The Fine Print

from crewai import Agent, Task, Crew
from langchain_openai import ChatOpenAI
llm = ChatOpenAI(model="gpt-4-turbo", temperature=0)
policy_agent = Agent(
    role='Firewall Policy Analyst',
    goal='Analyze firewall rules to find shadowed or logically redundant entries.',
    backstory='Expert in network topology and boolean logic.',
    verbose=True,
    llm=llm
)
traffic_agent = Agent(
    role='Traffic Hit-Count Analyst',
    goal='Identify rules that have zero traffic hits over the evaluation period.',
    backstory='Data-driven analyst who focuses on actual utilization over theoretical access.',
    verbose=True,
    llm=llm
)
architect_agent = Agent(
    role='Senior Network Architect',
    goal='Provide a safe consolidation plan and CLI deletion commands for redundant rules.',
    backstory='Cautious network operator who always prepares a rollback plan.',
    verbose=True,
    llm=llm
)
fw_config = """
Rule 10: Allow Source 10.0.0.0/8 to Dest 192.168.1.0/24 Port 443 (Hits: 5043)
Rule 20: Allow Source 10.1.1.0/24 to Dest 192.168.1.0/24 Port 443 (Hits: 0)
Rule 30: Allow Source 172.16.0.5 to Dest 8.8.8.8 Port 53 (Hits: 0)
"""
policy_task = Task(
    description=f'Identify any rules in this config that are shadowed (encompassed) by broader rules: {fw_config}',
    expected_output='List of shadowed rules with explanations.',
    agent=policy_agent
)
traffic_task = Task(
    description=f'Identify any rules in this config that have 0 hits, indicating they are unused: {fw_config}',
    expected_output='List of unused rules.',
    agent=traffic_agent
)
consolidation_task = Task(
    description='Combine the shadowing and traffic analysis. Output a specific action plan (e.g., Delete Rule 20, Delete Rule 30) and explain why it is safe to do so.',
    expected_output='Final firewall optimization report with specific deletion recommendations.',
    agent=architect_agent,
    context=[policy_task, traffic_task]
)
fw_swarm = Crew(
    agents=[policy_agent, traffic_agent, architect_agent],
    tasks=[policy_task, traffic_task, consolidation_task]
)
if __name__ == "__main__":
    print("Initiating Firewall Optimization Swarm...")
    optimization_plan = fw_swarm.kickoff()
    print("\n--- Firewall Optimization Plan ---\n")
    print(optimization_plan)