SSPE: Managing security policies for multiple firewalls


Article from Issue 56/2005

The Simple Security Policy Editor (SSPE) helps you organize your network and keep track of security policies across multiple firewalls. You can reference a central policy to generate rulesets for packet filters and VPN gateways.

Many networks require multiple firewalls. Firewalls guard the Internet gateway, separate the departments within an enterprise, and help to connect remote sites through VPN technology. In this scenario, it helps to have a central tool for managing firewall security policies. The pioneer in this field was the Checkpoint Firewall-1 GUI [3]. But this commercial package tends to be overcomplicated, with an overabundance of features – not all of them useful – adding to the tool’s complexity. The free Simple Security Policy Editor (SSPE) [1] is far leaner. SSPE is basically a collection of shell and Perl scripts that help admins manage a distributed firewall environment.

Buy this article as PDF

Express-Checkout as PDF
Price $2.95
(incl. VAT)

Buy Linux Magazine

Get it on Google Play

US / Canada

Get it on Google Play

UK / Australia

Related content

  • High Availability VPN

    IPSec prevents many of the clever tricks high-availability products employ. We’ll show you a solution that provides transparent backup for IPSec connections.

  • Security Intro
  • Firewalls Intro

    Firewalls are becoming evermore sophisticated. Luckily, the tools for managing firewalls are becoming simpler and more accessible for ordinary users

  • Huge Hole in Yoggie USB Stick Firewall

    A full-fledged Linux computer on a USB stick: Yoggie uses this astonishing hardware trick to protect Windows machines against Web-based attacks. But there are some things that do not work as intended by the developers as an exhaustive test in Linux Magazine #94 / September will reveal. Just a few simple tricks were all it took to work around the firewall.

  • Guarddog

    The KDE Guarddog program promises an easy Linux firewall setup with just a few clicks. Guarddog helps inexperienced users secure computers – and even whole networks – against attack.

comments powered by Disqus

Direct Download

Read full article as PDF:

SSPE_Security_Policies.pdf (178.12 kB)