Patent ID: 8621552

Claim:
A method for evaluating a deployment of a network access change request, the method comprises the following computer implemented steps: formatting, by a computer, a network access change request that specifies a required change to a connectivity of a network without relating to individual firewalls of the network to provide a formatted network access change request; and formatting a firewall access change request to provide a formatted firewall access change request; wherein the formatted network access change request and the formatted firewall access change request comprises multiple formatted request items; wherein the multiple formatted request items comprise a requested access type, an address of an access source, an address of an access destination and a firewall identifier; converting, by the computer, a formatted network access request to the firewall access change request in response to a network model of the network; determining, by the computer, multiple relationships between the multiple formatted request items and corresponding items of at least one entity out of a firewall model and a current firewall policy; and responding, by the computer, to the firewall access change request in response to the multiple determined relationships.