From firewall config to actionable security intelligence
Firewall Configuration Assessment is the first module of SENTRY, the HCSECURITY network security product. Firewall config in. Topology reconstruction, a CIS-cited rule assessment, and MITRE ATT&CK attack paths out — every finding checked by a certified security expert before it reaches you.
No agents. No device access. No installation. Read-only, advisory-only.
What you receive
Every assessment is a professional, audit-ready deliverable — not a raw AI transcript.
Network reconstruction
Zones, interfaces, VLANs, NAT, routing and interzone connections rebuilt from configuration alone.
CIS Benchmark cited firewall rule assessment
Findings cited to the specific benchmark section, ready for auditors and boards.
Severity-ranked findings
Shadowed rules, any-any rules, overly permissive access and implicit-deny gaps prioritised.
MITRE ATT&CK scenarios
Realistic attack paths derived from your actual weaknesses, with detection opportunities.
Audit-evidence documents
PDF/DOCX reports suitable for management, audit committees and tabletop exercises.
Actionable fixes
Configuration-level remediation guidance your team can apply — no vague advice.
How it works
A deliberate pipeline where the sensitive step happens on your side of the boundary — and the last word belongs to a human.
Export your configuration
On your side. No agents, no credentials shared, no device access. Just a standard FortiOS config backup.
AI-enabled deterministic analysis
Frontier AI analyses the anonymized configuration: topology reconstruction, rule-base assessment, CIS gap analysis and MITRE ATT&CK scenarios.
Expert review
A certified network security expert validates every finding, filters false positives, and adds environment-specific context.
Delivery & walkthrough
You receive audit-ready reports plus a walkthrough session so your team knows exactly what to fix first and why.
Limited pilot programme
Request a pilot assessment for one FortiGate firewall. Verified findings, audit-ready reports, and a walkthrough with a security expert.