top of page

Search results

Search this site

648 results found with an empty search

  • Amazon Web Services (AWS) & AlgoSec | AlgoSec

    AlgoSec seamlessly integrates with network security controls in Amazon Web Services AWS as well as other security devices across your hybrid network AWS & AlgoSec Hybrid cloud security policy and configuration management AlgoSec seamlessly integrates with network security controls in Amazon Web Services (AWS), as well as other security devices such as firewalls, whether deployed on-premises or in the cloud, in order to deliver unified security policy management across the hybrid network. AlgoSec also enables effective security management of the various security control layers across the multi-cloud estate. AlgoSec offers instant visibility, risk assessment, and central policy management, enabling a unified and secure security control posture, proactively detecting misconfigurations. Schedule a demo Solution brochure Key benefits Continuous visibility Get a full network map of your entire hybrid network estate – both on-premises and in public and private clouds. Understand your security policy with traffic simulation queries. Central management of security policies Get an aggregated view of similar security groups across accounts, regions, and VPCs. Easy migration By automatically discovering, mapping, and migrating connectivity configurations with firewalls and security groups, AlgoSec simplifies the complex process of migrating business applications to the cloud. Hybrid network change management Leverage a uniform network model and change management framework that covers the hybrid and multi-cloud environment Learn more about network security in AWS See how AWS users benefit from AlgoSec We empower the world’s most complex organizations to gain visibility, reduce risk and process changes at zero-touch across the hybrid network. Protect Outbound Traffic in an AWS Hybrid Environment The Fundamentals of AWS Security Groups New! How to Manage Dynamic Objects in Cloud Environments How to Intelligently Select the Security Groups to Modify When Managing Changes in AWS The Right Way to Audit AWS Policies Combining Security Groups and Network ACLs to Bypass AWS Capacity Limitations Change Management, Auditing and Compliance in an AWS Hybrid Environment Contact sales Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue Explore the AWS & AlgoSec Partnership Security management in the hybrid cloud Solution brief Migrating to AWS in six simple steps Read the blog

  • Multi-Cloud Security Network Policy and Configuration Management | AlgoSec

    Manage multi-cloud security with effective policy and configuration strategies to ensure compliance, optimize performance, and protect your network infrastructure. Multi-Cloud Security Network Policy and Configuration Management ---- ------- Schedule a Demo Select a size ----- Get the latest insights from the experts Choose a better way to manage your network

