Firewall Builder is multi-platform firewall
configuration and management tool. It consists of a GUI
and set of policy compilers for various firewall
platforms. Firewall Builder uses object-oriented
approach, it helps administrator maintain a database of
network objects and allows policy editing using simple
drag-and-drop operations. Firewall Builder currently
supports iptables, ipfilter, OpenBSD PF and Cisco PIX.

Being truly vendor-neutral, Firewall Builder can
generate configuration file for any supported target
firewall platform from the same policy created in its
GUI. This provides for both consistent policy
management solution for heterogeneous environments and
possible migration path.

Firewall Builder allows for management of multiple
firewalls using the same network object database.
Change made to an object is immediately reflected in
the policy of all firewalls using this object.
Administrator only needs to recompile and install
policies on actual firewall machines.

In Firewall Builder, administrator works with an
abstraction of firewall policy and NAT rules; software
effectively "hides" specifics of particular target
firewall platform and helps administrator focus on
implementation of security policy. Backend software
components, or policy compilers, can deduct many
parameters of policy rules using information available
through network and service objects and therefore
generate fairly complex code for the target firewall,
thus relieving administrator from having to remember
all its details and limitations. Policy compilers can
also run sanity checks on firewall rules and make sure
typical errors are caught before generated policy is
deployed.

Download File Size:18.65 MB

---