firewall-review - Audit firewall rules against CIS and NIST guidance
Audits firewall configurations, ACLs, and network security policies for permissive, shadowed, unused, poorly logged, and unrestricted egress rules.
Tags
Updated: 2026-10-03Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Locate firewall configurations
- Verify default-deny policies
- Detect overly permissive rules
- Analyze shadowed rules
- Detect unused rules
- Review rule ordering
- Analyze logging gaps
- Evaluate egress filtering
- Compile prioritized findings
Inputs
- Target file or directory
- Firewall configuration files
- ACL definitions
- Network policy documents
- Rule hit counters
- Last-hit timestamps
Outputs
- Prioritized findings report
- Severity ratings
- Control references
- Remediation guidance
Requirements
- Read access to target resources
- Grep tool
- Glob tool
