Risk Analyzer

Visualizing and Assessing the Security of Your Network 

WHY RISK ANALYZER? 

Assess risk and identify vulnerabilities so you can fix problems before an attacker takes advantage of them. 

USE RISK ANALYZER TO: 

• Evaluate impact of attack scenarios on your organization. 

• See how each asset is exposed and where it is accessible. 

• Get a comprehensive overview of network risk. 

• View a map of possible attack paths. 

• Effectively act on prioritized recommendations for risk reduction. 

• Apply virtual patches and recalculate risk. 

For every access request granted, a potential gap in security is created. The best way to combat unwarranted access is to preemptively identify and analyze areas of vulnerability. However, the complex nature of firewall configurations combined with the time-consuming burden of patching tens of thousands of vulnerabilities makes threats difficult to see and assess.

Risk Analyzer for FireMon Security Manager provides security teams with actionable intelligence, delivering real-time information on network security performance in the face of relentless attacks from the inside out.

WHAT IS RISK ANALYZER? 

FireMon’s Risk Analyzer reduces risk by analyzing your network infrastructure proactively and comprehensively, then simulating how attackers might gain access through vulnerabilities in business assets. With Risk Analyzer, organizations can quickly assess the impact of the potential attack, where multiple exploits can be used in combination and how prepared network defenses are to defeat an attack.

 

Simulate attack scenarios against assets to determine reachability. 

 

ENTERPRISE-READY ARCHITECTURE

Risk Analyzer handles large, complex networks with tens of thousands of hosts and thousands of security devices, providing results in seconds, not hours. 

QUANTITATIVE RISK ANALYSIS

Risk Analyzer evaluates configuration data from network devices to provide a complete and accurate picture of your network. 

REAL-TIME DEFENSE CONFIGURATION

Risk Analyzer collects the latest configuration data from FireMon Security Manager with just one click, saving time and money. 

SOLUTION OVERVIEW

Risk Analyzer’s patented risk engine helps IT security teams discover weaknesses in the network, evaluate the impact of a combination of exploits and recommend changes proactively.

REACHABILITY

Calculate how easy it would be for an attacker to reach the network through different network hosts and internet-facing segments and assess the potential damage. 

GRAPHICAL ATTACK PATHS

Trace the possible paths an attacker might use across the network layout and identify where you can stop an attack with the least amount of time and effort.

 

Identify attack entry and pivot points.

ZERO-DAY ATTACK GRAPHS

Build a zero-day attack graph for each potential vulnerability and prioritize applications according to quantitative risk assessment.

METRICS & MEASUREMENTS

Scores all attack simulations for risk and impact and then rescore once you make improvements to determine the impact of changes. 

 

Capture targeted metrics regarding vulnerability risk exposure.

PROACTIVE “WHAT IF” SCENARIOS

Patch systems virtually, re-run a complete analysis in seconds and compare various patch scenarios to ensure the biggest impact on efforts.

ACCESS PATH ANALYSIS VIA SECURITY MANAGER

Decrease exposure and enable mitigation of risk by tracing all potential traffic paths, identifying problematic routes and implementing recommended adjustments to redirect access. 

 

Access path details enable changes that block current access.

Risk Analyzer performs a topology-aware assessment of critical factors including device rules, access routing and NAT, and prioritizes risks based on ease of reachability, value of underlying assets and known patterns of existing attacks. By adapting device rules to reroute access, risks can be addressed immediately and reduce complexity and time in patch remediation efforts.