Flint is an open-source application that can check Cisco PIX/ASA firewall configurations. http://runplaybook.com/flint