Centralize visibility and simplify policy managementwith Tufin-Zscaler Cloud Firewall integration

Today’s workforce is globally distributed and employees are working fromeverywhere. With more workloads and applications now in the cloud, keeping
the enterprise secure can be a challenge, as employees go directly to the Internet,
bypassing traditional security controls. Managing security policies via siloed tools
leads to incomplete visibility, and complex, time-consuming daily operation.
Tufin’s integration with the Zscaler Advanced Cloud Firewall, part of the Zscaler Zero
Trust Exchange, provides admins with centralized visibility into Zscaler Secure Access
Service Edge (SASE) policy rules alongside other vendors’ policies, to help simplify andstandardize security policy management across the hybrid cloud, directly from the Tufin
console.
The Zscaler Zero Trust Exchange
provides a full security platform in thecloud, allowing your entire workforce tobe secure, regardless of their location.
Zscaler ensures users have consistent
protection no matter where, or on what
device, they connect from. Zscaler
Cloud Firewall enables fast and secure
off-network connections and local
Internet breakouts for all your user traffic,
without appliances. Zscaler Cloud
Firewall elastically scales across all ports
and protocols to handle all your cloud
application traffic.

• Reduce complexity and increase
control by managing enterprisesecurity policies, all from a single
consoleZero Trust Architecture

IOT

ZSCALERZERO TRUSTEXCHANGE• Faster resolution of security andconnectivity issues by identifying
overly permissive rules, rulecertification status, and moreOT

Data Center

Factory

Customers

Workforce

Tufin Orchestration Suite (TOS) is a complete solution for automatically designing,provisioning, analyzing, deploying, and auditing network security changes from theapplication layer, down to the network layer. Tufin provides advanced automation
capabilities to increase business agility, improves accuracy through elimination of manualerrors, and ensures continuous compliance via a single console. Tufin’s unified security
policy empowers network and IT security teams to effectively safeguard complex,
heterogeneous environments through a central interface for defining and enforcing policy
controls over firewalls, switches, Software Defined Networking (SDN), private and publiccloud platforms and Kubernetes, down to any level of segmentation.

www.tufin.com

1Benefits• Easy detection andtroubleshooting analysis withZscaler Cloud Firewall rulechange tracker – view andcompare policy changes at any
point in time
• Reduce time and effort invested
in audit preparation, whereby
auditors gain instant visibility into
policy changes© Copyright 2022 Tufin. All rights reserved.

Key features include:

Rule Viewer
Tufin’s Rule Viewer provides network administrators an instant view of Zscaler Cloud Firewall rules directly from the Tufin
console, for fast analysis. Users can view rule attributes—sources, destinations, users, applications. The Rule Viewer
also provides rule metadata, such as when the rule was last modified, the certification status if rule certification is being
enforced via Tufin, and if the rule is overly permissive and should therefore be modified or removed.

Tufin dashboard: Zscaler Cloud Firewall rule viewer

Rule Change Tracker
To ensure continuous compliance and enable faster troubleshooting, Tufin monitors and highlights Zscaler CloudFirewall rule changes—what was changed, when, by whom, and whether there’s a comment or a reference associatedwith it. Tufin records every policy revision, maintaining a complete policy history as it evolves over time. Administrators
can quickly retrieve and view the Zscaler policy as it existed at a previous point in time. A side-by-side comparison
helps admins review changes to identify and fix misconfigurations. This can be invaluable when a change unexpectedly
blocks access to a critical asset, enabling auditors to immediately view what has changed since the last audit.

Tufin dashboard: Revision history and change comparison

www.tufin.com

2© Copyright 2022 Tufin. All rights reserved.

Rule filter
Admins can filter rules by locations, apps, URL category, and users, for faster resolution of security
and connectivity issues.

Tufin dashboard: Rule viewer

With Tufin and Zscaler, organizations can centrally manage and apply consistent and effective segmentation policies
across their multi-vendor, hybrid cloud environment.
Learn more at tufin.com/supported-devices-and-platforms/zscaler

About Tufin
Tufin (NYSE: TUFN) simplifies management of some of the largest, most complex networks in the world, consisting of thousands of firewall andnetwork devices and emerging hybrid cloud infrastructures. Enterprises select the company’s Tufin Orchestration Suite™ to increase agility in theface of ever-changing business demands while maintaining a robust security posture. The Suite reduces the attack surface and meets the need forgreater visibility into secure and reliable application connectivity. With over 2,000 customers since its inception, Tufin’s network security automation
enables enterprises to implement changes in minutes instead of days, while improving their security posture and business agility.

www.tufin.com
Copyright © All rights reserved. Tufin, Unified Security Policy, Tufin Orchestration Suite and Tufin logo are trademarks of Tufin. All otherproduct names mentioned herein are trademarks or registered trademarks of their respective owners. You may not copy, reproduce,
photograph, translate, transmit ,make available to the public, make derivative works, perform in public, rent , broadcast or make any
commercial use of the publication in full and / or in part without prior written approval.

DP20220219