Change Manager

The Skybox solution for automated firewall change management oversees the entire life cycle of rules and objects

Automated, Closed-Loop Change Workflows

Skybox® Change Manager workflows for firewall rule creation, recertification and deprovisioning help maintain continuous compliance, close security gaps and limit vulnerability exposures.

Comprehensive Risk Assessment

Know if a proposed firewall rule change could expose a vulnerable asset, create a security gap or violate policy.

Complete Path Discovery

Ensure path identification is accurate — even in NAT-rich environments — and see options for full access routes and details of changes at each step.

Rule Recertification

Simplify, formalize and automate workflows to review rules for recertification or deprovisioning to keep firewalls clean, secure and compliant.

Save Time, Costs and Drive Innovation

Let Skybox automate rule life cycle management, saving your team time at every step in the workflow and ensuring security and compliance even as your business changes.

Reduce Resource Drain

Keep up with the speed of your business without sacrificing resources by automating path analysis, risk assessment, provisioning and change verification.

Make it Right, Right Away

Avoid unnecessary changes by automating existing access checks and reduce rollbacks with proactive assessments and third-party validation.

Support Strategic Initiatives

Build a program that scales to handle change-intensive times such as during mergers and acquisitions, onboarding third-parties, digital transformation and more.

All you need to know about automated security policy management

Dig deep into how Skybox can automate a variety of policy management processes from optimization and cleanup, to compliance, rule changes and more.

Download E-Book

Features

Change Manager’s intelligently automated workflows don’t just automate rule implementation, but also the surrounding analysis needed to ensure every rule is secure and compliant.

Ticketing System Integration

Serves as an extension to existing ticketing system or as its own system, formalizing change requests to streamline workflows.

Model-Driven Path Analysis

Uses the Skybox model to check if proposed access changes are already in place and which devices are relevant to the change.

Policy Assessment

Analyzes proposed changes for violations to rule, access or configuration policy; rejected changes are returned to ticket owners for additional consideration.

Vulnerability Exposure Analysis

Using the Skybox model, analyzes how the proposed change could open up attack paths to previously protected vulnerable assets.

Third-Party Validation

Provides objective verification that implemented changes match the original change request to ensure all changes are authorized and made as intended.

Rule Review

Assigns metadata to every created rule including rule owner, review date and other details to systematically recertify rules.

Download Data Sheet

140+ integrations

Skybox pulls and enhances data from your existing security, networking and operational technology. Our robust integrations cut through complexity to simplify management, improve processes and optimize solutions.