IT Audit Field Manual

4

Next-Generation Firewall Auditing

Any organization’s primary line of defense lies in its ability to intelligently filter, monitor, and manage network traffic. Next-generation firewalls (NGFWs) are sophisticated devices, incorporating advanced features that significantly outpace traditional packet filtering. This chapter explores the inner workings of NGFWs, focusing on their capabilities, security attributes, and the process of auditing them for optimal configuration and compliance with organizational security standards.

As an IT auditor, it’s essential to master the technical nuances of NGFWs to ensure that they adequately protect an organization’s critical assets. From dissecting their powerful features to scrutinizing their configuration ...