FirewallBuilder

Firewall Builder is a GUI firewall configuration and management tool that supports iptables (netfilter), ipfilter, pf, ipfw, Cisco PIX (FWSM, ASA) and Cisco routers extended access lists. Firewall Builder uses object-oriented approach, it helps administrator maintain a database of network objects and allows policy editing using simple drag-and-drop operations.
Learn More

Current stable version 2.1.19

Major update: Policy compilers for Cisco PIX (supports FWSM and ASA appliances) and IOS extended access lists have been released under GPL and included in the main package. Changes in the packaging: now we ship only two RPMs: one for the fwbuilder library (libfwbuilder-2.1.18.rpm) and the other for the GUI and all 6 policy compilers (fwbuilder-2.1.18.rpm)

Firewall Builder 3.0 beta

Latest build of 3.0 beta (build 479) is considered release candidate. Unless new critical bugs are discovered, we plan to release Firewall Builder 3.0 the week of August 25

Beta testing of the new major release of Firewall Builder has begun. Firewall Builder 3.0 adds support for IPv6 for iptables, PF and Cisco IOS access lists. Its new GUI is based on QT4 and has been improved in ways that make it suitable for use on laptops. List of features implemented in 3.0 can be found here. Source code and pre-built packages will be published regularly in the nightly builds area of this web site. Packages are available for beta testing on all supported OS: Linux, Windows and Mac OS X.

Screenshots

With Firewall Builder, administrator can manage multiple firewalls using the same database of network objects. Change made to an object is immediately reflected in the policy of all firewalls using this object.

Built-in interactive installer uses ssh to communicated with the firewall and can automatically copy generated policy and activate it. Installer supports batch mode and can update policy of multiple firewalls in one session.

In Firewall Builder, administrator works with an abstraction of firewall policy and NAT rules; software effectively "hides" specifics of particular target firewall platform and helps administrator focus on implementation of security policy.
More