Enterprise

Complete Your Journey toZero-Touch,Application-Based
Security Policy Automation
Overview
Tufin provides solutions for each stage of your development towards achieving policybased, holistic network securitymanagement. Our vision is to help you gain visibility and control over your entire hybrid, multi-cloud network withzero-touch, applicationdriven security policy automation.
Tufin Enterprise is the ultimate destination on this journey. It elevates your network security program to a highly evolved
state, in which, network and cloud security processes are integrated, policy is managed and implemented via zerotouch automation, and everything is administered via a central control plane that delivers unmatched scalability andextensibility. Tufin Enterprise delivers:• Rapid design and implementation of changes across your hybrid
enterprise network

Key Benefits:• Policy-based, unified network security from on-prem to cloud• SecureTrack+ & SecureChange+
functionality• Visibility into and control over application connectivity,
dependencies and access policies• Zero-touch, app-driven networkchange automation, including
provisioning

Secure BUT slow

• Application connectivity
management
Zero-Touch
AutomationEnterprise• High availability with highly
redundant, multi-node clusters• Premium 24/7 follow-the-sun
support

Application-driven
Automation

Change Provisioning

SECURITY

Rule Lifecycle
ManagementAnalysis & Design

Cleanup
VisibilityAGILITY

01 |www.tufin.com

Agile BUT risky© Copyright 2024 Tufin. All rights reserved

Change Provisioning
Large enterprise networks, often contain a complex collection of security controls across devices and cloud
resources from several different vendors. Pushing network access changes to your hybrid infrastructure is likely a large
effort involving many people who specialize in specific network device technologies. This manual approach is timeconsuming, error-prone, and results in increased cyber risk and noncompliance with corporate policy and regulations.
With Tufin Enterprise, security configuration changes designed in SecureChange+ can be provisioned to therelevant firewall and cloud platforms. With Tufin Enterprise it is possible to automate the entire network change process,from request, through target selection, risk and impact assessment, all the way to implementation.

„ Implementing smaller changes now takes us about five minutes, larger changes about half anhour, depending on the size and complexity of the change.
— Julian Retzbach, Network Administrator, Fujitsu

SubmitRequestBusiness
Approval

TargetSelection

Automated
Risk Analysis

Security
Review

DesignChangeProvisioning“Audit &Report

Application-Based Connectivity Management
Implementing security policies based on application needs is usually a joint effort between security and application
teams. Both teams need to constantly communicate connectivity requirements and ensure they align with security
access policies, which can lead to bottlenecks, until the application is deployed securely.
The SecureApp module provides an intuitive user interface and real-time visibility into and control over all apps andtraffic flows. Application owners can easily manage application-critical connectivity based on their understanding ofaccess requirements, with only minimal required knowledge of network topology or firewall and router policies. Tufin
automatically translates access requirements into security policy changes on the relevant firewalls via a process that is fullytransparent to both security and application teams. This is just another way Tufin enables multi-team collaboration andmaintains a state of continuous compliance.

High Availability with highly redundant, multi-node clusters
Tufin has built-in support to run in high availability mode, using a redundancy mechanism, in which your data is kept up todate on three server nodes (or more) simultaneously. Tufin’s High Availability provides both redundancy and load-sharing
within the cluster. This ensures business continuity and proper load distribution during peak times.

Premium 24/7 follow-the-sun support
Tufin’s premium level support offers round-the-clock call handling, troubleshooting and problem resolution via dedicatedsupport engineers.
This leads to faster completion times, by addressing customer needs without regard to geographic location or current time.
Copyright © All rights reserved. Tufin, Unified Security Policy, Tufin Orchestration Suite and Tufin logo are trademarks of Tufin. All other product names mentioned herein are trademarks or registeredtrademarks of their respective owners. You may not copy, reproduce, photograph, translate, transmit, make available to the public, make derivative works, perform in public, rent, broadcast or makeany commercial use of the publication in full and / or in part without prior written approval.

02 |www.tufin.com© Copyright 2024 Tufin. All rights reserved