It wasn't running as any sort of persistent service, if that's what you mean. It just ran during deployments to check output of old & new firewall generation me

It wasn't running as any sort of persistent service, if that's what you mean. It just ran during deployments to check output of old & new firewall generation methods for equivalence. Something like what you describe was implemented in an Azure system called SecGuru, which is sort of a generalized version of firewall comparison to check security rule enforcement. Here is the whitepaper: https://www.microsoft.com/en-us/research/wp-content/uploads/2016/02/secguru.pdf https://www.microsoft.com/en-us/research/wp-content/uploads/...