  • MITRE attack framework

    MITRE ATT&CK offers an open source framework for understanding adversarial tactics, techniques, and common knowledge in use today. MITRE attack framework Select a size Which network Can AlgoSec be used for continuous compliance monitoring? Yes, AlgoSec supports continuous compliance monitoring. As organizations adapt their security policies to meet emerging threats and address new vulnerabilities, they must constantly verify these changes against the compliance frameworks they subscribe to. AlgoSec can generate risk assessment reports and conduct internal audits on-demand, allowing compliance officers to monitor compliance performance in real-time. Security professionals can also use AlgoSec to preview and simulate proposed changes to the organization’s security policies. This gives compliance officers a valuable degree of lead-time before planned changes impact regulatory guidelines and allows for continuous real-time monitoring. What is the MITRE ATT&CK® framework? MITRE ATT&CK offers an open source framework for understanding adversarial tactics, techniques, and common knowledge in use today. It aggregates and catalogs cyber threats based on real-world adversary behavior observed across thousands of incidents, and outlines defenses to protect organizations against them. MITRE ATT&CK helps organizations understand how adversaries operate and guides them towards developing security measures to protect their assets and operations. Understanding the MITRE ATT&CK layout MITRE ATT&CK is organized into three matrices, each representing a dedicated technology domain: Enterprise Mobile Industrial control systems (ICS) Most organizations will use the enterprise matrix, which covers attacks against Windows, macOS, Linux, cloud platforms, network infrastructure, and containers. However, companies must first understand what malicious actors are seeking to achieve. Tactics The enterprise matrix opens to 14 columns representing adversary tactics, i.e., high-level goals: Initial access (getting in) through execution Reconnaissance Persistence Execution Privilege escalation Exfiltration and impact Next, comes the how. Techniques and Sub-Techniques Each tactic column leads to rows containing techniques and sub-techniques, i.e., specific methods for achieving a goal. The latest MITRE ATT&CK v18 features 8 to 47 techniques for each tactic. For example, under Reconnaissance, there are 11 techniques, including “Active Scanning” and “Phishing for Information.” Persistence lists techniques such as "Create Account" or "Boot or Logon Autostart Execution." Sub-techniques are nested within techniques for specific attack implementations. For instance, under "Phishing," you have "Spearphishing Attachment," "Spearphishing Link," "Spearphishing via Service," and “Spearphishing Voice.” This granularity is key, as you need a different technique to defend against phishing via email attachments than via compromised messaging platforms. MITRE ATT&CK Matrix The MITRE ATT&CK Matrix catalogs adversaries into groupings such as data sources, cyber threat intelligence (CTI) groups, and defense strategies. This allows users to filter their navigation to specific adversaries, tools, and campaigns relevant to their business operations. MITRE ATT&CK is constantly updated as adversaries and their tactics, techniques, and procedures (TTPs) evolve. Each version has new features based on empirical threat intelligence, incident response findings, and community research. This is especially important in the face of emerging threat trends, such as AI-assisted cyberattacks and the growth of ransomware-as-a-service (RaaS). Benefits of the MITRE ATT&CK framework MITRE ATT&CK doesn’t simply offer threat intelligence but also shapes organizations’ security operations for multiple use cases: Threat intelligence gathering: Gain context for cloud indicators of compromise (IOCs); beyond "bad IP address detected," know if the address is associated with a specific technique adversaries use for command and control. Threat hunting: Use a hypothesis-driven approach to systematically hunt for evidence of specific techniques used, instead of randomly searching logs. Attack simulation and red team exercises: Leverage real-world, standardized playbooks for testing both offensive capabilities and defensive responses; map your red team's successful tactics against your blue team's detection rates to identify coverage gaps with precision. Gap analysis: Visualize which techniques you can detect, which you can prevent, and most importantly, which represent blind spots in your security architecture. Response validation: Test whether your incident response procedures actually work against the techniques most relevant to your threat profile. The use cases above are a proof of concept, but the bottom line is the actual benefits companies reap from them: Shared understanding of the threat landscape: MITRE ATT&CK offers a common language for discussing adversaries across technical teams, executives, and even board members. Accurate simulation of attacks and validation of defenses: Mapped exercises tell you whether you can detect and respond to techniques adversaries actually use. Informed development and deployment of security policies: Craft policies that specifically address the techniques most relevant to your business risk profile. Intelligent selections of security solutions: Ask vendors which ATT&CK techniques they address and check those claims against your coverage gaps. Best