Tufin®, the market-leading provider of Network Security Policy Orchestration solutions, announced the release of Change Window Automation and Policy Commit to enable organisations to automate planned changes during designated change windows and respond immediately to urgent firewall policy change requests. Change Window Automation improves operational efficiency and avoids disruption to the business during normal working hours, with full trust that changes will be committed according to security policy in designated off-hour change windows. Policy Commit enables urgent and emergency changes to take place immediately in accordance with existing rules to ensure security and compliance.
Enabling Change Window Automation:
With centralised change window automation, organisations can schedule firewall policy changes to take place during designated (off-hours) change windows. This includes the ability to pre-review and approve future changes, automate the execution of these changes, track installation progress, and automatically receive change reports. Starting with R18-2 GA, Tufin SecureChange has the ability to commit changes to the underlying devices at a scheduled time. This is supported when integrating the Tufin Orchestration Suite with management consoles from Check Point R-80, Fortinet FortiManager, and Palo Alto Networks Panorama.
“Until now, change windows typically occurred during off-peak hours to avoid disruption during normal business hours, requiring a network engineer to manually execute each change,” said Ofer Or, Vice President of Products at Tufin. “With the most recent release of the Tufin Orchestration Suite, we give the evenings and weekends back to network engineers, enabling them to create a change window, schedule changes to automatically execute, and receive confirmation and documentation that all changes have taken place.”
Policy Commit: Emergency Changes that Ensure Security Standards
The Tufin Orchestration Suite continues to enable true end-to-end Zero-Touch Automation for firewall policy changes by allowing customers to automate the analysis, design, and provisioning of network changes all the way to specific devices. Organisations can make firewall policy changes across devices to respond to emergency requests prompted by business requirements or a security incident, improving response and reducing dwell time of detected incidents. Policy Commit retains full documentation as part of a workflow for audit support. Policy Commit is now available for Check Point R-80, Fortinet FortiManager, and Palo Alto Networks Panorama, and is automatically enforced on the corresponding firewall devices, adding to the previous capability of immediate policy implementation to Cisco ASA and Juniper firewalls.
“With the integration of Tufin’s Change Window automation capabilities and Fortinet’s leading portfolio of products based on the Fortinet Security Fabric and open Fabric-Ready Partner ecosystem, our joint customers can further accelerate their adoption of automation across heterogeneous networks,” said John Maddison, SVP of products and solutions, Fortinet. “Together, our best-of-breed joint solution provides organisations with an effective and efficient way to meet the agility demands of any business while ensuring responsiveness to cybersecurity incidents impacting the network.”
Change Window Automation and Commit Now are available in Tufin Orchestration Suite 18-2, which is generally available.
Tufin® is the leader in Network Security Policy Orchestration for enterprise cybersecurity. More than half of the top 50 companies in the Forbes Global 2000 turn to Tufin to simplify management of some of the largest, most complex networks in the world, consisting of thousands of firewall and network devices and emerging hybrid cloud infrastructures. Enterprises select the company’s award-winning Tufin Orchestration Suite™ to increase agility in the face of ever-changing business demands while maintaining a robust security posture. The Suite reduces the attack surface and meets the need for greater visibility into secure and reliable application connectivity. Its network security automation enables enterprises to implement changes in minutes with proactive risk analysis and continuous policy compliance. Tufin serves over 2,000 customers spanning all industries and geographies; its products and technologies are patent-protected in the U.S. and other countries. Find out more at www.tufin.com.