FIRECROCODILE: A checker for static firewall configurations

We present FIRECROCODILE, a tool to check the static configuration of Cisco PIX firewalls. FIRECROCODILE is based on the extensible framework CROCODILE and thus is extensible itself. We report on FIRECROCODILE's architecture, its abilities and features, and its relation to other tools. Finally we report on our experiences when analyzing the configuration of the central firewall of a research center with a complex network and application structure.