Platform / Firewalls and VPN
Firewalls and VPN
Audit every rule, read every log line in plain language and answer reachability questions across your linked sites, before you make a change.
A clean rule base, step by step.
ZWatch reviews every rule and tells you which are risky, unused, shadowed or broader than needed, then builds a clean-up plan your team can follow.
- Any-to-any and overly broad rules
- Unused and shadowed rules
- A tracked clean-up plan with progress
| Rule | From / to | Service | Action | Assessment |
|---|---|---|---|---|
| 12 | LAN to Servers | HTTPS | Allow | Healthy |
| 27 | Any to Any | All | Allow | Any-to-any, unused 90 days |
| 31 | Guest to LAN | All | Allow | Overly broad service |
| 44 | Branch to DMZ | SSH | Allow | Shadowed by rule 12 |
| 58 | VPN users to ERP | HTTPS | Allow | Healthy |
Can site A reach site B?
Routing, SD-WAN rules, VPN tunnels and firewall policies are checked together, so the answer matches what the network will really do.
- Every hop and rule on the path
- SD-WAN member priorities respected
- Exact rule and route changes per firewall
- Firewall B: allow 10.20.0.0/24 to 10.50.1.10 on HTTPS above rule 112.
- Firewall A: add a route for 10.50.1.0/24 through the VPN link.
Everything about your firewalls in one view.
Rule and policy audit
Risky, unused, shadowed and overlapping rules, with the reason for each finding.
Traffic in plain language
Allowed and blocked traffic explained as readable sentences with the key fields.
Routing and SD-WAN
Static routes, SD-WAN rules and VPN links analysed together.
Linked firewalls
Compare firewalls connected by VPN or SD-WAN and find gaps between them.
Health from logs
Resource, interface and HA health read from the firewall’s own logs, with no inbound access.
Automatic backups
Configuration backups collected on schedule and encrypted at rest.
See ZWatch on your own network.
Ask for a trial licence and we will help you connect your first devices.