Turn Complex Firewall Rules into Dynamic Network Insights
Visualize network topology, automate compliance audits, and harden policy definitions with client-side analysis. Built for enterprise security operations by XilonSec, LLC.
To use the demo app, sign in with user demo and password XilonSec@Demo.
- 20+ automated audits
- Client-side analysis
- CIS · PCI-DSS · NIST
- From $2,995 / year
Engineered for High-Stakes Firewall Operations
A unified offline-first console to audit configuration files, verify traffic logs, map interfaces, and generate hardened FortiOS rules.
Logical Topology Visualization
Map VDOMs, zones, loopbacks, and interfaces dynamically. Trace active traffic paths directly on the map using integrated log telemetry overlays.
20+ Automated Security Audits
Instantly flag weak cryptographic proposals, insecure admin settings, unlogged ACCEPT policies, and high-risk exposed protocols against CIS, PCI, and NIST frameworks.
XsPAtool Policy Hardening
Use traffic-correlated IP aggregation and Layer 7 application control profiling to narrow wide-open firewall rules in-place or split them into targeted policies.
Interactive Logical Topology Mapping
Visualize physical/logical interfaces, zone structures, and routing loops. Directly overlay traffic telemetry onto maps constructed by client-side configuration parsing.
Automated Security Posture Audits
Audit configuration metrics against CIS, PCI-DSS, and NIST frameworks. Instantly identify idle timeouts, default ports, missing 2FA policies, and un-hardened crypto standards.
XsPAtool — XilonSec Policy Analyzer Tool
Analyze traffic log summaries to detect overly broad any-to-any configurations. View unique flows, destinations, and services to confidently consolidate open rule sets.
Experience FGT Config Visualizer in Real Time
Interact with our sandbox simulator below to see how logical topology mapping and automated auditing help you secure FortiGate deployments.
Interactive Scenario Controller
Adjust the compliance parameters below to see the impact on security posture scores and firewall interfaces immediately.
Exhaustive Visibility for Network Security Teams
Configure dashboard profiles, analyze routing table changes, and generate executive compliance logs instantly.
Comprehensive Dashboard Overview
See firewall subsystems in one dashboard. FGT Config Visualizer parses config files and presents the indicators operators use first.
- Interactive KPI Cards for direct interface jumps
- Live Telemetry alerts for missing 2FA and Weak Cryptography
- High Availability (HA) Blade Visualizer with sync beacon indicators
- VDOM links and custom zone mapping configurations
# Compliance Engine Findings: [CRITICAL] Admin port exposed on WAN interface port1 (HTTPS/SSH allowed) [HIGH] Weak SHA-1 / DH Groups active in Phase-1 VPN Tunnel proposal
Firewall Policy Architect
Design, edit, and validate FortiOS firewall policies in an isolated sandbox environment prior to local environment deployment.
- Interactive GUI form mappings for firewall interfaces, subnets, and services
- Real-time automated code block generator matching FortiOS syntax
- Overlap and shadow-rule verification against current VDOM configuration
- Deep inspection verification: automated warnings if UTM is active but SSL inspection is disabled
Live Syslog Capture & Buffer Throttling
Eliminate third-party log visualizer dependencies. Route syslog flows straight to your browser over UDP/514 & Secure UDP/6514 with high-performance rendering.
- Built-in UDP Syslog Socket Receiver with port customization
- Buffer throttling controls (200 to 2,000 logs) to optimize browser responsiveness
- Automatic render suspension when the window is minimized to prevent frame drops
- One-click export of live traffic and system events buffers
Licensing & Compliance Models
Flexible deployment plans built for independent security consultants, mid-market IT companies, and large enterprises.
Professional
Perfect for Small/Mid Companies.
- Multi-User Shared Backend
- Up to 2 Users
- Up to 5 Devices
- Live API connections (FortiGate/FAZ/FMG)
- XsPAtool - XilonSec Policy Analyzer Tool
- UDP Live Syslog Receiver (UDP/514 & Secure UDP/6514)
Enterprise
Perfect for large organizations and distributed architectures.
- Multi-User Shared Backend
- Unlimited Users
- Unlimited Devices
- Live API connections (FortiGate/FAZ/FMG)
- XsPAtool - XilonSec Policy Analyzer Tool
- UDP Live Syslog Receiver (UDP/514 & Secure UDP/6514)
Ready to Secure Your FortiGate Policies?
Get in touch with a XilonSec system architect. Let us show you how FGT Config Visualizer integrates with your deployment and enhances security auditing.