control system and allowing administrators to push out new rules to hundreds of devices.The process saves admins from having to log onto multiple devices, cutting down on the possibility of operator error, but also means that rulesets and rule changes can be searched from a single point of access.Search can be carried out by service, IP address, network block and other parameters, Matasano said.