Cloud management changes operations. Policy Governance keeps security in control. Published: Aug 04, 2026 Last Updated: Aug 04, 2026 Table of contents Cloud-delivered management platforms have transformed how organizations operate their security infrastructure. Tasks that once required managing individual devices can now be centralized, automated, and executed at scale. For security teams managing increasingly distributed environments, that operational simplicity is a significant advantage. But easier management does not automatically mean stronger security. As organizations expand across cloud, on-premise, and hybrid environments, the challenge shifts from deploying policies to governing them. Security teams still need to understand whether firewall policies remain aligned with business intent, whether changes introduce unnecessary risk, and whether controls continue to support compliance and Zero Trust initiatives over time. That is where continuous policy governance becomes essential. FireMon's integration with Palo Alto Networks Strata Cloud Manager extends these governance capabilities to cloud-managed Palo Alto environments, helping organizations reduce policy-related risk while maintaining the operational benefits of cloud-delivered management. Cloud management solves administration, not governance. Palo Alto Networks Strata Cloud Manager simplifies the administration of security infrastructure by providing centralized, cloud-based management for next-generation firewalls. Security teams can deploy policies faster, manage distributed environments more efficiently, and reduce the operational burden associated with traditional firewall management. Those operational improvements are important, but they answer only part of the security equation. Organizations must still answer critical governance questions every day. * Which firewall rules create unnecessary risk? * Are security policies still aligned with business requirements? * Will a proposed policy change introduce compliance issues? * Which rules are no longer needed? * How can teams consistently validate policy decisions across cloud and on-premises environments? These questions become more difficult as environments grow, applications change, and security architectures evolve. Centralized management provides visibility into devices. Continuous policy governance provides confidence that the policies protecting those devices continue to achieve the intended security outcomes. Continuous validation has become a security requirement. Policy governance has traditionally been treated as a periodic exercise. Organizations prepared for audits, reviewed firewall rules on a scheduled basis, and performed cleanup projects when complexity became unmanageable. That approach is becoming increasingly difficult to sustain. As artificial intelligence accelerates the speed of cyber threats, organizations have less time to identify and address policy weaknesses before they can be exploited. As FireMon CEO Jody Brazil explains: "Firewalls have always been central to reducing an organization's attack surface, but a firewall is only as effective as the policy it enforces. As artificial intelligence compresses the time between vulnerability discovery and exploitation, security teams need continuous policy control and policy lifecycle management across the environments that protect the business." This shift is fundamentally changing how organizations approach security governance. Periodic policy reviews are no longer enough. Security teams need continuous visibility into policy effectiveness, compliance, and risk so they can identify issues before they become incidents. FireMon's own benchmark data reinforces this challenge. Insights collected from millions of policy checks across enterprise environments found that 58% of firewalls fail high-severity policy checks, while 69% of firewall rules are unused. Nearly half of firewall rules lack an owner or documentation, making policy decisions more difficult and compliance reviews more time consuming. These findings highlight an important reality: organizations are not struggling because they lack policy data. They are struggling because they lack continuous visibility into policy quality, risk, and effectiveness. Bringing continuous Policy Governance to Strata Cloud Manager. FireMon complements Palo Alto Networks Strata Cloud Manager by adding continuous policy governance and validation to cloud-managed firewall environments. Using native APIs, FireMon collects policy and configuration information managed through Strata Cloud Manager and incorporates it into its policy intelligence platform. The result is a centralized view of policy risk, compliance posture, and operational health that helps security teams make better decisions before risk becomes exposure. With FireMon, organizations can: * Identify overly permissive, redundant, and unused firewall rules. * Evaluate proposed policy changes before deployment. * Continuously monitor compliance with internal standards and regulatory