Keeping logs is not the same as seeing
Your firewall logs every connection, every blocked attack and every rule match. Yet these logs, which can run to hundreds of thousands of lines a day, simply fill up disks unless they answer a meaningful question. Which user is saturating the line? Which rule is never used? Who changed which rule last night? If head office uses one brand and the branches another, the answers to these questions are split across two separate screens.
ManageEngine Firewall Analyzer is software that collects, analyses and reports on the logs and configurations of firewalls from different vendors in one place.
What does Firewall Analyzer do?
Turns logs into reports
Bandwidth usage, application and protocol distribution, virus and attack attempts, and VPN usage are reported by user, source and destination. Raw logs can be searched for retrospective investigation.
Simplifies rules
It reveals used and unused rules, as well as shadowed and redundant definitions, and makes recommendations for rule clean-up and ordering. Rule tables that have grown over the years become both more secure and easier to understand.
Tracks configuration changes
Changes made on the firewall are reported instantly, and previous configurations are retained. The answer to who changed what, and when, is always to hand.
Produces compliance reports
With ready-made reports for standards such as PCI DSS, ISO 27001 and NIST, you can document the state of your firewall configuration during audits.
Alerts you to unusual activity
It raises alerts for sudden traffic spikes and unusual network behaviour, so you are informed before a problem grows.
Firewall Analyzer with Unna
Firewall Analyzer supports FortiGate, WatchGuard Firebox and Ruijie firewalls on the vendor’s official compatibility list. This is why, in mixed environments, we bring all devices together in the same reports.
We listen first. We establish who needs which reports and how often: summaries for management, detail for the technical team.
We plan together. We design how long logs will be retained, the storage requirement and the alert scenarios.
We install and connect. We configure your firewalls to send logs and prepare the reports and scheduled deliveries.
We stay by your side. We periodically interpret the reports with you and improve the rules based on the findings.
Part of the whole
Within network security, Firewall Analyzer is the common visibility layer whichever firewall brand you choose.
Unna Controller manages FortiGate fleets, takes backups and keeps the 5651 archive, while Firewall Analyzer handles multi-vendor log analysis and reporting. If you have more than one FortiGate, the two work together.
FortiGate, WatchGuard and Ruijie generate the logs; Firewall Analyzer makes sense of them.
With network monitoring, we assess traffic data alongside device health.
For ISO 27001 audits, we produce the evidence here that security events are being monitored.
Frequently asked questions
Which firewalls does it work with?
It supports a large number of vendors, including Fortinet, WatchGuard, Ruijie, Check Point, Palo Alto, Cisco, Sophos and SonicWall. Before installation, we check the compatibility of your device models and firmware versions.
Do I need this if I have Unna Controller?
It depends on your needs. If you only use FortiGate and are looking for device management, backup, hotspot and 5651, Controller may be enough. If you want different brands, detailed traffic reports and rule analysis, Firewall Analyzer is added.
Is it sufficient for 5651?
No. Logs within the scope of Law No. 5651 (Turkey) must be signed with a timestamp from an authorised source such as TÜBİTAK Kamu SM (Turkey’s public certification authority). For this, we install the 5651 logging solution separately.
