Automatic Policy Generation

Overview

SecureTrack's Automatic Policy Generator™ (APG) automatically creates a secure, effective, and optimized firewall rulebase, limiting allowance of traffic not actually used in your organization.

The APG can be used for:

• Creating a new rulebase, as when deploying a new firewall or adding an interface to a firewall.
• Tightening overly permissive rules.
• Network forensics, such as discovering specific traffic patterns on the network.

APG is not supported for Check Point devices when the new method of processing syslog information is enabled.

This section describes the APG included in the SecureTrack web interface. The Legacy APG CLI tool is still available and is described in Automatic Policy Generator (APG) CLI.