Run Firewall Rule Review and Recertification — Free

Review Scope and Inspection Details

Review period documented

Record the start and end dates for the recertification cycle.

Firewall device, cluster, or policy package identified critical (required)

Identify the firewall platform and the specific policy scope reviewed.

Rule population and sample size recorded

Enter the total number of rules in scope and the number reviewed.

Note (optional)

Review performed against current approved baseline critical (required)

Confirm the review used the current approved firewall policy baseline or export.

Yes No N/A

Rule Ownership and Business Justification

Rule owner assigned and current critical (required)

Confirm each reviewed rule has a named business or technical owner.

Yes No N/A

Business justification documented and still valid critical (required)

Verify the rule still supports an active business process, application, or approved exception.

Yes No N/A

Approver identity and approval date recorded critical (required)

Capture the approver name or role and the date of approval for the rule or rule set.

Rule expiration or review date present where required

Confirm temporary or exception-based rules have a defined expiration or next review date.

Yes No N/A

Change ticket or request reference linked

Record the change request, ticket, or exception reference supporting the rule.

Unowned or unjustified rules identified critical (required)

Flag whether any reviewed rules lacked ownership or a valid business justification.

Yes No N/A

Rule Necessity and Stale Entry Review

Unused source or destination objects identified critical (required)

Determine whether any rules reference objects, hosts, or services that are no longer in use.

Yes No N/A

Duplicate or overlapping rules identified

Check for duplicate, shadowed, or overlapping rules that can be merged or removed.

Yes No N/A

Expired temporary rules removed or queued for removal critical (required)

Confirm expired temporary access rules are removed or placed into approved remediation.

Yes No N/A

Least-privilege alignment reviewed critical (required)

Verify the rule grants only the ports, protocols, sources, and destinations required for the business need.

Yes No N/A

Stale or unnecessary rules count

Enter the number of rules identified for removal, consolidation, or further investigation.

Note (optional)

Remediation disposition documented critical (required)

Select the disposition for identified stale or unnecessary rules.

Note (optional)

Access Exposure and Security Risk

Inbound exposure limited to approved sources critical (required)

Confirm inbound rules are restricted to approved source networks, hosts, or geographies where applicable.

Yes No N/A

Ports and protocols match documented service requirement critical (required)

Verify the allowed ports and protocols are no broader than the documented application requirement.

Yes No N/A

High-risk or any-to-any rules identified critical (required)

Check for overly permissive rules such as any source, any destination, or broad service access.

Yes No N/A

Logging and monitoring enabled for required rules

Confirm logging is enabled for rules that require monitoring, investigation, or compliance evidence.

Yes No N/A

Security exception or compensating control documented

If a rule exceeds standard policy, confirm an approved exception and compensating control are documented.

Yes No N/A

Approval, Evidence, and Sign-Off

Evidence of review attached critical (required)

Attach supporting evidence such as policy export, rule report, ticket references, or approval records.

Non-conformances documented with corrective actions critical (required)

Confirm all deficiencies or non-conformances were recorded with owners and due dates.

Yes No N/A

Escalations to security or change management recorded

Confirm any required escalations were routed to the appropriate security, network, or change authority.

Yes No N/A

Inspector comments and summary of findings

Summarize key findings, exceptions, and remediation priorities from the recertification review.

Inspector signature critical (required)

Inspector attestation that the review was completed accurately and in accordance with policy.

Get your results

Enter your email — we'll send you a PDF of your filled-out template, plus the occasional MangoScoop newsletter (templates, workflow tips, product updates). Unsubscribe anytime — link is in every email.

Email (required)

Your name (optional)

Run: Firewall Rule Review and Recertification

Review Scope and Inspection Details

Rule Ownership and Business Justification

Rule Necessity and Stale Entry Review

Access Exposure and Security Risk

Approval, Evidence, and Sign-Off

Get your results