Since the network is always changing, you must be able to assess risk and vulnerability at any given time - for all relevant security devices.
The automated Security Risk Report instantly evaluates the current level of risk and displays your Security Score along with scoring on a prioritized list of risk factors. The report can be run at the organizational level or per gateway, and indicates risk trends in addition to the current state.
You can run the Security Risk report manually or on schedule, or in response to certain configuration changes.
Tufin also lets you define a Risk Management Policy that specifies either blacklist or whitelist traffic, as well as permitted exceptions. This policy helps you to ensure that no changes are made that post a threat to business continuity. Any violations to the Risk Management policy trigger a compliance alert.
To determine the Security Score, the report uses your corporate compliance policies as well as a group of pre-defined risk factors culled from leading industry standards.The report uses Network Topology intelligence to identify groups and zones, so you can quickly and easily configure the report.