Tufin SecureTrack

Introduction
Managing network security for an organization or a service provider has become a highly
complex operation involving dozens or even hundreds of firewalls and routers. Multiple sites
and teams, different hardware and software vendors – all of these factors make it virtually
impossible to maintain an accurate, airtight security policy on every device. At the same time,
internal security policies have become more rigorous, and organizations need to comply with
a growing body of industry and government regulations.
To make sure that security standards are being met, most organizations rely on periodic
audits – a process involving days of manual, painstaking effort. In addition to the tremendous
investment of time and resources, relying on audits is a reactive approach to network security
that can leave threats undetected for months at a time.
Today’s security operations teams urgently need a management solution that can proactively
assure network security and achieve Continuous Compliance with standards while
automating labor-intensive day-to-day tasks. In practical terms, firewall operations teams
need:
� Central management starting with a top-down view of all Cisco firewalls, routers and
switches in the organization, the Cisco Security Manager (CSM), and firewalls from
other vendors
� Management of both next-generation and network-layer firewalls
� Change management to ensure that every configuration change made to a firewall,
router or switch is accountable and in accordance with corporate standards
� Proactive risk analysis and business continuity management to evaluate the impact
of every configuration change and ensure Continuous Compliance with standards
� ACL optimization and cleanup to eliminate security loopholes, improve firewall
performance, and reduce hardware costs
� Network topology intelligence to visually analyze the access path between any
source and destination
� Rule (ACE) documentation that enables you to manage ACE ownership, expiration
and recertification.
� Automated security audits to efficiently comply with corporate policies as well as
industry and government regulations
� Automatic ACL generation to enable rapid deployment of new firewalls without
disrupting business continuity or resorting to permissive rules
� Alignment with best practices from vendors and security industry veterans
� Scalable support for large enterprises and datacenters including distributed
deployment, multiple device domains and role-based management.
Tufin SecureTrack enables security operations teams to dramatically reduce risk while
increasing compliance and efficiency. With a powerful set of real-time and analytical tools,
SecureTrack tackles the practical challenges that operations teams face every day when it
comes to managing Cisco firewalls, routers and switches. This paper takes a closer look at
each of the key requirements in security operations management and explains how
SecureTrack enables companies to eliminate potential threats, lower costs, and achieve their
strategic security objectives.
Firewall Operations for Cisco 3/11