Firewall Rule Design, Audit & Troubleshooting
Design, audit, and troubleshoot firewall rules systematically to prevent security gaps
What You Can Do
This skill guides you through firewall rule design and analysis using structured frameworks to identify conflicts, overlaps, and security gaps before rules reach production. You can audit existing rulesets for logical inconsistencies, access violations, and performance inefficiencies, then generate remediation recommendations. It also helps troubleshoot connectivity failures by tracing rule logic and identifying which rules are blocking legitimate traffic.
Features
Identify overlapping, contradictory, or redundant firewall rules that may cause security issues or unexpected blocking
Find uncovered ports, services, or traffic patterns that lack appropriate allow/deny rules
Reorder rules for correct evaluation sequence and improved performance
Verify firewall configurations against regulatory requirements and organizational standards
Trace rule logic to identify why specific traffic is being blocked or allowed
Create clear, audit-ready documentation explaining the purpose and scope of each rule
Map allowed and blocked traffic patterns across your firewall topology
Example Output
Rule Conflict Report:
✓ Conflict Found — Rule 15 (Allow SSH to 192.168.1.0/24) conflicts with Rule 8 (Deny all inbound SSH)
- Issue: Rule 8 evaluated first; Rule 15 never executes
- Recommendation: Move Rule 15 before Rule 8 or refine Rule 8 to exclude 192.168.1.0/24
✓ Gap Found — No rule covers inbound HTTPS (443) to web server 10.0.1.50
- Traffic source: 0.0.0.0/0
- Recommendation: Add allow rule for TCP 443 to 10.0.1.50
Optimized Rule Set:
| Priority | Original | Optimized | Action |
|---|---|---|---|
| 1 | Deny all inbound | Allow SSH 192.168.1.0/24 | Moved specific rule before default deny |
| 2 | Allow SSH 192.168.1.0/24 | (Removed) | Conflict resolved by reordering |
| 3 | — | Allow HTTPS 0.0.0.0/0 to 10.0.1.50 | Gap filled |
| 4 | Deny SSH 0.0.0.0/0 | Deny SSH 0.0.0.0/0 | Reordered, now effective |
What's Included
- SKILL.md: Complete firewall analysis framework with decision trees and validation workflows
- Rule Audit Checklist: Step-by-step checklist for reviewing firewall configurations
- Conflict Detection Workflow: Template for systematically identifying overlapping rules
- Rule Ordering Guidelines: Best practices for rule sequence optimization
- Compliance Mapping Template: Link rules to regulatory requirements (PCI-DSS, SOC 2, ISO 27001)
- Connectivity Troubleshooting Flowchart: Decision tree for diagnosing why traffic is blocked
- Rule Documentation Template: Structured format for rule purpose, scope, and exceptions
- Traffic Flow Diagram Template: Markdown format for visualizing allowed/blocked paths
Who It's For
- Network security engineers — Design and audit firewall policies across enterprise infrastructure
- System administrators — Manage firewall rules and troubleshoot connectivity issues
- DevOps engineers — Validate security group and network ACL configurations in cloud environments
- Security auditors — Verify firewall compliance with organizational and regulatory standards
- Compliance officers — Map firewall rules to audit requirements and regulatory controls
Best For
- Firewall policy design — Create new rulesets that are secure, efficient, and easy to maintain
- Rule audits and security reviews — Identify gaps, conflicts, and redundancies in existing configurations
- Connectivity troubleshooting — Diagnose why specific traffic flows are being blocked or allowed
- Cloud security group validation — Audit AWS security groups, Azure NSGs, or GCP firewall rules for misconfigurations
- Compliance validation — Ensure firewall rules align with PCI-DSS, SOC 2, HIPAA, or other regulatory requirements
You might also like
This skill enables you to automatically audit your websites against compliance standards and detect deviations from expected baselines. You can track regulatory requirements, identify policy violations, and generate compliance reports with actionable remediation steps. Monitor multiple sites simultaneously and maintain detailed audit trails for compliance documentation.
Analyze chemical processes systematically to identify hazards, assess risks, and generate safety recommendations. You can perform HAZOP analyses, evaluate compliance with industry standards, conduct root-cause analysis of incidents, and develop emergency response procedures. The skill guides you through structured safety reviews that reduce the likelihood of accidents and regulatory violations.
You'll develop systematic approaches to injectable formulation design, from API selection through sterilization strategy. Claude helps you troubleshoot failed batches by analyzing root causes, recommends regulatory pathways (505(b)(2), ANDA, NDA), and provides science-backed solutions for stability, compatibility, and manufacturability challenges.
You can conduct comprehensive hazard analyses for chemical processes using industry-standard methodologies like HAZOP and LOPA. The skill helps you assess risks quantitatively, identify control gaps, design engineered safeguards, and generate formal documentation for regulatory compliance and process safety management.
Claude analyzes your code diffs and generates standardized commit messages that follow the Conventional Commits specification. The skill automatically determines the correct commit type, scope, and description based on the changes you've made, ensuring your messages are parseable by automation tools while remaining human-readable for code reviewers.
You can transform raw text into structured, labeled datasets for machine learning, analysis, and research. This skill performs named entity recognition, sentiment classification, part-of-speech tagging, and dependency parsing—generating consistent, validated annotations at scale. Use it to prepare corpora, extract entities, classify documents, or perform linguistic analysis without manual annotation.
This skill automates the creation of production-ready deployment validation checklists, infrastructure-as-code templates, and incident response runbooks tailored to your ML stack. You get comprehensive pre-deployment checks covering model validation, data pipeline integrity, infrastructure readiness, and monitoring setup—all customized for your specific models and cloud provider. The skill generates executable runbooks that teams can follow during incidents, including rollback procedures, failover strategies, and diagnostic commands.
Rapidly analyze firmware logs and diagnose hardware issues that cause device failures, connectivity problems, and performance degradation. You'll identify root causes from stack traces, crash dumps, and sensor data, then generate specific optimization recommendations. This skill transforms raw device logs into actionable debugging plans that reduce time-to-resolution from hours to minutes.