JOINT SOLUTION BRIEF

FireMon + Zscaler

Streamline migration to cloud-centric network security by unifying policy management
across your entire hybrid estate

In today’s mobile and globally distributed workforce,

FireMon and Zscaler: How the Integration Works

organizations are adopting cloud services and SaaS delivery

The integration allows FireMon users to collect information

models and turning to SD-WAN and Secure Access Service

from the Zscaler Advanced Cloud Firewall to be used inEdge (SASE) technologies to improve branch office internet

FireMon’s Network Security Policy Management platform andperformance, reduce latency, and cut costs. Security teams

FireMon Automation.

must manage risk and ensure compliance across increasingly
complex hybrid networks. Challenges include the ability to:• Centralize, normalize, and enforce network security policies
across the entire hybrid estate, including firewalls, cloudsecurity groups, and SASE platforms.
• Visualize and analyze all network traffic to identify security
and compliance risks.
• Monitor and identify rule changes that impact the security

FireMon collects and aggregates Zscaler Cloud Firewall policy
information directly into the FireMon platform and builds
it into the FireMon network model that includes network
topology, security controls, and assets.
Customers can visualize the Zscaler Cloud Firewall as partof their overall network map in relation to the hybrid network
security topology, including local internet breakouts from theedge router outward to the Zscaler Cloud Firewall.

posture, compliance, or business continuity.
The FireMon-Zscaler partnership enables companies tosimplify policy management across heterogeneous
networks to:• Improve the security and compliance posture byensuring alignment between Zscaler policies and allenterprise standards.
• Ensure continuous compliance by monitoring network
access paths and alerting to potentially risky changes.
• Increase security agility and efficiency by managing network
policies centrally across the entire network.
• Simplify migration to Zscaler with a comprehensive view ofexisting firewall policies.

Security & Compliance Enforcement

Security Policy Management Use Cases
With the Zscaler policy information available, FireMon applies real-time policy analysis to ensure the desired security policy
enforcement is in place and is supporting proper network segmentation. Joint customers can visualize configuration, policy, andrule usage statistics across all network security enforcement points from a single pane of glass and address the following use cases:
Policy Management Normalize and manage policies across firewalls, next-generation firewalls, and cloud environments fromvarious vendors from a single pane of glass.
Policy Validation Validate policies against regulatory requirements or custom-defined policies.
Access Analysis Confirm Zscaler security controls enforce the desired enterprise-wide access, security, and compliance policies.
Rule Base Compliance Monitor and ensure security controls continuously maintain compliance with defined access and rulepolicies. Identify rule, access, and configuration compliance violations.
Network Mapping Automatically collect and build Zscaler Cloud Firewall data into a visual and interactive model that provides
network abstraction of access paths end-to-end with access path analysis and network map visualization.
Rule Review Analyze firewall configurations to identify hidden, unused, shadowed, or overly permissive rules that provide moreaccess than necessary.
Change Tracking Track changes to Zscaler Cloud Firewall rules for compliance or rule review analysis. Ensure changes arecertified. Identify when a change occurred, who made the change, and whether it expected; and determine if the change created anegative impact.

Fig. 1, The overview dashboard view of the Zscaler Cloud Firewall
within FireMon Security Manager with key performance indicators.

Fig. 2, The Policy Dashboard view of the Zscaler Cloud Firewall within FireMon
Security Manager, showing rules identified for cleanup and improvement

About FireMon
FireMon is the only agile network security policy platform for firewalls and cloud security groups providing the fastest way to streamline network
security policy management, which is one of the biggest impediments to IT and enterprise agility. Since creating the first-ever network security
policy management solution, FireMon has delivered command and control over complex network security infrastructures for more than 1,700
customers located in nearly 70 countries around the world. For more information, visit www.firemon.com.
About Zscaler
Zscaler (NASDAQ: ZS) accelerates digital transformation so that customers can be more agile, efficient, resilient, and secure. The Zscaler Zero
Trust Exchange protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in
any location. Distributed across more than 150 data centers globally, the SASE-based Zero Trust Exchange is the world’s largest inline cloudsecurity platform. For more information, visit www.zscaler.com.

© 2020 FireMon, llc. All rights reserved. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.