Firewall auditing

What's the general approach for conducting firewall audits? Is there a better way beyond dumping the config into Excel? We are supposed to audit our firewall rules every 6 months, but nobody has ever done it. Ever. In a year we would be unlucky to remove five rules while we put in hundreds.

​

It's a massive risk for our company and something we should be doing for peace of mind and compliance purposes, but it's easy to see why …

auditing cybersecurity firewall