Monext Achieves Continuous PCI DSS Compliance and Cuts Audit
Preparation Time
Case Study

The challenge
Monext guarantees their customers the very highest level of IT security Because they handle
secure payments, PCI compliance is critical.
Monext completes an internal audit every 45 days and reports PCI DSS compliance twice a year.
Monext has two large data centers with over 40 Cisco and Check Point firewalls and more than
850 servers. Over time, firewall rule bases tend to become large, complicated and difficult tomanage. Monext’s rules base had actually grown to over 70,000 unique firewall rules.
Preparing for PCI DSS audits was extremely time-consuming. Monext was manually auditing its
40 firewalls and it was taking ten days to review each rule base. Compliance is, of course, key
to this business, but maintainin the accuracy and integrity of their security policies was also an
operational challenge. It was very complicated to make firewall rule changes on a daily basis.
We were searching for a better approach to complete PCI audits and” achieve continuouscompliance. We needed to take full control of our firewall policies, clean them up and make surethey were fully optimized,” explains Laurent Klefstad, IT Manager at Monext.

The Benefits• Continuous compliance with PCI DSS• Audit preparation time cut in half
• Clean-up over 20% of firewall rules• Automate repetitive, manual tasks• Increased network security• Centrally manage all firewall vendors

The solution: identifying the optimal one
When Mr. Klefstad and his team began looking for the optimal solution several solutions wereinvestigated but they quickly narrowed it down to two solutions and then completed proof ofconcepts. Monext preferred Tufin SecureTrack hands down.
Monext found Tufin to be less intrusive and the solution worked very well with their Cisco firewalls.
The second finalist did not meet these requirements.
Telindus partnered with Monext to implement the Tufin solution. “Implementation was simple andthe solution quickly delivered results,”said Clementine Rivera-Calvo, Network Administrator atMonex.

Accelerating compliance and auditing optimizing the firewalls
Monext is leveraging Tufin SecureTrack to accelerate and continuously improve their PCI DSS
compliance and auditing. They currently use the PCI DSS Dashboard and the PCI DSS audit
reports regularly. The team considers Tufin SecureTrack an essential tool, and in fact, when
they first configured it, Monext identified several compliance issues. As a result, they were able
to immediately address the issues and resolve them. Now SecureTrack’s dashboard enables
Monext to maintain continuous compliance.
Monext also uses the Tufin solution to optimize their firewall rule bases and for firewall clean-up.
The Monext team is very happy with the SecureTrack solution in all respects. “Moving forward,
we plan to use the solution for change planning and simulation as well,” added Ms. Rivera-Calvo.

www.tufin.com

Tufin at a Glance
Offices: North America, Europeand Asia-PacificCustomers: More than 1,900 in over
50 countries
Leading verticals: Finance, telecom,
energy and utilities, healthcare, retail,education, government, manufacturing,transportation and auditors
Channel partners: More than 240
worldwide
Technology Partners & Supported
Platforms: Amazon Web Services,BMC, Blue Coat, Check Point, Cisco, F5Networks, Forcepoint, Fortinet, Juniper
Networks, Microsoft Azure, Openstack,
Palo Alto Networks, VMware and moreThe results
We have been very satisfied with the results and our return on our” investment. Significant hours
and days have been eliminated for each audit cycle. Firewall review was cut in half – what
used to take ten days now only takes five. And over 20% of the rules that were found to beunnecessary or redundant were cleaned from our firewalls, so we can make both audits and dailychanges much more quickly,” said Laurent Klefstad, IT manager.at MONEXT“Tufin has accomplished everything we wanted it to”, states Ms. RiveraCalvo. “SecureTrack has
helped us decrease costs significantly, improved” our team’s productivity and enabled Monext tomaintain continuous PCI DSS compliance much more easily.”

About MONEXTMONEXT is a leading player in the electronic payments market in France and Europe as awhole, boasting almost 30 years’ experience. It provides advice and support to over 150 financial
institutions and 5,000 merchants through a range of tailored, ultra-secure solutions covering theentire electronic payments value chain. MONEXT has developed various packages featuringinnovative solutions in terms of new payment methods (NFC, mPOS), as well as offering an
online payment solution, Payline. A French-based PCI-DSS certified call center provides 24/7
customer support to MONEXT’s clients, who range from banks to financial institutions andmerchants. For more information, visit www.monext.net.

About Tufin Orchestration Suite™
Tufin® is the leader in Network Security Policy Orchestration, serving more than half of the top 50
companies in the Forbes Global 2000. Tufin simplifies management of some of the largest, mostcomplex networks in the world, consisting of thousands of firewall and network devices and emerging
hybrid cloud infrastructures. Enterprises select the award-winning Tufin Orchestration Suite™ toincrease agility in the face of ever-changing business demands while maintaining a robust security
posture. Tufin reduces the attack surface and meets the need for greater visibility into secure andreliable application connectivity. Its network security automation enables enterprises to implementchanges in minutes with proactive risk analysis and continuous policy compliance. Tufin serves over
1,800 customers spanning all industries and geographies; its products and technologies are patentprotected in the U.S. and other countries.

Copyright © 2016 Tufin
Tufin and SecureChange are registered trademarks of Tufin.
Unified Security Policy, Tufin Orchestration Suite, SecureTrack and SecureApp aretrademarks of Tufin. All other product names mentioned herein are trademarks or registeredtrademarks of their respective owners.

www.tufin.com

SB-04-17“Tufin has enabled us” to achieve
continuous compliance withPCI DSS for our Cisco andCheck Point firewalls, and to cut
audit preparation time in half.”
Laurent Klefstad
IT Manager at Monext