NSPM Power Tools

Productivity tools for FireMon admins: bulk operations, device management, workflow automation for Policy Planner & Optimizer

NSPM Power Tools adds bulk actions, extra columns and reports to the FireMon pages you already use: Security Manager, Policy Optimizer, Policy Planner and Administration. Tick the items on a list, pick an action, confirm, and watch it work through them with live progress and a summary of what succeeded and what did not. ALL POWER TOOLS CAN BE DANGEROUS. USE AT YOUR OWN RISK. Bulk actions change many items at once; try them on a test system first. POLICY OPTIMIZER • Checkboxes on the reviews list, with Select All for the page. • Bulk Assign, Unassign and Cancel for the selected reviews. Reviews that are already completed or cancelled are left alone: the actions stay disabled and say why. • Export Selected: download the selected reviews as CSV or JSON, optionally with rule details (sources, destinations, services, applications, action, last used) and rule documentation. • Columns panel: add Sources, Destinations, Services, Last Modified, Last Used, Rule Comments, compliance Control Failure and Severity, and any rule documentation field as columns on the reviews list. Hide default columns you never read, widen the Rule column so long rule names are readable, and sort by any added column. Choices are remembered. POLICY PLANNER • Checkboxes on the tickets list, with Select All. • Bulk Assign (searchable user picker), Unassign and Cancel Tickets. • Force Verify: close the Verify task on selected tickets, or on every ticket waiting in Verify in a workflow, without validating the changes. Clearly marked as such. • On a ticket assigned to you: set the status of many changes at once (Implemented, Pending, Staged, Unimplemented, Queued), selecting all changes or only those on chosen devices. SECURITY MANAGER • Policy Drift Report: compare the security rules of two firewalls, or one policy on each, and list rules only on one side and rules on both whose source, destination, service, application, zones, action or logging differ, field by field. Match rules by name or by vendor rule ID, compare objects by name or by what they resolve to, narrow the comparison by rule name, category, change request, application or any documentation field, and fold site-specific name differences away. Produces a standalone HTML report and a CSV, and marks what is new or resolved since the last run of the same pair. • Import rule documentation from CSV. • Sync rule documentation between management stations and their child devices, in either direction, with a dialog to resolve fields where child devices disagree. • Zone Access Matrix: an interactive HTML report of which zones can reach which, for one device, a device group or all devices, with the rules behind each cell. • Compliance Zone Mapping: map every firewall zone to a compliance zone and update network segments to match. • Network Segment Merger: find segments created twice (such as 10.0.0.0/24 and 10.0.0.0/24 (1)) and merge each pair. • Export Selected Rules (optional feature): tick rules on the rules list and download them with their documentation. ADMINISTRATION • Bulk License: license or unlicense every device of a device pack, a device group, or exactly the devices the Devices page is showing with your filter applied, for Security Manager, Policy Optimizer, Policy Planner or Automation. Shortcuts also appear in the Devices table header. • Device Group Auto-Assignment: add devices to groups by name pattern, with a preview of every change before anything is written. • Device Export: download a device group as CSV in FireMon's device-import format. • Device Maintenance: renormalize devices, rebuild behavior and the device map, reindex search, and delete archived revisions. • Advanced Bulk Update: a three-step wizard to change retrieval, monitoring and other settings across a device pack or group. BUILT TO BE SAFE TO USE • Every bulk write asks first, with the number of items it will touch and a button named for the action. • Progress is live, and results stay on screen as succeeded, failed and skipped, with the reason for each failure. Nothing reloads the page over a message. • Tools that cannot run on the page you are on are shown disabled, with the page they need. • Keyboard friendly dialogs: Escape closes, focus stays inside. PRIVACY • Runs entirely in your browser and talks only to your own FireMon site, using your existing FireMon sign-in. No passwords are stored. • No analytics, no tracking, no data sent anywhere else. • Permissions: storage (your settings), activeTab and scripting (to add the controls to FireMon pages), cookies (to use your FireMon session), and access to your FireMon site only, which you grant once during setup. GETTING STARTED 1. Install the extension. A short setup page asks for the address of your FireMon site and for permission to work on it. 2. Open FireMon and sign in as usual. Checkboxes and toolbar buttons appear on the reviews, tickets, rules and devices pages. 3. Click the extension icon for the tools that run from the popup: reports, imports, licensing and device tools. Enterprise deployments can set the FireMon address and other settings by managed policy. DISCLAIMER NSPM Power Tools is an independent tool and is not affiliated with, endorsed by, or supported by FireMon. "FireMon" is a trademark of its respective owner. It is provided as is, without warranty. Bulk operations can have significant and sometimes irreversible effects; you are responsible for how you use it. Full disclaimer: https://secq.pro/nspm/