A network security policy compiler. Configures a large number of packet filters from a single rule set. Derives the path between source and destination automatically from the network topology. Supports Cisco IOS, NX-OS, ASA and IPTables.