Early warning signs and pre-emptive remediation of critical security issues

Stateful health checking

Continuously assess the health of your address manager and DNS/DHCP servers to preemptively find and address issues like:

• DNS lookup failure
• DHCP scope exhaustion
• Zone transfer failure

Critical service connectivity

Ensure communication with critical external services (like Syslog services; NTP, DNS, and identity servers; and threat prevention policies) is available at all times.

Misconfigurations

Verify configurations against gold standard frameworks to identify and resolve configuration drift issues like:

• DNS server configuration doesn’t match address manager
• NTP/DNS/Syslog server configured doesn’t match requirement
• Manual override enabled

High availability readiness

Find cross-device inconsistencies that jeopardize high availability, such as:

• Alerts if xHA server, cluster, or cluster member is down
• Identify if xHA configuration is not synchronized
• Identify if DHCP failover state has changed, or if failover servers are down

Auto-detect security risks and ensure compliance

Use hundreds of automation elements and security control validations to find security risks and compliance violations.

Automate maintenance tasks

Maintenance tasks seldom feel like the most urgent item on the ever-growing to-do list, but they’re critical to maintaining service availability. Automate tasks like identifying certificate renewal needs to avoid service disruptions and device configuration backup to maintain firewall health and performance.

Automated troubleshooting

Automatically apply proven, device-specific domain knowledge to analyze the root causes of issues as they occur.