practices for MITRE ATT&CK mapping The MITRE ATT&CK framework's value comes from mapping security data to specific ATT&CK techniques. But mapping without context is like having a map without knowing your starting location; it’s technically interesting, but operationally useless. The CISA best practices guide identifies two fundamental approaches to ATT&CK mapping: Mapping into finished reports (creating security insights for decision-making) Mapping into raw data (embedding ATT&CK context into operational security workflows). Understanding which approach fits your business needs is crucial. Mapping MITRE ATT&CK into finished reports This approach starts with collating incident reports, threat intelligence, or post-mortem analyses, extracting behavioral patterns, and then translating them into ATT&CK language. This creates artifacts that inform security strategy, resource allocation, and executive communication. The process follows six steps: Find the behavior. Identify specific actions the adversary took. Look beyond IoCs, such as malware names and IP addresses, to “how the adversary interacted with specific platforms and applications.” Research the behavior. Was this a standard administrative task gone rogue or a sophisticated persistence mechanism? Investigate the original source, technical details, timing, and surrounding activity. Consult malware analysis reports from reliable organizations, security reports, or your own forensic data. Translate the behavior into a tactic. Map the identified behavior to one of the tactics in the MITRE framework. Identify the technique used for the tactic. For example, within the Execution tactic, scan for the technique that best describes the method. ATT&CK provides detailed descriptions for each technique to help you map to the right one. Identify the sub-techniques. Was it a Windows scheduled task? A Linux Cron job? The sub-technique matters because detection and mitigation strategies for each differ significantly. Compare results to those of other analysts. CISA recommends that analysts treat mapping as a team sport where they work together to identify ATT&CK techniques and ensure quality control. Different analysts examining the same behavior should arrive at the same ATT&CK mapping. Mapping MITRE ATT&CK into raw data While finished reports inform strategy, mapping into raw data enables operations. This approach embeds ATT&CK context directly into your detection engineering, threat hunting, and daily security workflows. Organizations can choose from three viable starting points, each suited to different operational scenarios. 1. Start with a data source A specific data source , say, authentication logs from your cloud identity provider, allows you to see what ATT&CK techniques generate observable activity in these logs. For authentication logs, you would map to techniques like "Valid Accounts," "Brute Force," and "Credential Stuffing." You would then define procedures, i.e., the specific log patterns that indicate these techniques in action. This approach is ideal when deploying new data sources or optimizing existing ones. 2. Start with specific tools or attributes If threat intelligence indicates adversaries targeting your industry are using a specific software , malware family, or penetration testing tool, you can start mapping from there. After identifying techniques that the tool enables, you can then look up the groups and campaigns that have implemented these techniques. Cobalt Strike (S0154) , for example, maps to dozens of techniques across multiple tactics. By understanding this breadth, you can develop ways of identifying not just the tool itself but the behaviors it facilitates. 3. Start with analytics Just as adversaries use software to target businesses, analysts can use cloud enterprise tools to track adversary behavior. SIEM platforms like the AlgoSec Cloud Enterprise (ACE) have built-in detection rules that collect, log, and correlate events from multiple endpoints, cloud services, and identity providers. These events originate as raw telemetry, which are then mapped to specific MITRE ATT&CK techniques. Mapping with detection analytics from such tools is increasingly the most practical approach for organizations with mature security tooling. Note: Mapping into raw data shouldn't exist in isolation. Operational mappings should ultimately feed into finished reports. Your day-to-day detection analytics reveal what you're actually seeing in your environment. These observations, aggregated and analyzed over time, become the foundation for strategic reporting. How to ACE your operations with the MITRE ATT&CK framework Enterprises generate millions of security events daily across cloud infrastructure, endpoints, network boundaries, and SaaS applications. With this deluge, it is unreasonable to expect analysts to hand-map behaviors. Enter AlgoSec Cloud Enterprise (ACE), a cloud enterprise tool that offers full visibility into your operations by collecting log data, aggregating and contextualizing it, and then mapping it automatically to MITRE ATT&CK techniques. This transforms raw telemetry streams into structured threat intelligence aligned with the MITRE ATT&CK framework. ACE’s finished reports provide a clear, risk-oriented view of your adversary exposure, using language that every analyst and decision-maker can understand. See why more than 2,200 companies trust AlgoSec. Schedule a demo today. Get the latest insights from the experts Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

