DGNEXA · Göktuğ Yüksel
Firewall maintenance: five questions to ask beyond “is it running?”
Review firewall ownership, access rules, configuration backups, updates and change records with this small-business checklist.
A firewall can stay online while its rules become harder to explain. Temporary access remains, an old VPN user is forgotten or nobody knows where the working configuration is backed up. Maintenance should help your business understand those changes, not merely confirm that a device has power.
Who owns administration and the rule list?
Confirm who can administer the firewall and who approves access changes for the business. For important rules, record their purpose, related application or provider, and whether the need is ongoing. A review should be planned with the people who understand the traffic. Removing an unfamiliar rule during working hours is not a useful substitute for understanding it.
Can you recover the working configuration?
Ask where configuration backups are held, who can retrieve them and whether the most recent approved changes are represented. Treat the files as sensitive administrative material. Recovery may depend on device version, passwords or other environment details, so document the prerequisites with the IT provider. Keeping a backup and having a workable recovery procedure are separate questions.
How are updates and remote access reviewed?
Check software support status and relevant subscriptions with the administrator. Agree how updates are assessed, tested and scheduled around the applications that depend on the device. At the same review, confirm the owners of VPN access and other administrative connections. Access that was once approved still needs a current business reason.
What happens before and after a change?
For a planned change, define the requested outcome, maintenance window, backup and rollback arrangements. Decide how the affected business task will be tested afterwards. Keep a record of the result, not only the settings that were entered. Fortinet describes configuration changes as part of a change procedure; the exact controls and tools depend on your firewall platform.
Take this checklist to your next IT review
- Who owns administration and approves access?
- Why does each reviewed rule still exist?
- Where is the current configuration backup?
- How are updates and VPN users reviewed?
- How are changes tested and recorded?
How DGNEXA can help
DGNEXA can review firewall rules, VPN access and change documentation within an agreed management scope. Share the make, model and the business need first; administrator credentials belong in an agreed secure handover, not in a public enquiry form.
Discuss your needs ↗