How does Tufin measure up vs. Firemon?

According to Gartner, “Network security policy management tools can help security and risk management leaders meet multiple use cases by offering centralized visibility and control of security policies across hybrid networks, risk analysis, real-time compliance and application mapping.”

NSPMs provide a central management layer across multi-vendor on-premises networks and hybrid cloud environments from which to design network security policies and segmentation strategies, deploy those security policies across devices, monitor for violations and track policy changes.

Tufin is the leading NSPM due to its dynamic network and cloud topology modeling, advanced automation workflows, scalability and extensibility.

Firewall management is the process of ensuring firewall rulesets, that determine who can talk to whom and what can talk to what, are in compliance with an organization’s internal security policies and industry regulations. Firewall teams are to review these rules periodically and confirm that they should remain active. Shadowed and unused firewall rules should also be removed to minimize the risk of unauthorized access and to maintain network performance. Changes to firewall rules need to be carried out to establish network access as needed and every firewall change must be logged. Ineffective firewall change management exposes organizations to greater cybersecurity risk. Finally firewall teams must demonstrate compliance by conducting regular firewall audits. Firewall management is often a fragmented and manual task because many organizations are using firewalls from a multiple vendors with no vendor-agnostic, centralized management plane. For example, many organizations have considerable firewall rule cleanup and recertification backlog due to the manual nature of these tasks without a centralized NSPM in place.

Topology Intelligence lets you use the routing information in your devices to make better network security decisions. Tufin software collects the interface information and routing tables with the policy revisions. It updates the network topologyonce a day, so as your network evolves, the topology model does as well. This can include syncing your subnet changes.

The network topology intelligence powers the following:

Interactive Map: This is a dynamic map of your monitored network devices and the subnets to which they are connected. You can enter the details of a network traffic flow to see the path of traffic on the map.

Security Risk Report: This illuminates the network security policies with violations. The report also calculates a security score, and tracks network security trends. You can run the Security Risk report based on the network segment types from the topology map.

• You can run the Security Risk report:

  • Manually

  • Automatically on change events so that the report includes new and resolved risks

  • Schedule a report to run periodically

Network access change automation workflow via SecureChange+

• Target selection for access requests

• Calculates the necessary change and shows a picture of the path between the source and destination.

• Automatically verifies if an Access Request was successfully added

The visibility provided through Tufin’s dynamic topology intelligence enables comprehensive change management and compliance reporting.

All network applications require connectivity between network resources, and some applications may require multiple types of connectivity to function.

For example, a basic website can require connectivity:

• From the internet to a web server over HTTP

• From the web server to a database server over specific ports

If any of these connections is blocked by a firewall, users cannot access the website. The business owner can keep a list of all of the required connectivity, but cannot create a detailed set of instructions for implementing the connectivity in the firewalls. The network and security teams can analyze the locations of each server to decide which firewalls need to have rules to allow the connectivity, but they cannot easily manage all of the firewall rulesets to make sure they are all maintained correctly. An application connectivity management solution allows security policy to be designed, implemented and managed based on application connectivity requirements.

Tufin Orchestration Suite supports all major firewall brands, including Cisco, Juniper, Palo Alto Networks, Check Point, Fortinet, Azure Firewall andmore.