Where this offering fits
A next-generation firewall project is a network-policy migration as well as an equipment purchase. Define the security boundaries, allowed services and management access that NSFOCUS must support. Existing rules should be reviewed for purpose rather than copied indefinitely into a new device.
Architecture and rollout decisions
Map interfaces, routing, remote dependencies and required inspection functions. Confirm current model, throughput assumptions and licence scope. Pilot or stage the rule migration, testing application paths and approved failure scenarios. Retain configuration backups and a rollback plan. Assign ownership for exceptions and periodic policy review after handover.
An evaluation scenario for this offering
Prepare a staging rule set for a fictional branch containing required application access, a management path and an obsolete rule proposed for removal. Ask the business and network owners to confirm purpose before migration. Test permitted flows, a denied unrelated destination and the approved administrative recovery path using safe traffic. Introduce a controlled routing or link-failure condition relevant to the selected model. Retain rule rationale, interface mapping, logs and rollback evidence. The evaluation should demonstrate that the new policy preserves necessary service while reducing agreed excess access, rather than accepting a mechanical copy of every historical firewall rule.
Evidence to request for this scope
- Obtain model and feature-specific sizing evidence.
- Reconcile rules with application owners.
- Test management access, allowed flows and recovery.