Technology Partner Solution Brief

Security Policy Orchestration
for Check Point Firewalls
Benefits to Your Business:• Boost productivity with zero-touchautomation for Check Point
security management• Automated design and provisioning ofuser identity-based changes• Accelerate service delivery withapplication-centric management of
network connectivity and security policies• Implement network security changes

in minutes instead of days with built-in
security controls• Tighten security controls bydefining and enforcing aunified segmentation policy
across vendors• Ensure continuous policy

compliance and reduce auditpreparation efforts• Gain visibility and control ofsecurity policies across Check
Point and the hybrid network

Check Point® & Tufin® Provide Secure,Manageable, & Compliant Environments
Enterprise IT and security experts are under increasing pressure to respond to complex network security changes and keep up with growing businessdemands. Lack of visibility hinders the ability to deliver services and applications with the security, speed, and accuracy required. The Tufin Orchestration
Suite is tightly integrated with Check Point Security Management Solutions and next generation firewalls (NGFW) as well as CloudGuard to provide
policy-based automation for enabling business agility and continuous compliance across the hybrid cloud.
Tufin fully supports Check Point R80.x Security Management, allowing customers to extend the benefits of unified security across multi-vendor networks,
private and public cloud platforms. The Tufin Orchestration Suite is a complete solution for automatically monitoring, analyzing, implementing, andauditing network security changes from the application layer down to the network layer. Tufin Orchestration Suite also provides visibility and monitoring
for Check Point CloudGuard for Microsoft Azure allowing enterprises to simplify the adoption and management of cloud platforms. Together with Check
Point leading security solutions, Tufin Orchestration Suite offers a powerful yet seamless way of managing security policies across complex, hybrid
networks from a single console.

End-to-End Automation for Designing and Implementing Application Connectivity
Tufin Orchestration Suite is fully integrated with Check Point to accelerate application delivery and boost productivity with policy-based, zero-touchautomation for security changes across the hybrid network. Automated change design is based on highly accurate network topology simulation that
identifies the firewalls and corresponding policies that should be modified to grant connectivity. The Tufin Orchestration Suite integrates with Check Point
Identity Awareness Blade for designing and provisioning user identity based changes. Once designed, the change is automatically sent to Check Point
management system, as long as it does not violate any security standard. This ensures a quick and accurate process to implement application connectivity
while maintaining security policy compliance.

www.tufin.com

Insight and Control overComplex Networks
Defining and enforcing network segmentation across different vendors
and platforms is a major challenge for security teams. Tufin’s Unified
Security PolicyTM helps resolve the challenge by visualizing a security
zone matrix that maps zone-to-zone traffic limitations. This central
security policy baseline enables identifying violations in real-time acrossphysical networks and hybrid cloud for tighter control and continuouscompliance.
Tufin Orchestration Suite Unified Security Policy – enables central managementof network segmentation to ensure continuous compliance

Proactive Risk Analysis
and Impact Simulation
Every change made to the firewall policy is apotential risk to data security and application
availability. Simulating the impact of a change
is virtually impossible without the proper tools.
As part of the automated change process, Tufin
Orchestration Suite proactively checks every
access request against your corporate security
and internal compliance policies to identify andflag potential risks. Network and Application
Tufin’s Topology Path Analysis — enables planning and troubleshooting connectivity across the hybrid
network from a single console
Connectivity across Platforms In orderto enable business continuity, application
connectivity must be established and maintained. To ensure connectivity across vendors and platforms, there is a need to accurately analyze routing aswell as policy information. Tufin provides accurate topology simulation and a visual map to establish and troubleshoot connectivity across the hybrid
network from a single console.

Continuous Regulatory Compliance with Industry Standards
Tufin Orchestration Suite provides a closed-loop process for enforcing, verifying, and documenting compliance with industry standards such as PCI DSS,SOX, and NERC CIP. Every firewall policy change is evaluated before implementation, ensuring safe deployment ahead of time. In addition, ad-hoc
changes that result in compliance issues are detected automatically and a resolution plan is suggested.

Tufin provides a single platform for network and cloud security teams tosimplify the management of security policies across today’s complex, multivendor hybrid networks. The platform gives some of the largest companies in
the world the end-to-end visibility and automation tools necessary to swiftly
provide new access, enable fast and secure application deployment, andensure continuous compliance and audit readiness. Tufin’s proven solutions
help more than 2,000 customers across industries including healthcare,financial services, utilities, telecommunications and retail to quickly identify
and mitigate network risks. For more information, please visit www.tufin.com.

Check Point Software Technologies Ltd. (www.checkpoint.com)
is a leading provider of cyber security solutions to governments
and corporate enterprises globally. Its solutions protect customers
from cyber-attacks with an industry leading catch rate of malware,ransomware and other types of attacks. Check Point offers a multilevelsecurity architecture that defends enterprises’ cloud, network and mobile
device held information, plus the most comprehensive and intuitive one
point of control security management system. Check Point protects over
100,000 organizations of all sizes.

Tufin, Unified Security Policy, Tufin Orchestration Suite and the Tufin logo are trademarks of Tufin.
All other product names mentioned herein are trademarks or registered trademarks of their respective owners.

Copyright © 2024 Tufin
AB20240121