DS Policy Optimizer
DS Policy Optimizer
DS Policy Optimizer
Policy Optimizer
Continuous compliance with automated rule
review, recertification and decommissioning
THE CHALLENGE: Stay compliant, document everything, do it automatically.
Rules get outdated. That’s just what they do. As networks change and access requirements shift,
security controls have knock-on effects on other rules, policies and access controls. Security teams
must detect these network dynamics and recertify rules to ensure airtight compliance.
The manual process of decommissioning and recertification leaves enterprises with a bag full of
outdated, redundant, overly permissive and risky rules that lead to compliance failures and increased
risk.
Policy Optimizer communicates to everyone involved with the rules, giving you a central hub for
security teams, policy owners, application admins and business teams to validate rules, check for
compliance and recertify.
Orchestration kicks into gear to decommission or recertify rules with complete documentation for
every last statement in the rule syntax.
CUSTOMIZED WORKFLOW
Easily change the built-in workflow to meet your custom needs. Because it
is built on BPMN 2.0 task types, you can utilize a workflow specific to your
environment. When integrated with the FireMon Policy Planner module,
Policy Optimizer can be extended to create change tickets for removable
rules and invoke application-level recommendations. This integration closes
the loop on the rule lifecycle in that rules are effectively removed when
they’re at the end of their useful life.