Wallparse

WallParse is a Cisco ASA firewall configuration file parser and firewall audit tool. Fortigate export files have experimental support.

The intended use is to allow firewall auditors to audit firewalls without having login credentials for the firewall. The configuration file is exported (for example using "show running-config") and is imported into WallParse. Configuration files from Cisco ASA are supported. WallParse is extremely simple to uses and its features include searching for firewall rules (ACL) with specific characteristics. It also gives warnings for common configuration mistakes (such as any-any-rules).

What WallParse does: Gives an overview of Network Objects in the firewall configuration. Can compare a configuration with a previous configuration marking what has been changed (really useful for firewall audits). Gives automatic warnings for common configuration mistakes. Exports to CSV or SQL-lite database for processing in for instance Excel. Allows for searching for specific ACL rules using SQL Queries.