Automate Rule Lifecycle
Management (RLM)
Eliminate your rule recertification backlog forever.
Many enterprises fail to review their firewall rules on a timely basis. This results infailed audits and increased risk of a data breach. The process can involve keeping
track of tens of thousands of rule expiration dates across thousands of devices,“owned” by hundreds of different people, and managed through multiple firewall
management tools.
Tufin solves this problem by automatically identifying expiring or expired rules andmapping them to their owners, allowing them to recertify and decertify.
This can trigger a ticket and workflow whereby the policy and metadata changes
are implemented, effectively eliminating many manual steps in a complex process.

Benefits• Dramatically reduce attack surface.
• Save thousands of hours per year.
• Minimize firewall management
complexity, increasing agility.

KEY FEATURES:• Prep for audits in hours, not weeks.

Eliminate manual tasks and review backlog.

Automatically assign rules to rule owners.

1 yearAutomate rule lifecycle workflows.

down to1 day

Quickly identify expired rules.

One multinational bankOrchestrate rule reviews to meet compliance requirements.

was able to eliminate its
12-month rule review

Option to automatically disable, decertified rules.

backlog and shift to daily
reviews with Tufin.

Maintain a consistent audit trail of rule review activities.

www.tufin.com

1© Copyright 2023 Tufin. All rights reserved.

Overview
Tufin Software offers SecureChange+ customers an automated solution for firewall rule review with our Rule Lifecycle
Management (RLM) module. The RLM module provides rich orchestration and automation tools that integrate seamlessly
with your existing change management databases (CMDBs) and the Tufin platform to deliver orchestrated, automated rule
lifecycle management across your entire enterprise from a single, easy-to-use interface.

Automatically map and assign rules to owners.
The rule review process begins with a simple enough question: Who should review this rule? Finding the answer, however,can be anything but simple. Database records may be outdated or unreliable as people leave the company or changeroles. In order to simplify this process, Tufin’s RLM module integrates with your existing CMDB to seamlessly align rules with
their owner(s) and/or their departments. If an owner is found to be inactive, Tufin flags the rule and initiates a search for a
new owner. Once an owner is identified, Tufin will then alert that owner, if a rule(s) certification status needs to be reviewed.

www.tufin.com

2© Copyright 2023 Tufin. All rights reserved.

Orchestrate and automate rule modifications.
All business owners are able to manage their rules through a central dashboard that allows owners to review all theirrules and certify or decertify multiple rules with a single click. Once the request is submitted, Tufin automatically updates
the rules metadata and if needed, disable rules as part of the decertification process.

Instantly generate audit reports to demonstrate compliance.
Regulations such as PCI-DSS and the European Central Bank’s PSD2 require rule recertification every six months.
To meet those requirements, businesses must review all rules and policies on a regular basis as well as provide detailed
reporting of those reviews on demand. Tufin automatically generates an audit report of reviews and changes to meetvarious compliance requirements.

Tufin RLM: Automating the rule review process
In business, as in life, change is inevitable. Policy owners change jobs. Networks and data centers change hardware
and software. Federal and industry regulations change. And security threats are always changing. Keeping up withchange is simple with Tufin.

www.tufin.com
Copyright © All rights reserved. Tufin, Unified Security Policy, Tufin Orchestration Suite and Tufin logo are trademarks of Tufin. All otherproduct names mentioned herein are trademarks or registered trademarks of their respective owners. You may not copy, reproduce,
photograph, translate, transmit ,make available to the public, make derivative works, perform in public, rent , broadcast or make any
commercial use of the publication in full and / or in part without prior written approval.

DP20230327