FireMon Cloud Knowledge Base

This site documents the three FireMon Cloud products. Each product has its own section.

Insights

FireMon Insights collects metrics and assessment data from your on-prem Security Intelligence Platform (SIP) once a day and makes it available for reporting, trend analysis, benchmarking against other FireMon customers, and AI-assisted queries. It runs in FireMon's cloud, so apart from the Insights plugin in your SIP installation, there is nothing to install. Insights reads your policy data and never changes it.

See the Insights documentation.

Cloud Defense

FireMon Cloud Defense is a cloud security operations platform that monitors, alerts on, and responds to security risk across your public cloud infrastructure. It runs posture monitoring checks and threat detectors against your cloud accounts, assesses your deployments against the Cloud Security Maturity Model, and routes alerts and their remediation actions to the right teams through Slack and Microsoft Teams. FireMon Authorization Control adds just-in-time access to your cloud accounts in place of permanent IAM privileges.

See the Cloud Defense documentation.

Connect

FireMon Connect keeps network security policy in step with what actually runs in your environment. It maintains a live inventory of your cloud and on-prem resources, keeps the address groups your firewalls enforce in sync with that inventory, and checks proposed firewall changes against your policy guardrails before they are implemented. A lightweight on-prem Connector extends it to systems that aren't reachable from the cloud, such as Palo Alto Panorama, VMware NSX, and Infoblox.

See the Connect documentation.