Firewall Audit Work Program

This tool contains four sample work programs that provide general steps organizations can use for conducting a firewall audit.

The objectives of this type of audit include: obtain network diagrams illustrating firewall connections and segmentation on the network, obtain network diagrams from the network administrator to gain an understanding of the network environment, determine if the expectations/goals/strategies of the firewall have been identified and are sound, meet with the systems manager to define the functional purpose of each firewall, and verify that the firewalls have been configured to match their functional purpose.