Firewalls collect clutter over the years: unused objects, forgotten rules, "allow any" policies and missing comments. Delyan checks every loaded configuration automatically and tells you what's risky, what's unused and what's worth cleaning up, ordered by severity.
Delyan never changes your firewall. You review the findings in Delyan and make the fixes on the firewall itself.
What Delyan checks
| Area | Examples of findings |
|---|---|
| Device hardening | Weak admin access settings, outdated encryption, missing banners, logging, NTP or DNS gaps, high availability issues |
| Interfaces | Interfaces that are enabled but unused, disabled but still referenced, or not assigned to a zone |
| Objects | Unused addresses and services, duplicates, and objects without comments |
| Policies | Disabled rules, rules without logging or comments, rules never hit by traffic, duplicate and shadowed rules, over-permissive "any" rules and expired schedules |
Findings are grouped by category in the Analysis section of the sidebar.
Reading the results
Every analysis page follows the same pattern:
- A score at the top shows how healthy this area is. Green is good, orange needs attention and red needs action.
- A breakdown shows the score for each sub-category.
- A list of findings, each with a severity (Critical, High, Medium or Low), how many items are affected and a recommended fix.
- Drill-in links show the exact policies, objects or interfaces behind each finding.
Start with Critical and High findings. A few permissive rules that carry real traffic matter more than dozens of missing comments.
Upload a policy hit-count CSV for the device to see which rules are actually used and which haven't been hit in 3, 6 or 12 months. See Add your first device.
Summary dashboards
Three pages give you the big picture before you dive into the details:
The overall score, a breakdown per category and the most serious issues on one page. Open it after every new configuration.
Your cleanup backlog (duplicate, shadowed, permissive and expired rules), the riskiest findings with recommended fixes, and a short audit briefing from Dely.
How the firewall measures up against the CIS benchmark: an overall posture score, passing and failing controls, and the top failing controls to fix first.
Compliance
The Compliance Summary scores each firewall against the CIS benchmark for its vendor. Alongside the score you'll find:
- Passing, failing and warning control counts.
- A compliance radar that shows strengths and weak spots across areas such as logging, segmentation, encryption, authentication and rule hygiene.
- Top failing controls, ordered by severity, each with the current value from your configuration.
- An executive briefing from Dely that summarises the results in plain English.
Click Export Auditor PDF to download everything on the page as a single report for your auditor. See Reports for the other reports.
Ways to use it
- Regular health check. Open the Analysis Summary after each new configuration and look at what changed.
- Cleanup project. Work through Analysis Insights, export the matching reports and turn the findings into tickets.
- Audit preparation. Review the Compliance Summary, fix the top failing controls, then export the auditor PDF.
