Tufin (NYSE: TUFN) simplifies management of some of the largest, most complex networks in the world, consisting of thousands of firewall and network devices and emerging hybrid cloud infrastructures. Enterprises select the Tufin Orchestration Suite™ to increase agility in the face of ever-changing business demands while maintaining a robust security posture. The Suite reduces the attack surface and meets the need for greater visibility into secure and reliable application connectivity. With over 2,000 customers since its inception, Tufin’s network security automation enables enterprises to implement changes in minutes instead of days, while improving their security posture and business agility.
Secur is a Tufin Platinium partner based in South Africa, offering Tufin implementation, integration and support services, these services can be offered even in Botswana, Lesotho, Namibia, Kenya and Nigeria
SecureTrack.
Gain the vendor-agnostic visibility and control you need to secure your hybrid network across firewalls and NGFWs, routers and switches, SDN and hybrid cloud.
Tufin SecureTrack is the only firewall management solution that delivers security, compliance and connectivity across physical networks and hybrid cloud by managing the growing complexity and fragmentation of Enterprise IT.
Visibility and control across hybrid IT
SecureTrack’s real-time visibility into all firewall and security changes across the enterprise provides clear insights into network connectivity and security policy changes, with alerts for potential new security risks.
Establishing a central, unified security policy baseline
Establish a baseline of allowed and blocked traffic between security zones (and security groups) and enforcing it across the hybrid network to facilitate and manage consistent network segmentation.
Real-time compliance and audit readiness
SecureTrack enables continuous compliance with real-time monitoring and alerts for risky access changes and policy violations. Its automated audit trail allows you to rapidly generate a variety of customizable audit reports that comply with regulatory standards such as PCI-DSS, SOX, NERC-CIP, HIPAA, GDPR and more.
Firewall policy management
SecureTrack provides a central repository of all the firewalls rules and objects to simplify firewall management across multi-vendor, multi-platform technologies. An advanced search and filtering mechanism reduces time and efforts of managing your firewall estate and makes cleanup and optimization easy.
Establish and troubleshoot business connectivity
SecureTrack provides the most accurate topology modeling and path analysis across the enterprise network to quickly troubleshoot and remediate network outages and to plan connectivity changes.
Managing enterprise network security
SecureTrack helps network and security teams centrally identify risky access and firewall security policy violations in real-time for tightening your enterprise’s security posture.
SecureChange.
Tufin SecureChange provides policy-based automation and orchestration, enabling enterprises to implement accurate network changes in minutes instead of days.
SecureChange increases agility and auditability of the network change process across the digital enterprise, while maintaining security and compliance.
Network change automation
SecureChange maximizes agility by offering end-to-end automation of network security changes. SecureChange enables teams to implement network changes faster by reducing human error and remediation efforts. This way, teams are able to do more using their existing resources. Further, Tufin integrates with leading ITSM solutions, providing unified change workflows, where opening a ticket within ITSM triggers a workflow within Tufin for automated change design and implementation.
Continuous compliance through proactive risk assessment
SecureChange provides enterprise IT with continuous compliance for internal policies as well as industry regulations, such as PCI DSS, SOX, NERC CIP, and more. Further, SecureChange offers proactive, integrated risk assessment step, vetting the change against your security/compliance policy as well as external third-party data (e.g. vulnerability score, SIEM, SOAR, or endpoint security data) to enforce compliance and prevent regulatory violations and associated fines.
Auditable change processes
SecureChange offers full audit readiness via an automatic audit trail for network changes, including full change accountability and audit-ready reports. Every workflow contains the history of all related tickets for full auditability. It also offers out-of-the-box workflows tailored to enterprise compliance and auditability needs, such as decommissioning of redundant access and automated rule recertification.
Flexible workflows
SecureChange’s automated workflows offer flexible configuration options, as well as rich APIs which allow features extensibility and integration with 3rd party tools such as ticketing systems and vulnerability scanners.
Wide vendor support
End-to-end automation and provisioning is supported for heterogeneous environments with a variety of devices and vendors, including AWS, Azure, Check Point, Cisco, Forcepoint, Fortinet, Juniper, and Palo Alto Networks.
Firewall cleanup automation
In addition to automating firewall changes, SecureChange also automates other aspects of access lifecycle including decommissioning of firewall rules and servers, and cloning server policies. These workflows help security teams to keep firewall policies clean and up-to-date, and thus reduce risks.
SecureApp.
Application-driven automation for managing network security policies
SecureApp helps network and application teams collaborate to deploy and maintain application connectivity, monitor business continuity, ensure compliance and automate network changes.
SecureApp provides visibility and control over application connectivity across the entire network. It improves business agility through faster application deployment, and allows better communication between application teams and network security teams.
Application connectivity management
SecureApp provides a comprehensive and accurate view of end-to-end application connectivity. Once an application is defined and connections are configured, SecureApp uses network topology Intelligence to continuously display applications’ connectivity status. It also provides graphical diagnostic tools that help you to understand, troubleshoot and automatically repair connectivity issues.
Accelerate changes with security change automation
SecureApp enables you to define, implement, monitor, maintain and decommission application connectivity through a highly automated process. You can create or update an application connection by specifying connection resources in SecureApp, and with a click of a button, trigger an automated change workflow by creating the relevant ticket in SecureChange.
Visibility and control
SecureApp provides real-time visibility into business applications with a central repository of all application connectivity requirements, along with current connectivity status, and any open SecureChange tickets. This provides a substantial advantage over common practices of managing application connectivity needs in a spreadsheet which is rarely updated.
Streamline operations, improve collaboration
SecureApp helps remove friction between siloed teams by providing a central console for all network-related application changes, ensuring that the network is always aligned with changing application requirements. Application teams can define application components and the relationships between them, while no network topology knowledge is required.
Automate application discovery
SecureApp enables you to build a repository of all your applications. It also provides automated discovery for application connectivity, by analyzing firewall revisions and network traffic. You only need to specify the IP address of a single server, and SecureApp identifies all potential connections for this server.
