A system for configuring a plurality of security devices is provided. The system is configured to automatically generate one or more policy definition files and use the files to integrally control security configurations for a plurality of security devices in one or more networks. The system includes a security control module and one or more policy agent modules. The security control module converts security parameters to the one or more security policy definition files. The policy agent modules receive the security policy definition files and extract a plurality of policy configuration parameters from the security policy definition file. The plurality of policy configuration parameters is passed to the associated security devices. The security control module maintains communication with other components in the system, such as a checking module and a reporting module.