About the Security Score

Security Insights evaluates the firewall configuration against security best practices and calculates a Security Score from 0 to 100. A higher score indicates a stronger configuration posture.

The score starts at 100 and is reduced when Security Insights finds misconfigurations. Each failed check deducts points based on severity.

Severity	Deduction	Meaning
Critical	20 points	Issues that can directly expose the firewall or administrative access
High	10 points	Major gaps that significantly reduce protection
Medium	5 points	Hardening issues that increase risk over time
Low	1 point	Minor hardening improvements

The score cannot go below 0.

Security Insights evaluates settings across four security pillars:

Pillar	Weight	Examples
System	25%	Administrative security, management access exposure, firmware, NTP, SNMP
Network	25%	Access rules, stale rules, Geo-IP filtering
Security/Threat	30%	GAV, IPS, Anti-Spyware, DNS Filtering, Content Filtering, DPI-SSL, Botnet Filter, Capture ATP, App Control
Availability	20%	Backup and HA health related checks

Security Insights runs asynchronously on the control plane. It does not affect live traffic processing.