Firewall reviews that are repeatable, not guesswork.
Every ruleset upload becomes an immutable snapshot of that firewall. Deterministic checks find permissive, shadowed and risky rules, changes are tracked rule by rule, and a finding closes only when a later ruleset shows the fix.
Indirect path: 10.0.8.14 can reach DB subnet via 3 ALLOW rules.
Illustration with sample data
What Firewall Policy Assurance does
Each firewall is an asset, and each upload of its rulebase is an immutable, encrypted snapshot that is copied to the Evidence Library. Rules are normalised and tracked across snapshots, so you see exactly which rules were added, changed or removed. Deterministic checks find overly permissive rules, shadowed rules and risky services. Your own policy packs add organisation-specific conditions, and missing data is Unknown, never a failure.
Findings are shared: one per firewall per check, re-confirmed when found again and closed only when a later ruleset verifies the fix. Reviewers certify rules, and high-risk rules need a dedicated permission. Exceptions must expire and can never be approved by the person who requested them. A material change on a rule that touches a risk's assets raises a reassessment proposal. AI only explains results and writes executive summaries. It never decides an outcome, severity or score.
Key capabilities
Immutable snapshots
Every upload is a fingerprinted, encrypted snapshot linked to its firewall.
Rule-level change tracking
Added, changed and removed rules across snapshots.
Deterministic checks
Permissive, shadowed and risky-service rules; Unknown where data is missing.
Policy packs
Built-in and custom conditions for your network policy.
Certification & exceptions
Reviewer certification, special rights for high-risk rules, exceptions that expire.
Verified remediation
Shared findings close only when a later ruleset shows the fix.
The business case.
Efficiency, multi-framework alignment, reduced complexity and streamlined processes: what Firewall Policy Assurance changes for your programme.
Six-monthly rule reviews
Documented, repeatable reviews with certification and owners.
Fixes verified
A finding closes on evidence from the next ruleset, not on a promise.
Less manual rule review
Deterministic checks and change tracking focus experts on what changed.
Rules, not opinions
Every outcome comes from a documented check, with AI limited to explanation.
Efficiency figures compare the effort of each workflow cycle in RiskVantis with the same work done manually or in a traditional GRC tool. Your result depends on your starting point; we will model it with you in a demo.
From setup to outcome.
Register the firewall
Create it as an asset and upload its rulebase.
Analyse
Run deterministic checks and policy packs on the snapshot.
Certify
Review, certify rules and grant expiring exceptions.
Verify
The next upload confirms fixes and tracks every change.
Supports your obligations.
Firewall Policy Assurance contributes evidence and coverage to these frameworks and regulations.
Common questions.
Does AI decide which rules are risky?
No. Outcomes, severities and scores come from deterministic checks. AI only explains observations and drafts summaries.
When does a firewall finding close?
Only when a later ruleset for the same firewall verifies the fix. An upload alone never closes it.
Can one firewall's findings pile up across reviews?
No. There is one shared finding per firewall per check, re-confirmed rather than duplicated.
Works better together.
Configuration Assessment (CIS)
Upload a CIS Benchmark, select your targets and run a review. Each result keeps its captured output and disposition, evidence is filed automatically, and dashboards show…
Learn more →Control Assurance & Security ReviewsAsset Inventory, Ownership & RACI
A single asset inventory shared by every module. It is fed by imports, cloud discovery and assessments, matched on reliable identifiers rather than names, and governed…
Learn more →Risk ManagementRisk Intelligence & Appetite
When intelligence, firewall rules, linked records or a control's compliance status change, RiskVantis proposes a reassessment with a preview of the new score. It flags…
Learn more →See Firewall Policy Assurance in action.
Book a 30-minute walkthrough tailored to your frameworks, vendors and team.