NetSPoC provides its own language for describing the security policy and topology of a network. The security policy is a set of rules that state which packets are allowed to pass the network and which not. NetSPoC is topology aware: a rule for traffic from A to B is automatically applied to all managed packet filters on the path from A to B.
Currently NetSPoC generates ACLs and static routing entries for
IPSec encryption is supported as well. Crypto configuration for Cisco IOS routers and ASA firewalls is generated.
NetSPoC's text based specification language is well suited for integration with CVS or other version control systems. A script is provided for tagging a policy and saving it to a policy database.
This software is actively developed with perl 5.12 under linux. It should be portable to other platforms where perl is available.
Homepage for NetSPoC is at: http://netspoc.berlios.de
For questions and comments use the netspoc mailing list.