frameworks. * Automate policy reviews and recertification processes. * Generate audit-ready reporting with significantly less manual effort. Rather than replacing Strata Cloud Manager, FireMon extends its value by providing the governance capabilities needed to maintain policy quality throughout the policy lifecycle. One governance layer Across Hybrid Environments. Few enterprise environments rely on a single management platform. Many organizations operate a combination of cloud-managed firewalls, on-premises infrastructure, Panorama-managed environments, and additional security technologies from multiple vendors. Maintaining consistent governance across those environments can quickly become a significant operational challenge. FireMon provides a unified governance layer that spans these diverse environments, allowing security teams to analyze policies consistently regardless of where they are managed or enforced. By combining policy intelligence from Strata Cloud Manager with visibility across additional security platforms, FireMon gives organizations a broader understanding of policy effectiveness throughout the enterprise. This enables security teams to standardize governance processes, reduce operational complexity, and apply consistent policy controls across their entire security architecture rather than within isolated management platforms. Supporting Zero Trust through better policy decisions. Zero Trust is not achieved simply by deploying security technologies. It depends on maintaining accurate, validated, and continuously governed security policies as environments evolve. As users, applications, and infrastructure change, policies must evolve with them while preserving least privilege, segmentation strategies, and compliance requirements. FireMon helps organizations operationalize Zero Trust by continuously validating policy intent, identifying unnecessary access, assessing proposed policy changes before deployment, and providing the visibility needed to reduce attack surface without slowing the business. The result is greater confidence that security policies continue to support organizational objectives as environments evolve. Better management starts with better governance. Cloud-delivered management platforms like Palo Alto Networks Strata Cloud Manager have fundamentally improved how organizations administer security infrastructure. They simplify operations, accelerate deployments, and help security teams manage increasingly complex environments more efficiently. But operational efficiency alone does not ensure security outcomes. As AI continues to compress the time between vulnerability discovery and exploitation, policy governance can no longer be treated as a periodic exercise. It must become a continuous operational discipline. By integrating with Palo Alto Networks Strata Cloud Manager, FireMon extends continuous policy governance into cloud-managed firewall environments while supporting broader hybrid and multi-vendor architectures. Together, the two solutions help organizations reduce policy-related risk, strengthen compliance, accelerate security operations, and maintain continuous validation across the environments that matter most. Because managing security infrastructure is only part of the challenge. Governing security policy is what keeps organizations secure. * Press Release FireMon Integrates with Palo Alto Networks to Help Enterprises Strengthen Security Policy Governance Across Hybrid Environments LENEXA, Kan., August 4, 2026 - Today FireMon, a leader in network security policy management and the security policy control plane for the modern en Read more * Integration Brief Palo Alto Strata Cloud Manager Integration Brief FireMon support for Palo Alto Networks Strata Cloud Manager is available now, with current capabilities including policy ingestion, normalization and analysis. Learn more * Case Study 95% Reduction in Firewall Change Effort for Global B2B Travel Platform Enforce Compliance, Manage Change, Travel The Challenge This global travel management company operated a hybrid firewall and cloud estate spanning 76 firewalls and 484 cloud devices across Pa Read the case

FireMon has launched Insights 2.0, an AI-driven network security policy management platform, alongside research revealing severe compliance failures across enterprise firewalls. Analysis of 9.2 million policy checks found that 58% of firewalls fail high-severity compliance checks, whilst 48% fail at critical severity. The data exposes significant operational inefficiencies: 69% of firewall rules are unused, 45% lack proper documentation, and 17% are redundant. However, automated policy workflows demonstrated 67% lower change-related risk compared with manual processes. FireMon Insights 2.0 addresses these issues through continuous AI-powered operational intelligence, moving beyond static reporting to identify persistent risks and automation opportunities. Early adopters reduced control failures by up to 31% within six months. The platform is available now to all FireMon customers.

