The management must provide a security rule hit counter in the security policy. Solution must include a search option to be able to easily query which network object contain a specific IP or part of it. Solution must include the option to segment the rule base using labels or section titles to better organize the policy. Solution must provide the option to save the entire policy or specific part of the policy. Solution must have a security policy verification mechanism prior to policy installation. Solution must have a security policy revision control mechanism. Solution must provide the option to add management high availability, using a standby management server that is automatically synchronized with the active one, without the need for an external storage device. Solution must include a comprehensive map with all network objects and their connections that can be exported to Microsoft Visio or to an image file. Solution must include the ability to centrally distribute and apply new gateway software versions. Solution must include a tool to centrally manage licenses of all gateways controlled by the management station. Solution must have the capabilities for multi-domain management and support the concept of global security policy across domains. The management GUI should have the ability to easily exclude IP address from the IPS signature definition. The Log Viewer should have the ability to easily exclude IP address from the IPS logs when detected as false positive. The management GUI should have the ability to easily get to IPS signature definition from the IPS logs. The Log Viewer should have the ability view all of the security logs (fw, IPS, urlf) in one view pane (helpful when troubleshooting connectivity problem for one IP address). The Log Viewer should have the ability in the log viewer to create filter using the predefined objects (hosts, network, groups, users). The Log Viewer should have the ability in the log viewer to create custom multiple "saved filter" for use at a later time.
The management must provide a security rule hit counter in the security policy. Solution must include a search option to be able to easily query which network object contain a specific IP or part of it. Solution must include the option to segment the rule base using labels or section titles to better organize the policy. Solution must provide the option to save the entire policy or specific part of the policy. Solution must have a security policy verification mechanism prior to policy installation. Solution must have a security policy revision control mechanism. Solution must provide the option to add management high availability, using a standby management server that is automatically synchronized with the active one, without the need for an external storage device. Solution must include a comprehensive map with all network objects and their connections that can be exported to Microsoft Visio or to an image file. Solution must include the ability to centrally distribute and apply new gateway software versions. Solution must include a tool to centrally manage licenses of all gateways controlled by the management station. Solution must have the capabilities for multi-domain management and support the concept of global security policy across domains. The management GUI should have the ability to easily exclude IP address from the IPS signature definition. The Log Viewer should have the ability to easily exclude IP address from the IPS logs when detected as false positive. The management GUI should have the ability to easily get to IPS signature definition from the IPS logs. The Log Viewer should have the ability view all of the security logs (fw, IPS, urlf) in one view pane (helpful when troubleshooting connectivity problem for one IP address). The Log Viewer should have the ability in the log viewer to create filter using the predefined objects (hosts, network, groups, users). The Log Viewer should have the ability in the log viewer to create custom multiple "saved filter" for use at a later time.
43201%20loc%20memo.docx