Turns traffic requirements into a least-privilege rule set with a default deny, logging, and review notes on risky rules (any-any, clear-text protocols, exposed services).
Columns of the register Rule name Source Destination Service / port Action Logging Review notes
1 Least privilege
One rule per flow, with zones, addresses, ports and a default deny.
2 Risky rules flagged
Any-to-any, clear-text protocols and services exposed to the internet.
3 Documented
Each rule keeps its purpose and logging decision for the next review.
What you provide Firewall brand — Each brand has its own rule grammar: the rules are written in it. Model and version — E.g. “FortiGate 100F, FortiOS 7.4”. Zones — E.g. “LAN”, “DMZ”, “Servers”, “Internet”. Traffic flows — One row per entry, e.g. LAN; 10.10.10.0/24; Servers; 10.10.20.10; tcp/443; Intranet access; allow Traffic not allowed Logging Additional context — Anything the service should take into account. Title — As it will appear on the deliverable. Author — Shown as the author of the deliverable; never filled in by the AI. 
