Method, a system, and a computer program product for managing access change assurance

A method for evaluating a deployment of a firewall access change request, the method comprises the following computer implemented steps:

• formatting, by a computer, a firewall access change request to provide a formatted firewall access change request;
• wherein the formatted firewall access change request comprises multiple formatted request items;
• wherein the multiple formatted request items comprise a firewall identifier, requested access type, an address of an access source, a requested access destination;
• searching by the computer for firewall access rules that all but one of the dimensions of the effective scopes of the firewall access rules match corresponding dimensions of the formatted firewall access change request;
• determining, by the computer, multiple relationships between the multiple formatted request items and corresponding items of at least one entity out of a firewall model and a current firewall policy;
• and responding, by the computer, to the firewall access change request in response to the multiple determined relationships;
• wherein the responding comprises defining implementation details that facilitate a connectivity that is a subject of the firewall access change request.

A non-transitory computer readable medium that stores instructions for:

• formatting a network access change request to provide a formatted network access change request;
• and formatting a firewall access change request to provide a formatted firewall access change request;
• wherein the formatted network access change request and the formatted firewall access change request comprise multiple formatted request items;
• wherein the multiple formatted request items comprise a firewall identifier, requested access type, an address of an access source, an address of an access destination;
• determining multiple relationships between the multiple formatted request items and corresponding items of at least one entity out of a firewall model and a current firewall policy;
• responding to the firewall access change request in response to the multiple determined relationships;
• and converting the formatted network access change request that specifies a required change to a connectivity of a network without relating to individual firewalls of the network to at least one firewall access change request.

A computer program product that comprises a non-transitory computer readable medium that stores instructions for:

• formatting a network access change request that specifies a required change to a connectivity of a network without relating to individual firewalls of the network to provide a formatted network access change request;
• and formatting a firewall access change request to provide a formatted firewall access change request;
• wherein the formatted network access change request and the formatted firewall access change request comprise multiple formatted request items;
• wherein the multiple formatted request items comprise a requested access type, an address of an access source, an address of an access destination and a firewall identifier;
• converting a formatted network access request to the firewall access change request in response to a network model;
• determining multiple relationships between the multiple formatted request items and corresponding items of at least one entity out of a firewall model and a current firewall policy;
• and responding to the firewall access change request in response to the multiple determined relationships.

A computer program product that comprises a non-transitory computer readable medium that stores instructions for:

• formatting a firewall access change request to provide a formatted firewall access change request;
• wherein the formatted firewall access change request comprises multiple formatted request items;
• wherein the multiple formatted request items comprise a firewall identifier, requested access type, an address of an access source, a requested access destination;
• determining multiple relationships between the multiple formatted request items and corresponding items of at least one entity out of a firewall model and a current firewall policy;
• searching for firewall access rules that all but one of the dimensions of the effective scopes of the firewall access rules match corresponding dimensions of the formatted firewall access change request;
• and responding to the firewall access change request in response to the multiple determined relationships;
• defining implementation details that facilitate a connectivity that is a subject of the firewall access change request.