Batfish vs Hillstone Security Management

Batfish is an open-source tool for analyzing network device configurations and validating network behavior. It works from configuration files, so core analysis does not require direct access to network devices. Teams can inspect deployed configurations and check planned changes before deployment. Checks cover undefined references, MTU and AAA settings, template compliance, sensitive-service reachability and expected traffic paths. Batfish can test whether end-to-end reachability survives any single-link or single-device failure, compare current and planned reachability, assess ACL or firewall changes and evaluate functional equivalence across vendors. Pybatfish provides a Python 3 SDK, and example Jupyter notebooks are available. An all-in-one Docker container bundles Batfish and notebooks. It runs on operating systems supporting Docker. Documented support includes Arista, AWS, Azure, Cisco, Juniper, Palo Alto Networks and SONiC, while Aruba, Dell Force10 and Foundry have limited support.

Hillstone Security Management (HSM) is a centralized platform for security operations, secure SD-WAN management, and ZTNA control. It manages Hillstone NGFW, NIPS, ADC, and WAF devices and can monitor third-party equipment through SNMP. Administrators can view device status, resource use, and licenses, while handling configurations, firmware, and signature upgrades. HSM manages ZTNA gateways and distributes policy packages and device-specific policies. Its SD-WAN functions include zero-touch provisioning, VPN overlays for hub-and-spoke or mesh topologies, and traffic steering based on applications, policies, and network conditions. A firewall policy analyzer identifies redundant, hidden, empty, overly broad, or high-risk rules. Reporting includes more than 30 templates in HTML and PDF, and logs can be forwarded to third-party syslog servers. Deployment options include VMware Workstation, ESXi, KVM, and AWS support for vHSM. One master device can register up to 16 slaves. Pricing is on request through an authorized reseller. Hillstone was founded in 2006 and is headquartered in Sunnyvale, California.