Rule review
Examine rules, objects, zones and documented exceptions for exposure, overlap and unused access.
Network & Firewall Assessment
A firewall audit is an independent review of the rules, access paths, remote connections and configuration that control traffic into and across your network. Umbrella Tech carries out firewall assessments for Australian organisations that are unsure what their firewall allows, are planning a replacement or need evidence for a security review. You receive clear findings, risk priorities and a practical remediation plan.
When this assessment is useful
Use it when the rule set has grown for years without review, before a firewall replacement, after a change of IT provider, or when a security framework or customer asks how network access is controlled. An undocumented rule set can permit far more access than the business needs, and missing logging makes incidents harder to investigate.
Assessment scope
Remote access
Review VPN, remote administration and third-party connections into the network.
Platform configuration
Check administrative access, firmware currency, logging, configuration backup and security features in use.
Network context
Relate the rules to topology and the business services behind required traffic.
Evidence and access
We confirm what we need at the start and work from read-only access or configuration exports wherever possible. Depending on scope, inputs may include firewall configuration exports, network diagrams, VPN and remote access records, firewall logs, change records and interviews with your firewall administrators. How the evidence is handled is agreed with your team.
Firewall configuration exports
Network diagrams
VPN and remote access records
Firewall logs
Change records
Interviews with your firewall administrators
Findings that lead to action
You receive a network security findings register ranked by risk, with recommendations for policy clean-up, configuration changes or firewall replacement. The review gives you the evidence needed to plan the work.
Illustrative findingsExamples only
- ExampleBroad rules allowing any service between zones
- ExampleRemote access exceptions with no owner
- ExampleAdministrative interfaces reachable from user networks
- ExampleMissing log retention
These are examples of the issues a review can examine, rather than findings about your organisation.
How it runs
Assessment method
01
Confirm the scope
Agree the firewalls, sites, remote access paths and methods in scope, and any testing that needs a change window.
02
Gather and examine evidence
Analyse the configuration and logs, then check unclear rules with the system owners.
03
Prioritise and plan
Rank findings by risk and effort, and set out a practical remediation sequence.
04
Review the next steps
Walk through the results with your team and agree what moves to implementation.
From assessment to remediation
We can take agreed recommendations through design, implementation and validation. You can also use the plan with your internal team or existing technology provider. Implementation scope is set from the findings. Other reviews are listed on Assessments & Roadmaps.
Assessment outputFindings and remediation roadmap
Umbrella TechWe deliver the improvements
DesignImplementValidate
Your organisationYour internal team
Your partnerYour existing technology provider
Frequently asked questions
Can't see your question? Ask us directly →
What does a firewall audit include?
A review of the rule base, remote access, administrative access, logging and platform configuration, related back to the business services that need each rule. The output is a findings register and a remediation plan.
How does this differ from the infrastructure assessment?
This firewall review concentrates on policy and network security exposure. The broader Technology & Infrastructure Review also examines performance, resilience, server dependencies and supportability.
How long does the assessment take?
It depends on the number of firewalls, the size of the rule base and how quickly evidence and owners are available. Scope and timing are confirmed in discovery.
What evidence or access is required?
Usually a configuration export, recent logs, network diagrams and time with the people who manage the firewall. Read-only access is preferred, and no changes are made without agreement.
How much does a firewall audit cost?
Cost depends on the number of firewalls and sites, the size of the rule base and the depth of review. Scope, timing and price are confirmed in discovery before work starts.
Establish your current position
Tell us about your firewalls, your sites and what prompted the review. We will help define a practical starting point.