  • AlgoSec’s Network Security Management Solution Now on Cisco’s Global Price List

    AlgoSec extends Cisco ACI’s policy-based automation to security devices in the Data Center AlgoSec’s Network Security Management Solution Now on Cisco’s Global Price List AlgoSec extends Cisco ACI’s policy-based automation to security devices in the Data Center November 26, 2019 Speak to one of our experts Ridgefield Park, NJ, USA (November 26, 2019) – AlgoSec, a leading provider of business-driven network security management solutions, today announced the availability of its integrated solution for Cisco ACI and security devices on Cisco’s Global Price List. This enables Cisco’s direct and channel sales network to offer AlgoSec’s solutions to customers through Cisco’s SolutionsPlus program. Cisco ACI, the industry’s leading software-defined networking solution, facilitates application agility and Data Center automation. ACI enables scalable multi-cloud networks with a consistent policy model and provides the flexibility to move applications seamlessly to any location or any cloud while maintaining security and high availability. AlgoSec integrates with Cisco ACI to extend ACI’s policy-based automation to multi-vendor security devices across the Data Center, on its edges and in the cloud. AlgoSec Security Management Solution for ACI enables customers to better ensure continuous compliance and automates the provisioning of security policies across ACI fabric and multi-vendor security devices connected to the ACI fabric, helping customers build more secure Data Centers. “AlgoSec and Cisco ACI share an application-centric approach to network security management, allowing customers to realize the full potential of intent-based Data Centers. We are delighted to be a part of Cisco’s Solutions Plus program and get listed on Global Price List,” said Avishai Wool, CTO and co-founder at AlgoSec. “Extending Cisco ACI’s policy driven automation to security devices, closely aligns with AlgoSec’s strategies and will deliver powerful benefits to our mutual customers. It enables customers to build truly automated IT environments that are flexible, secure and responsive to their business needs,” added Bruno Weinberger, VP, Strategic Alliances at AlgoSec. “Networking teams are increasingly adopting application-centric, policy-driven approach to meet rapidly changing requirements from IT teams and application owners,” said Ranga Rao, Senior Director of Product Management and Solutions, Cisco Data Center Networking. “AlgoSec security management solution extends ACI’s policy model and automation capabilities to security devices, allowing customers and partners to build agile and more secure data centers.” Cisco and AlgoSec’s channel partners share an equal level of enthusiasm about this initiative. “This collaboration between Cisco and AlgoSec is a great news for Conscia. As a Cisco Gold Partner and AlgoSec’s strategic partner, we hope to enable customers to realize the potential of application driven security automation, help ensure continuous compliance and reduce the attack surface in their Data Centers” said Henrik Skovfoged, System Engineering Director, Conscia A/S. About Cisco DevNet SolutionsPlus Program DevNet Solutions Plus 2.0 places a select set of “Cisco Compatible” products on the Cisco Systems price list, making it faster for customers to order non-Cisco products from Cisco sales teams and channel partners. Products in Cisco DevNet Solutions Plus 2.0 complement and augment Cisco’s advanced technology products. Cisco DevNet Solutions Plus 2.0 vendors are also part of the Cisco® Solution Partner Program. About AlgoSec The leading provider of business-driven network security management solutions, AlgoSec helps the world’s largest organizations align security with their mission-critical business processes. With AlgoSec, users can discover, map and migrate business application connectivity, proactively analyze risk from the business perspective, tie cyber-attacks to business processes and intelligently automate network security changes with zero touch – across their cloud, SDN and on-premise networks. Over 1,800 enterprises , including 20 of the Fortune 50, have utilized AlgoSec’s solutions to make their organizations more agile, more secure and more compliant – all the time. Since 2005, AlgoSec has shown its commitment to customer satisfaction with the industry’s only money-back guarantee .All product and company names herein may be trademarks of their registered owners. Media Contacts: Tsippi [email protected] Craig CowardContext Public [email protected]+44 (0)1625 511 966

  • Data center migration checklist + project plan template

    Minimize risks and maximize benefits with a successful data center migration Explore key considerations and strategies Data center migration checklist + project plan template Select a size Which network Can AlgoSec be used for continuous compliance monitoring? Yes, AlgoSec supports continuous compliance monitoring. As organizations adapt their security policies to meet emerging threats and address new vulnerabilities, they must constantly verify these changes against the compliance frameworks they subscribe to. AlgoSec can generate risk assessment reports and conduct internal audits on-demand, allowing compliance officers to monitor compliance performance in real-time. Security professionals can also use AlgoSec to preview and simulate proposed changes to the organization’s security policies. This gives compliance officers a valuable degree of lead-time before planned changes impact regulatory guidelines and allows for continuous real-time monitoring. Data center migration What is a data center migration? What are the four types of data center migration? What are data center migration best practices? How to plan for a successful data center migration? What are some common challenges of a data center migration? What are some common drawbacks of a data center migration? Checklist for a successful data center migration What are some data center migration tools? Get the latest insights from the experts Use these six best practices to simplify compliance and risk mitigation with the AlgoSec White paper Learn how AlgoSec can help you pass PCI-DSS Audits and ensure Solution overview See how this customer improved compliance readiness and risk Case study Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

  • Firewall compliance tools vs. GRC platforms | AlgoSec

    Compare firewall compliance tools and GRC platforms, when each fits, and why security teams often need technical evidence plus enterprise governance Firewall compliance tools vs. GRC platforms ---- ------- Schedule a Demo Select a size ----- Get the latest insights from the experts Choose a better way to manage your network

  • Check Point and AlgoSec | AlgoSec

    AlgoSec & Check Point AlgoSec seamlessly integrates with Check Points NGFWs to automate application and user aware security policy management and ensure that Check Points’ devices are properly configured. AlgoSec supports the entire security policy management lifecycle — from application connectivity discovery, through ongoing management and compliance, to rule recertification and secure decommissioning. Solution brief Cloudguard datasheet How to Check Point Regulatory compliance Learn how to prepare your Check Point devices for a regulatory audit Check Point Risk Assessment Learn how assess risk on your Check Point devices with AlgoSec Mapping your Network Visualize your complex network, including your Check Point devices, with a dynamic network topology map See how Check Point Users Can Benefit from AlgoSec Schedule time with one of our experts

