Skip to content
AscendCore
Back to Runbook Library
Network Template: configurable per customer

Firewall Rule Change

Turn a plain-language firewall request into a reviewable change summary, then apply it on approval, with a full audit record.

Integrates with

Palo AltoCisco Meraki

The problem

Firewall changes are high-stakes and easy to get wrong. The request often arrives as informal text, gets translated by hand, and the change record lives in someone's memory rather than an auditable log.

What AscendCore does

A requester describes the rule in Slack or Teams. AscendCore renders a clear change summary (source, destination, port, action), routes it to network and security approvers, and on approval applies the rule. The change is appended to the tamper-evident audit chain.

Status

Template. Supported firewall platforms and approver routing are configurable per customer. Connect it to your firewall management to enable.

Runbook source preview

Versioned, deterministic, auditable

Every runbook is defined as a versioned YAML manifest with explicit triggers, steps, and approval policies. The runbook itself is the audit-ready record of what AscendCore can and will do. Chat is just the interface that triggers it.

name: firewall-rule-change
trigger:
  channels: [slack, teams]
  intents: [firewall_change]
steps:
  - parse_requested_rule       # source, dest, port, action
  - render_change_summary
  - admin_approval
  - apply_rule
approval:
  required: true
  approvers: [network-admins, sec-team]
Want this runbook?

Configure firewall rule change for your environment

Templates are configurable per customer environment. Talk to us about the specific systems and approval flow you need.