Firewall Rule Audit

A structured, repeatable process for auditing firewall rule bases against CIS Controls v8 (Control 4.4 -- Implement and Manage a Firewall on Servers, Control 4.5 -- Implement and Manage a Firewall on End-User Devices) and NIST SP 800-41 Rev 1 (Guidelines on Firewalls and Firewall Policy). This skill produces findings with traceable control references, severity ratings, and actionable remediation guidance.

When to Use

If a target is provided via arguments, focus the review on: $ARGUMENTS

• Periodic firewall rule base reviews (quarterly or after major changes).
• Compliance audits requiring CIS Controls v8 or NIST SP 800-41 alignment.
• Incident response when lateral movement or exfiltration is suspected.
• Pre-deployment review of new firewall rule sets or policy changes.
• Network architecture reviews that include perimeter or internal segmentation firewalls.

Context