Tufin SecureTrack

untracked or unlogged), permissive rules (that allow traffic from too many IP addresses),
network object name patterns, firewall OS settings, and more.
Scalable, Distributed Deployment Architecture and
Multi-Tenancy
At large organizations, firewalls and related security infrastructure are frequently distributed at
multiple sites, even in different countries. Slow network connections can frustrate attempts to
analyze data from a central location and maintain consistency throughout the organization.
Similarly, at large datacenters, network devices are often distributed on multiple management
servers to increase performance. Yet it is still important to manage the security posture
centrally.
Tufin SecureTrack features a robust distributed architecture that uses T-Series appliances to
collect data from each site. Suitable for wide area networks, the collectors forward data to a
central database for administration. SecureTrack is designed to overcome connection
downtime between components and ensure a continuous, centralized management
environment.
If you need to maintain integrity between sites or business units, SecureTrack provides full
segregation of data along with flexible, role-based administrator definitions that provide
access control for each management domain. At the same time, it gives you the ability to
leverage Policy Analysis Queries and reports that you have designed for multiple tenants.
For all mission critical data centers, Tufin offers high availability, database compression, highperformance
appliances and disaster recovery.
Firewall Operations, Auditing and Compliance: The
Automated Solution
As network security infrastructure grows more distributed and diverse, operations teams must
have central management solutions to ensure network security and Continuous Compliance,
while keeping costs under control. Tufin SecureTrack enables you to monitor, track and
report changes for all Cisco firewalls, routers and switches in the organization. It creates a
complete audit trail with full personal accountability for every change, along with configurable
audit reports that support a wide variety of standards and regulations. With in-depth analysis
tools, it gives you the power to proactively assess risks, replace permissive rules, and
optimize the performance of your firewalls. SecureTrack is an essential solution for any
organization that cannot afford to compromise on security and efficiency.
Tufin is a member of the Cisco Developer Network and Tufin Security Suite has successfully
completed interoperability testing with Cisco Security Manager 4.3.
According to an analysis performed by Frost & Sullivan, organizations can slash the time
required to make configuration changes, and to perform security audits, by as much as 75%
(see Security Lifecycle Management ROI). Tufin customers report that on average,
SecureTrack cuts the cost of daily operations tasks in up to a half, so that they can focus on
the strategic part of their jobs instead of on routine, manual work.
SecureTrack features all of the tools that operations teams need to ensure network security
every day:
� Change tracking and analysis: Monitors firewall changes, reports them in real-time and
maintains a comprehensive, accurate audit trail for full accountability.
� Security infrastructure optimization: Analysis and clean-up of complex ACLs and
objects to eliminate potential security breaches and improve performance.
Firewall Operations for Cisco 10/11