IBM Security QRadar Risk Manager

Analyzes firewall configurations

• Conducts detailed configuration audits to help improve consistency of firewall rules including detection of shadowed rules and other configuration errors.
• Performs audits and alerts users to risky or out-of-compliance configurations by comparing changes over time.
• Improves overall firewall performance by identifying unused or ineffective rules.

Provides network topology and connection visualization tools

• The Topology Viewer enables you to see network devices and relationships including subnets and links.
• The Connection Monitor provides detailed views into the network configuration based on the routing and firewall configurations.

Identifies active attack paths and high-risk assets

• Adds network context to asset and vulnerability data, enabling you to prioritize remediation activities.
• Simulates network attacks including the potential spread of an attack across the network.

Supports policy compliance monitoring

• Allows active evaluation of multiple security policies using the automated policy monitor.
• Correlates asset configuration and vulnerability data with log, event and network flow data to monitor network assets and devices.
• Supports audit requirements and policy compliance reporting, with exceptions triggering security incidents, log events and email notifications.