20. The system of claim 17 wherein at least one predefined criterion is selected from a group comprising: a. criterion characterizing a relation between allowed traffic in the amended rule-set and traffic allowed in the initial rule-set; b. criterion characterizing a relation between entire added traffic and traffic which needs to be added in accordance with the unfitting connectivity request; c. criterion characterizing a relation between requested traffic rejected resulting from amendment and requested traffic allowed resulting from amendment; d. criterion characterizing a relation between requested traffic rejected resulting grom amendment and entire requested traffic; wherein the rule is considered as best matching if it fits at least one of said criteria and/or combination thereof.
17. A system capable of automated managing an ordered set of security rules implemented at one or more security gateways, the system comprising: a. means for obtaining data characterizing a connectivity request which may become allowable only upon changes of an initial rule-set, thus giving rise to an unfitting connectivity request; b. means for automated searching for a rule within said ordered set of security rules, said rule best matching to be amended in order to facilitate allowance of the unfitting connectivity request, wherein best matching is defined in accordance with one or more predefined criteria; c. means for automated generating amendment of the best matching rule, said amendment capable to facilitate allowance of the unfitting connectivity request; and d. means for automated implementing the generated amendment at one or more relevant security gateways among said one or more security gateways, thus giving rise to an amended rule-set.