FireMon Adds AI Agents and MCP Connectivity to Network Security Policy Management

FireMon has introduced agentic AI capabilities designed to investigate network access, analyze security policies, and prepare coordinated firewall changes while leaving approval with human practitioners.

The release adds three deployment paths. Customers can use agents supplied by FireMon, build their own agents inside the platform, or connect external workflows through a FireMon Model Context Protocol server. The platform and MCP Server are scheduled to become available in November, with no additional FireMon charge for the initial offering.

FireMon's Intelligent Agent can translate natural-language questions into the company's Security Intelligence Query Language and explain the results. A Network Designer Agent prepares policy recommendations from business access requirements, while a Policy Change Designer Agent can assemble proposed changes across devices and policies.

The company says proposed changes are not saved until a practitioner reviews and accepts them. Even then, acceptance stages the work in a policy workflow rather than automatically deploying it to firewalls. AI features are optional and off by default, with roles, credentials, scoped permissions, and audit trails intended to constrain access.

“Network security has never been more complex, and the answer isn’t more infrastructure. It’s putting the policy context FireMon has built over 25 years to work,” said Jody Brazil, founder and CEO of FireMon. “Customers can deploy our agents, build their own, and connect FireMon to their broader agentic workflows, while practitioners keep the calls that need human judgment.”

The security value will depend on how reliably the agents interpret policy context and how clearly they expose the reasoning behind a recommendation. Enterprises should test failure modes, permission boundaries, and rollback procedures before allowing an AI workflow to prepare changes in production network environments.