R16-3 bolsters productivity for seamless cybersecurity and business agility with end-to-end change automation across Panorama device groups

BOSTON – December 6, 2016 – Tufin®, the market-leading provider of Network Security Policy Orchestration solutions, extended its award-winning Tufin Orchestration Suite™ to closely integrate with Palo Alto Networks Panorama Network Security Management. By offering enhanced automated provisioning for device groups’ policy changes, the Tufin Orchestration Suite R16-3 allows Palo Alto Networks customers to maximize both security and agility. Tufin Orchestration Suite delivers end-to-end change automation of network security policies across heterogeneous networks, including built-in risk analysis to proactively address policy violations. Palo Alto Networks users can now accelerate implementation across physical firewalls and private and public cloud platforms without compromising compliance, suffering security risks or experiencing application downtime from misconfigurations. Tufin Orchestration Suite R16-3 empowers Palo Alto Networks customers using Panorama version 7.1  to centrally monitor and manage changes and conflicts within next-generation firewall policies along with security policies of private and public cloud infrastructure. Security teams using Panorama device group policies to segment their networks can now run analysis to optimize and simplify these policies, while also identifying and addressing violations of internal standards or industry regulations. More importantly, Tufin enables these teams to perform end-to-end connectivity analysis and change automation with built-in policy compliance for Palo Alto Networks device group policies, and for next-generation firewall and access policies across the hybrid network. Finally, Tufin enforces continuous compliance of Panorama device group policies with a central, enterprise security policy to reduce audit preparations and tighten the security posture. “Panorama provides Palo Alto Networks customers with easy-to-implement, consolidated policy creation and centralized next-generation firewall and network device management. More than ever, providing visibility, control and an ability to gain insight into network-wide traffic and threats is critical,” said Marc Benoit, vice president of Technical Business Development at Palo Alto Networks. “Tufin expands the capabilities of Panorama to provide joint customers with network security change automation and orchestration across heterogeneous networks, including hybrid cloud environments.” The impact of managing device group policies rather than firewall policies goes beyond faster, safer and more accurate automation of connectivity changes. Instead of initiating several cleanups for the same rule/object per firewall policy, R16-3 customers identify redundant objects and rules across firewalls and initiate cleanup accordingly, saving significant time and resources. To help manage policy violations and exceptions, R16-3 works across firewalls, rather than managing multiple exceptions for multiple instances of the same violation, per firewall. By identifying violations in real-time per device group, users will avoid alert fatigue and no longer flag the same violation multiple times, per firewall. Additionally, to enforce segregation of duties in device group hierarchy, each administrator can monitor and manage rules or objections of the device group only by permission, but not for a higher-level device group. “Delivering security policy management that can be seamlessly integrated into existing infrastructure is a top priority for us,” said Pamela Cyr, SVP of Business Development at Tufin. “By enhancing Palo Alto Networks manageability with end-to-end policy management and automation for Panorama device groups, we enable network administrators to adhere to security policies, regardless of the complexity of the environment, as well as strengthen their security posture and increase productivity.” The new release is now generally available.