58% of firewalls fail high severity compliance checks according to new FireMon Insights data. FireMon unveiled FireMon Insights 2.0, a major advancement in AI-driven policy intelligence for hybrid enterprise networks. The launch comes as new analysis from FireMon highlights the growing reality that policy environments are becoming too complex to govern manually at scale, resulting in accumulating outdated rules, unmanaged changes, and unresolved risk at a pace much faster than teams can remediate. The new operational analysis from the FireMon Insights platform comprises 9.2 million policy checks and examines policy behavior across complex hybrid networks at scale. It reveals a structural security operations problem: manual policy management is woefully inefficient, and allows risk across the attack surface to continue to expand rapidly. This is primarily due to creating an environment in which high severity policy failures persist over extended periods of time, exacerbated by unused and redundant rules. The FireMon Insights 2.0 release addresses this discrepancy by moving beyond static dashboards and point-in-time reporting to deliver continuous operational intelligence for enterprise policy environments, powered by AI. More than simply layering AI onto reporting, the new version imbues AI with the operational context behind policy data. Instead of simply reporting policy status, the AI-powered platform helps security teams identify where operational risk is accumulating, which issues persist over time, and where automation can reduce policy complexity and improve control across hybrid networks. Security controls are only as effective as the policy that governs them, and the lack of a policy control plane allows these issues to persist and compound. The anonymized data from FireMon Insights deployments reveals: * 58% of firewalls fail high-severity checks; 48% fail at critical severity. 69% of firewall rules are unused and 45% lack an owner or documentation, introducing audit gaps and operational blind spots. * 17% of rules are redundant or shadowed, increasing operational complexity and masking potential misconfigurations. * Automated policy workflows show a 67% lower change-related risk delta compared with manual changes. "Firewall complexity is no longer just an operational problem. It is a control problem," said Jody Brazil, CEO of FireMon. "Security teams have massive investments in firewalls, cloud, and segmentation platforms, but without control of policy those environments become difficult to manage securely. The problem is no longer lack of tools. It is lack of operational control." By combining policy data with operational context, FireMon Insights 2.0 helps teams identify risk faster, prioritize remediation intelligently, and automate repetitive tasks that slow secure policy changes and increase operational risk. In the first 6 months, customers using FireMon Policy Manager significantly reduced control failures up to 31%. The new and enhanced capabilities underpinning these gains include: * Policy Change Intelligence: Built-in policy change analysis that eliminates manual export and spreadsheet work while identifying rework, operational churn, and opportunities to reduce policy risk through automation. * Workflow Intelligence: Visibility into how change requests move through the policy workflow, highlighting rejected requests, redesign loops, approval bottlenecks, and opportunities to safely increase automation. * Automation Effectiveness: Analytics that identify repetitive manual work and pinpoint where automation can reduce cost, improve consistency, and lower policy change risk. * Control Failure Analysis: Deeper visibility into which controls fail most often and where failures recur, helping teams prioritize the highest-risk issues across the environment. * Policy Posture Trends: Understand where policy is breaking down, what is driving exposure and what to fix first through scoring and trend analysis over time. * Control-Level Visibility: Domain-based, control-level pass/fail visibility that helps teams quickly identify where policy and compliance issues exist across managed devices. "Technologies like Mythos are shining a bright light on a reality security teams can no longer ignore: any connected system is vulnerable," said Brazil. "As AI accelerates the speed and scale of attacks, firewalls, segmentation, and policy governance become more important than ever. Our Insights data shows most organizations still lack the operational control needed to consistently manage policy across hybrid environments. That is why network segmentation, microsegmentation, and continuous policy governance are becoming foundational to reducing attack surface and limiting blast radius." With Insights 2.0, FireMon is strengthening its role as the network security control plane for enterprises operating across firewalls, cloud, segmentation, and hybrid infrastructure. FireMon Insights 2.0 is available now for all FireMon customers. David Marshall has been involved in the technology industry for over 30 years, and he's been working with virtualization software since 1999. He became a pioneer in the virtualization and cloud computing field - one of the few people in the industry allowed to work with Alpha stage server virtualization software from industry leaders: VMware (ESX Server), Connectix and Microsoft (Virtual Server).Through the years, he has invented, marketed and helped launch a number of successful software companies and products. David holds a BS degree in Finance, an Information Technology Certification, and a number of vendor certifications. He's also co-authored two published books: "VMware ESX Essentials in the Virtual Data Center" and "Advanced Server Virtualization: VMware and Microsoft Platforms in the Virtual Data Center" and was the technical editor for two popular Virtualization "For Dummies" books. With his remaining spare time, David founded and operates one of the oldest independent modern data center publications, VMblog.com. And co-founded CloudCow.com, a publication dedicated to Cloud Computing. Since 2009, and each year thereafter, David has been honored with the vExpert distinction by VMware by Broadcom for his evangelism.Connect on LinkedIn: https://www.linkedin.com/in/davidmarshall/