Security · Managed Security Operations · 05
Firewall and network security review
A firewall and network security review examines the rules and devices that control traffic into, out of and across the environment: perimeter firewalls, internal segmentation, remote access gateways, cloud security groups and the policies on each. It is needed when rulebases have grown for years without cleanup, when nobody can say why a rule exists, when a segmentation claim must be proven to an auditor or customer, or after a change such as a new site, a cloud deployment or a merger. The review produces a rulebase analysis with unused, overly broad and risky rules identified, verification that the segmentation the organization believes it has is real, a hardened device configuration baseline, and a change procedure so the rulebase does not decay again.
Scope
What the review covers.
- Rulebase analysis: unused, shadowed, overly permissive and undocumented rules
- Segmentation verification between zones and against the intended design
- Device configuration: management access, logging, firmware, administrative accounts
- Remote access and site-to-site connectivity
- Cloud security groups and network access controls
- Change control procedure for network security rules
Deliverables
What you receive.
| Deliverable | Form |
|---|---|
| Rulebase analysis | Findings with recommended removals and tightenings |
| Segmentation verification | Tested paths between zones with evidence |
| Configuration baseline | Hardened settings documented per device class |
| Change procedure | Request, review, approval and periodic recertification |
Prerequisites
What we need from you.
- Read access to firewall, network device and cloud consoles, or configuration exports
- Network diagrams and the intended segmentation design
- Knowledge of the business flows the rules must allow
Related
Where this sits.
By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days
Questions
Asked before engaging.
Will you remove rules?
We identify them with evidence and recommend. Removal is scheduled with your team, because an undocumented rule sometimes carries an undocumented business process.
Do you cover cloud networks?
Yes. Security groups, network access control lists and cloud firewalls are in scope alongside physical and virtual devices.
How often should this be repeated?
At least annually, and after major change. The change procedure keeps the rulebase clean between reviews.