SonicWall EXP Config Standards Analyzer

What it is

A local web app for auditing every SonicWall firewall a bank or credit union runs. Drag in the EXP config exports (10+ at once) and it lines the firewalls up side by side, highlights every setting that differs, grades each one against a written standard, and writes the steps to bring them all into the same, compliant configuration.

What it checks

• Content filtering and IPS/IDS
• VLAN segmentation and management access restrictions
• VPN authentication and MFA
• Port forwards and Geo-IP blocking
• Licenses and legacy "Any" rules

Every finding is tied to the standard it affects (PCI DSS, NIST SP 800-53, CIS Controls, FFIEC Information Security), so the remediation tickets double as examiner-ready evidence.

Reports

Five colorized HTML reports: remediation summary, differences, compliance matrix, findings, and remediation tickets with a plain-English Why, the failing standard and a copy-ready ticket text. Every analysis is kept in a searchable history, so you can re-run after the fixes and show exactly what changed.

Get it

Python 3 only, no third-party packages. Everything stays on your machine.

git clone https://github.com/ryanerb4/SonicWall-Firewall-EXP-Config-Standards-Analyzer.git
cd SonicWall-Firewall-EXP-Config-Standards-Analyzer
python3 app.py

The repo ships a fictional sample data set (three firewalls for an invented community bank) so you can see a full analysis in seconds. The source, README and screenshots live on GitHub. Open an issue there for bugs; use the feature requests here for ideas.