Security Cloud Control provides the Policy Analyzer and Optimizer, which is an intelligent cloud service that can analyze security policies, detect anomalies, and provide recommendations on remediations that can be performed to optimize the policies.
This chapter provides information on how to analyze security policies, detect anomalies, and provide recommendations on remediations using the Policy Analyzer and Optimizer feature in Security Cloud Control.
About Policy Analyzer and Optimizer
Learn how Policy Analyzer and Optimizer in Security Cloud Control Firewall Management analyzes access control and NAT policies, identifies rule anomalies, reports optimization opportunities, and supports remediation where available.
Common Policy Analyzer and Optimizer concepts
Find details about common Policy Analyzer and Optimizer concepts. Policy Analyzer and Optimizer uses these shared concepts across access control policy analysis and NAT policy analysis.
Prerequisites to use Policy Analyzer and Optimizer
Before you use Policy Analyzer and Optimizer, verify the prerequisites that apply to your policy type and data source.
Enable Policy Analyzer and Optimizer for Security Cloud Control-managed On-Premises Firewall Management Center
Onboard your On-Premises Firewall Management Center to Security Cloud Control, navigate to Administration > Integrations > Firewall Management Center, select the On-Premises Firewall Management Center, and choose Policy Analyzer and Optimizer under System in the right pane.
Policy Analyzer and Optimizer licensing requirements
Policy Analyzer and Optimizer requires no additional licensing.
Open Policy Analyzer and Optimizer and select a data source
You can open Policy Analyzer and Optimizer from Security Cloud Control Firewall Management or cross-launch from supported On-Premises Firewall Management Center policy pages.
Search and filter policies in Policy Analyzer and Optimizer
Use the Search for access control policies field and the Status field to narrow the access control policy list.
Access control policy analysis and optimization
Learn how to analyze access control policies in Policy Analyzer and Optimizer, review findings, and apply supported remediations for access control rules and objects.
Network Address Translation policy analysis
Learn how to analyze NAT policies in Policy Analyzer and Optimizer, identify shadowed or redundant rules, review conflict ownership, and download NAT analysis reports.
Troubleshooting Policy Analyzer and Optimizer
Learn how to troubleshoot Policy Analyzer and Optimizer when policies do not analyze or appear.
Frequently Asked Questions About Policy Analyzer and Optimizer
Find answers to common questions about Policy Analyzer and Optimizer, including AI Assistant support, analysis scheduling, reporting, licensing, remediation limits, rule handling, and failed remediation recovery.