  • Introducing Objectflow: Network Security Objects Made Simple | AlgoSec

    In this webinar, our experts demonstrate the usage of Objectflow in managing network objects Webinars Introducing Objectflow: Network Security Objects Made Simple In this webinar, our experts demonstrate the usage of Objectflow in managing network objects. January 31, 2022 Yoni Geva Product Manager Jacqueline Basil Product Marketing Manager Relevant resources AlgoSec Horizon AppViz – Rule Recertification Watch Video Changing the rules without risk: mapping firewall rules to business applications Keep Reading Choose a better way to manage your network Choose a better way to manage your network Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

  • Semiconductor Materials | AlgoSec

    Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. Leading semiconductor and display equipment company reduces risk and increases efficiency Organization Semiconductor Materials Industry Utilities & Energy Headquarters International Download case study Share Customer
success stories "Today, we are many times more efficient and secure thanks to AlgoSec." Background The company’s globally distributed network includes more than ten demilitarized zones (DMZs) with 20 billion events processed per month across the multiple company locations. Firewalls play a vital role in protecting intellectual property at the perimeter level. Every firewall event is logged and processed. Challenges The company’s operations require a very large and diverse network with a large Global Network Security operations team that is spread across the US, EMEA and Asia. The team is responsible for the management of all perimeter and internal security solutions, remote access solutions, customer connectivity solutions and the Security Operations Center (SOC). “We suffered from a lot of network security issues that prevented us from running at the speed of the business,” declared the Senior Manager of Global Security and SOC. Auditing Firewall rules was a long, tedious and painful process Access revocation was performed using a manual reminders process The diverse army of firewalls across the network estate resulted in a non-standard way of making and executing Firewall change requests, requiring many steps to complete the process An out-of-the-box ServiceNow workflow with limited functionality couldn’t keep up Limited reporting capabilities relied on manual data processing There was no way to track performance of SLAs The cumbersome approval process required managers to login to the company ticketing portal Notification of unauthorized or unapproved changes on firewalls was clumsy and slow The company decided to acquire an orchestration and automation solution that could identify and mitigate risky firewall rules. Since the company is subject to many industry and legal regulations, the solution would have to automate compliance reporting as well as ensure accountability for all firewall changes. The solution also would have to integrate into existing ticketing processes and workflows while enabling the company, at its own pace, to advance to more and more automation. Solution The company evaluated several solutions by reviewing their features carefully and putting the best among them to the test in parallel proof of concept projects. The senior manager recalls, “We had a very close look at the leading solutions in the Network Security Policy Management space. One of them definitely stood out from the pack as the superior solution.” The company chose AlgoSec Horizon Security Analyzer (AFA) and AlgoSec Horizon FireFlow (AFF), two of the flagship products in the AlgoSec arsenal. AlgoSec Horizon Security Analyzer ensures security and compliance by providing visibility and analysis into complex network security policies. AlgoSec Horizon FireFlow improves security and saves security staffs’ time by automating the entire security policy change process, eliminating manual errors, and reducing risk. Results In short order, the company was able to capitalize on the significant advantages of the AlgoSec solution. “It was easy to customize the AlgoSec solution to fit into our environment and enhance it,” continued the senior manager. “But it didn’t take long before we were using the power of the two products to help us adopt better practices for lower risk, higher security, and better efficiency of our team.” Today, the AlgoSec solution is delivering significant improvements to the company’s security processes such as: Visibility across the entire network with an easy-to-use-and-understand executive dashboard Integration with the ticketing tool Proactive analysis of change requests to ensure compliance risk mitigation Prevention of unauthorized changes Elimination of human errors and associated application outages Automatic discovery and mapping of application-connectivity flows Single Sign On (SSO) integration that eliminated static user passwords Support for mobile firewall change-request manager approval “We are a big company with an enormous volume of network-security activity,” stated the manager. “In addition to the superior capabilities of the solution, we greatly appreciated the excellent customization opportunities that AlgoSec’s Professional Services were able to help us with. Today, we are many times more efficient and secure thanks to AlgoSec.” Schedule time with one of our experts

