1. A method of automatically managing one or more security rule-sets, the method comprising: a. obtaining data characterizing a connectivity request and data characterizing an amended rule-set, the amended rule-set being derivative of an initial rule-set amended to fit the connectivity request; b. automatically verifying each possible combination of values specified in different fields of the connectivity request against the initial rule-set and the amended rule-set; c. calculating one or more values corresponding to an amount of extra allowed traffic or an amount of dissatisfied requested traffic; d. automatically comparing the calculated values with a predefined threshold; and e. automatically classifying the amended rule-set as appropriate for implementation if the results of the automatically comparing match a predefined verification criterion.