Tufin as a Service for MSSPs
Solution Brief
Orchestration and Automation via a Consumption-Based Model
In a highly competitive market, an MSSP’s portfolio must include solutions that are agile andseamless to provide the most value to customers. Refining your portfolio amidst the backdropof disparate security technologies while streamlining the delivery of your solutions can make all thedifference in attracting customers and fostering growth.
Managing your customers’ firewall rules is a painstaking process and an expensive use of yourresources. It’s time consuming, inefficient and leaves the door open for mistakes and misconfigurationthat could lead to a breach. Network Security Policy Orchestration holds the key to maximizing agility
and operational efficiency, tightening your customer’s security posture, and drastically improving
their change processes and audit readiness.

The Tufin Difference:
Market leading technology built upon
experience with the worlds largest
enterprise networks
Pay-per-use model based on daily
consumption
Free online training for certification
Native multi-tenancy

Tufin as a Service
Tufin as a Service is a consumption-based, pay-per-use services model that enables MSSPs tooffer a higher level of security services to customers without adding additional staff. This program
allows you to optimize operational efficiency, provide faster response times to security incidents,
troubleshoot connectivity, reduce downtime and ensure continuous compliance through Network
Security Policy Orchestration.

• Ensure segregation between customers• Separate analysis and reporting per
customer

Add customers at will with no down
payment or license negotiations• Bank of licenses to easily add or
remove devices at will—no PO
necessaryThe Tufin program is specially designed using an OPEX-friendly model for MSSPs to help
customers battling with skills shortages and expertise gaps at a price point that is significantly
less expensive than having in-house capabilities for the same functions.

• Insert, remove or exchange licenses• Cutting-edge change control and policy management across heterogeneous, hybrid• Complete visibility into overall license

cloud environment for improved network visibility and change automation• Intuitive MSSP portal provides full visibility of usage and costs for easy administration• Native multi-tenancy: Tufin Orchestration Suite was created with multi-tenancy
capabilities from the ground up• Premium level support, training and GTM assistance: includes 24-hour support andfree online training designed specifically for MSSPs

Why Offer Network Security Policy Management as a Service?

independently

capacity and usage

Intuitive dashboard• Delivers graphical analysis of customer
cost and usage• Provides easy export of data to Excel orCSV for further analysis

Premium level support

For more information visit our website
or contact msspinfo@tufin.com

Improve Margins
When your valuable resources are inspecting thousands of firewall rules to ensure policy
compliance, it’s expensive and takes away from other critical projects. Tufin as a Service
saves time and money by providing a more efficient and secure way to monitor, manage andautomate network security changes with a policy-centric approach.
Deliver New Services
Without a comprehensive network security policy and a formal change process, rules
inflate, the attack surface widens, and the risk of downtime and loss of connectivity increase
dramatically. Tufin for MSSPs enables offering new services such as automated cleanup of
redundant rules and objects, automated server decommissioning, rule recertification, andtightening permissive firewall policies.

www.tufin.com

Optimize Firewalls and Reduce Configuration Errors
When network changes are made without proper verification of rules, mistakes andmisconfigurations are common, and redundant, shadowed and overly permissive rules arecreated. Tufin as a Service provides the ability to perform what-if analysis to determine if arule already exists or if the change requested does not meet guidelines to reduce network
configuration errors.
Provide Faster Response to Compliance Needs
Proving compliance can be an arduous and time-consuming task. Tufin as a Service enables
you to improve your response to your customers by having the full confidence of knowing who
made a change, when and why to prove compliance, easily pass audits and avoid fines. You
will also be able to provide reporting based on internal and external compliance regulations.

What Can You Do Differently with Tufin as a Service?
Firewall cleanup: reduce the attack surface and decrease risk
Unused rules and objects
Shadowed rules
Risky rules
Rule and server decommissioning••••

Policy optimization: provide greater efficiency and improved performance
Set rule order by frequency used (most used rules on top)
Tighten security on rules and policies
Automated rule and object provisioning•••

Compliance: track and report on internal and external mandates
Set base compliance
Reporting for PCI-DSS, NERC CIP, GDPR, SOX, HIPAA, etc.
Automated documentation for change tracking•••

Rule recertification: set automatic recertification workflows
Set a date for rules to be recertified to meet compliance•Network segmentation: isolate critical assets from threats
Segment the network with a zone to zone matrix
Isolate critical assets to protect against known and unknown vulnerabilities
Easily troubleshoot connectivity•••

Benefits:
Offer new value• Grow your market and customer base••faster without upfront license payment
Reduce TCO
Provide more services with fewer
resources

Gain efficiency:• Payments align to actual customer
•••
•

usage
Automation and real time changes
Access to world class support
Certified training
Highest support level included

Grow your business• Increase margins by automating••

manual processes
Scalable solution to grow with yourbusiness
Optional incremental revenue throughadd-on services

Why Partner with Tufin?
• Proven industry leader in Network
Security Policy Orchestration• Commitment to continuous innovation
to improve business agility andcybersecurity• Market-leading automation that includes
firewall cleanup and risk analysis• Open and customizable platform to design

workflow configurations and integrate withthird party security products• Scalable, distributed architecture with

About Tufin
Tufin® is the leader in Network Security Policy Orchestration, serving more than half of the top 50 companies in
the Forbes Global 2000. Tufin simplifies management of some of the largest, most complex networks in the world,
consisting of thousands of firewall and network devices and emerging hybrid cloud infrastructures. Enterprises
select the award-winning Tufin Orchestration Suite™ to increase agility in the face of ever-changing businessdemands while maintaining a robust security posture. Tufin reduces the attack surface and meets the needfor greater visibility into secure and reliable application connectivity. Its network security automation enables
enterprises to implement changes in minutes with proactive risk analysis and continuous policy compliance. Tufin
serves over 2,000 customers spanning all industries and geographies; its products and technologies are patentprotected in the U.S. and other countries.

Copyright © 2018 Tufin
Tufin, Unified Security Policy, Tufin Orchestration Suite and the Tufin
logo are trademarks of Tufin. All other product names mentioned herein
are trademarks or registered trademarks of their respective owners.

www.tufin.com

SB-09-18

support for the widest range of common
firewalls, routers and devices