendations were made when necessary, based on technical requirements and business needs. solutions4networks assisted in the implementation of the designs. Analysis of the firewall security rulebases (PIX ACLS and/or Conduits) for security exposures and logic errors was done and conversion of the security access lists into a form that was much more maintainable and suitable for audit review was provided, along with the associated documentation and knowledge transfer. Specifically, some of the rulebases were several hundred lines with little documentation; for these, we prepared logical descriptions and summarizations so that the Fortune 100 Manufacturer would know, logically, what their rulebase was doing. Where necessary, solutions4networks converted the old-style PIX Conduit statements into new-style Access-Lists. Tools developed by solutions4networks are utilized to simplify the ongoing maintenance of both the PIX firewall and Cisco IOS router-based security access lists.


