Batfish

Today I want to share with you some behaviour that I learnt the other day that you might find helpful when working with Batfish. This behaviour is based upon the following: When working with impact analysis and using layer1 topologies in Batfish. Don't use named references within your

Today I wanted to quickly share something that you may find useful when working with Batfish. Which is around Batfish's behaviour around the modeling of management networks. The TL;DR here is: By default, Batfish shuts down the management interfaces of your nodes. If you have read this

In my previous life as a firewall admin, I found that there were two key things to maintaining a healthy firewall ACL. First, ensure it passes the necessary traffic! Secondly, ensure that the ACL was cluttered with any unnecessary ACL entries. By making sure our ACL's were clutter-free

I'm sure, by now that it's no surprise that I`m a huge fan of Batfish! More details on why here. Today I wanted to share with you one of the features that Batfish provides - route analysis. In short, Batfish allows you to model your

A Hands-on Guide to Multi-Tiered Firewall Changes with Ansible and Batfish (Part 1)IntroductionNow I can say, from experience, that in my opinion one of the most frustratingadmin tasks can be ACL updates on multi-tier firewall environments. Validationof the change and any troubleshooting if an ACL is still missed can

Introduction Welcome back to part 3. We will now look at an example workflow using the steps and Playbooks previously covered in parts 1 and 2. WorkFlow Our workflow will consist of the following steps: Figure 1 - WorkFlow overview. With regards to the Dev environment. This is our local

Introduction Welcome back. Previously we introduced ourselves to Ansible and Batfish, along with installing the necessary components. We will now look at an example topology, and also dive into the different Ansible modules that the Batfish role provides us. Note: The code for this guide can be found within the

Introduction Now I can say, from experience, that in my opinion one of the most frustrating admin tasks can be ACL updates on multi-tier firewall environments. Validation of the change and any troubleshooting if an ACL is still missed can be tedious and lengthy. Therefore, I'm delighted today