FireMon Agentic AI Brings AI Agents to Firewall Policy Work

FireMon Agentic AI arrives as network security teams face a workload that keeps growing with every firewall vendor and cloud environment they run. According to SiliconANGLE, FireMon unveiled FireMon Agentic AI on October 27, 2026, adding AI agents to its network security policy management platform. The agents handle much of the investigation and planning behind firewall policy changes, while leaving deployment decisions firmly in human hands.

One business access request can span several devices and policies, and according to SiliconANGLE, there is often more than one technically valid way to grant it. Engineers have traditionally worked through those decisions by hand, checking rules, tracing access paths, and reconciling consoles one by one. FireMon Agentic AI is designed to take on that legwork, so practitioners can focus on judgment calls instead of manual lookups.

According to Business Wire, FireMon founded the network security policy management category more than two decades ago, and the company now positions its platform as the control plane above every vendor and environment. FireMon Agentic AI builds on that position, connecting policy intelligence to the broader workflows customers are already building around AI agents.

Three agents for firewall policy work

According to SiliconANGLE, FireMon Agentic AI supplies three agents, and customers can customize them or build new ones inside the platform. The FireMon Intelligent Agent answers plain-language policy questions, such as which rules allow access to a given service, and generates the underlying queries itself. The Network Designer Agent recommends firewall rules for a specific access requirement. The Policy Change Designer Agent carries an access request from discovery to staged Policy Plan changes and fills in required fields such as rule names.

The Policy Change Designer Agent pauses whenever a practitioner must choose between valid alternatives, according to SiliconANGLE. Nothing is saved until someone reviews and accepts the proposal. Even then, acceptance only stores the work in the FireMon workflow, with no automatic deployment to firewalls. That boundary matters: FireMon Agentic AI plans and stages changes, but it does not push them live on its own.

According to Business Wire, customers define agent instructions, assign skills and tools, and scope permissions to appropriate device groups. That scoping lets a team limit each agent to the device groups it should touch, rather than granting broad access across the whole estate. Activity is logged to an audit trail, giving security leaders a record of what each agent did and why.

Human control stays at the center of FireMon Agentic AI

AI enablement is optional and off by default, according to SiliconANGLE. Customers can pick from supported large language models, including one hosted in their own approved environment, and scope each agent's permissions to particular device groups. Practitioners retain authority at the decision and approval points in the supported workflow, according to Business Wire.

Network security has never been more complex, and according to FireMon founder and chief executive Jody Brazil, the answer is not more infrastructure. Brazil said the aim is to put the policy context the company has accumulated to work, with practitioners keeping the calls that need human judgment. That framing sets FireMon Agentic AI apart from fully autonomous approaches: the agents do research and drafting, while people keep approval.

The same human-first pattern is showing up across enterprise agent deployments. Isolated, governed execution is becoming the norm for agents that touch production systems, as seen in recent coverage of Akamai Agent Sandbox giving enterprise AI agents a safe place to run. FireMon Agentic AI applies a similar discipline to firewall policy, with staged changes and audit trails instead of direct deployment.

An MCP server opens FireMon Agentic AI to outside workflows

Outside agents get access too, through a new Model Context Protocol server, according to SiliconANGLE. The FireMon MCP Server could let an incident investigation workflow pull FireMon policy evidence in alongside alert data. Authorized workflows can go further and turn selected recommendations into staged Policy Plan changes. Roles and credentials govern what each external application can reach.

According to Business Wire, the FireMon MCP Server connects FireMon network security intelligence to the broader workflows customers are building. That connection matters because firewall policy evidence rarely lives alone: during an incident, teams need to know what access exists, what changed, and what a proposed change would allow, all in one place. The MCP server gives external tools a governed way to ask those questions.

Marketing teams are also putting agents to work in governed, staged ways, as shown by Sprinklr marketing AI agents entering open beta for enterprise campaigns. Across both security and marketing, the pattern is consistent: agents draft and recommend, people approve, and the system records the decision.

Availability and what to watch next

Both FireMon Agentic AI and the FireMon MCP Server are due in November, according to SiliconANGLE and Business Wire. FireMon is not charging extra for the initial release. The company, based in Lenexa, Kansas, was started in 2004 and now reports more than 1,800 enterprise customers in upward of 70 countries, according to SiliconANGLE.

For security teams, the practical next step is preparation, not activation. Before switching FireMon Agentic AI on, teams should decide which device groups each agent may touch, which model environment it may use, and who approves staged changes. Those boundaries, set early, determine whether FireMon Agentic AI speeds up policy work or simply adds a new layer of review.

FireMon Agentic AI will be judged on a simple test: does it shorten the time from access request to approved, well-documented policy change, without weakening control? The staged workflow, the pause at ambiguous choices, and the audit trail all point in that direction. The November release will show whether enterprise teams trust FireMon Agentic AI enough to make it part of everyday firewall policy work. Sources: SiliconANGLE and Business Wire.