  • Play by the rules: Automation for simplified rule recertification | AlgoSec

    Learn how automation can simplify the process of rule recertification and help determine which rules are still necessary Webinars Play by the rules: Automation for simplified rule recertification As time goes by, once effective firewall rules can become outdated. This results in bloated security policies which can slow down application delivery. Therefore, best practice and compliance requirements calls for rule recertification at least once per year. While rule recertification can be done manually by going through the comments fields of every rule, this is a tedious process which is also subject to the weaknesses of human error. Automation can simplify the process and help determine which rules are still necessary, if done right. Join security experts Asher Benbenisty and Tsippi Dach to learn about: Rule recertification as part of application delivery pipeline The importance of recertifying rules regularly Methods used for rule recertification The business application approach for rule recertification October 27, 2021 Tsippi Dach Director of marketing communications Asher Benbenisty Director of product marketing Relevant resources AlgoSec Horizon AppViz – Rule Recertification Watch Video Changing the rules without risk: mapping firewall rules to business applications Keep Reading Choose a better way to manage your network Choose a better way to manage your network Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

  • How to generate audit-ready firewall policy evidence | AlgoSec

    Learn what audit-ready firewall policy evidence should include and how to connect rules, owners, approvals, risk, changes, and validation for audit readiness. How to generate audit-ready firewall policy evidence ---- ------- Schedule a Demo Select a size ----- Get the latest insights from the experts Choose a better way to manage your network

  • Sanofi | AlgoSec

    Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. SANOFI FINDS THE CURE FOR TIME-CONSUMING APPLICATION MIGRATION WITH ALGOSEC Organization Sanofi Industry Healthcare & Pharmaceuticals Headquarters Paris, France Download case study Share Customer
success stories "Using AlgoSec during our data center migration allowed us to give technical project leaders access to all of the rules involved in the migration of their applications, which reduced the IT security team’s time on these projects by 80%. The application was very useful, simple to use and made everybody happy." AlgoSec Business Impact Simplify data center migration projects Reduce rule migration process time by 80% Streamline and improve firewall operations Background A multinational pharmaceutical company, Sanofi, has 112 industrial sites in 41 countries and operations in more than 100 countries. The company’s 110,000 employees are committed to protecting health, enhancing life, providing hope and responding to the potential healthcare needs of seven billion people around the world. Challenge The sensitive nature of Sanofi’s business and its wide ranging global operations require an extensive and well secured network, which currently has 120 firewalls all over the world. In the midst of a data center consolidation project, the company needed to understand how its security devices would be affected by application migrations. Sanofi was also eager to improve change management processes and gain key performance indicators (KPIs) for risk analysis.“Our main concern with the data center consolidation project was to enable various technical project leaders to see the different rules impacting the migration of their applications, and to avoid any outages. For that, we needed pre-migration and post-migration documentation on security,” says Bruno Roulleau, Network Security Architect at Sanofi. “We also needed metrics on the risk associated with different policies on the firewalls.” Solution When looking for a solution, Sanofi evaluated several vendors. “A key point for us was the ability to easily integrate the security devices in our current infrastructure, into the solution. We also wanted detailed reporting that would allow us to delegate policy management to project leaders,” Roulleau notes.Because Sanofi constantly upgrades its devices, its systems need to evolve and incorporate the new devices and rules seamlessly. “We chose the AlgoSec Security Management solution because its graphical interface is very user-friendly, it easily supports new devices and generates detailed reports and metrics on risks,” says Roulleau.Sanofi also appreciated AlgoSec’s flexibility. “AlgoSec is very open to developing new capabilities. We can ask to have some new features available by a certain date and they will deliver on time,” according to Roulleau. For a company with a complex network and rapidly evolving security needs, that responsiveness proved key to the decision to go with AlgoSec. Results Sanofi’s security team is now able to delegate responsibility for rule changes both during migration and on an ongoing basis. “Using AlgoSec during our data center migration allowed us to give technical project leaders access to all of the rules involved in the migration of their applications, which reduced the IT security team’s time on these projects by 80%. The application was very useful, simple to use and made everybody happy,” Roulleau says.Additionally, with AlgoSec’s reports Sanofi can now easily and clearly document the status of their firewalls as well as the impact of any changes on the network throughout the migration project. “We can now generate detailed reports in just three clicks!” Roulleau adds.Furthermore, AlgoSec’s optimization reports enabled Sanofi to clean up its security policies. Because they could clearly see all of the rules and their impact on network security, Roulleau’s team was able to safely eliminate unused and duplicate rules, which increased the efficiency of the firewalls. Those reports also provided insight into the risks associated with the current system and various changes being made. Schedule time with one of our experts

bottom of page