topic Re: How do you document your firewall config? in Network Security

How do you document your firewall config?

scottyd — Mon, 11 Mar 2019 19:53:28 GMT

Hi Everyone,

We are looking for ideas on how best to document a firewall solution; NAT'ing, rules, interfaces etc. We have spreadsheets, but they don't really cut it.

Regards,

Scott

Re: How do you document your firewall config?

Bastien Migette — Mon, 21 Feb 2011 11:32:46 GMT

Hi scott,

A lot of commands have a description keyword that you can use, otherwise, I'm used to add comments in my config templates using '!' or '#' as it is not parsed:

ciscoasa(config)# #fdfdsfds
ciscoasa(config)# !sfqfdfs

ciscoasa(config)#

Hope this help.

Re: How do you document your firewall config?

Collin Clark — Mon, 21 Feb 2011 15:47:12 GMT

I document in the downloaded config file. Not the most elegant or efficient way, but that's how I do it. Sounds like an opportunity for someone that can write an application.

Re: How do you document your firewall config?

scottyd — Mon, 21 Feb 2011 20:33:45 GMT

Thanks for the feedback.

Our configs are pretty big, hundreds of lines, and I want to document them to the state that non network engineers can understand them and see if their servers have access etc.

Scott