Insights
FireMon Insights collects metrics and assessment data from your on-premise Security Intelligence Platform (SIP) once a day, and makes it available for reporting, trend analysis and AI-assisted queries. It runs in FireMon's cloud. Apart from the Insights plugin in your SIP installation, there is nothing to install or upgrade.
Insights reads your policy data. It never changes it. You still review and fix rules in Security Manager, and still manage users, devices and device groups in Administration.
Here is what it adds to what your own installation already shows you:
- Benchmarking against other FireMon customers. Every metric is ranked against all other Insights customers. You get a percentile per metric, a customer-average line on the charts, and a per-category average on Best Practices. Only the cloud sees every customer.
- History and trend. Security Manager shows your current state. Insights keeps a daily history, so the metric pages report change over a range you pick — 1w, 1mo, 6mo, 1yr or Max — and Best Practices tracks your scores by quarter.
- AI. An in-app assistant, written insights for the KPI, Revision Analytics and Network Object Groups pages, and an MCP server that connects your own AI system to your FireMon data.
- Reporting you control. Choose which metrics appear on your KPI page and in what order, and track Overall Posture by fiscal quarter against your own fiscal year start.
If you are setting Insights up for the first time, start with Getting Started. If your installation is already connected, Using Insights covers each screen.
In this section
- Insights and Security Manager — what lives where, and what Insights adds
- Getting Started — prerequisites, connecting your SIP installation, signing in, and finding your way around
- Benchmarking — how you are compared against other FireMon customers, and what the comparison does and doesn't mean
- Concepts — device groups, policy data, controls and assessments, scores, revisions, and metrics
- Using Insights — KPI, All Metrics, Best Practices, Change, Revision Analytics, Network Object Groups, and Ask AI
- MCP Server — connect Claude Code, or any MCP client, to your FireMon data
- Administration — users, access, and API keys
- Glossary — the terms used across Insights, and what the interface calls them
- Troubleshooting — what to check when a page is empty or a number looks wrong