Global IT Services Leader Eliminates Internet-Facing Attack Surface with Tufin

Download the case study, and learn how Tufin helped a global IT services provider operating across 70+ countries with 3,000+ firewalls eliminate 94% of its internet-facing attack surface, remove 60,000+ legacy rules, and run change processes 76% faster.

The Challenge: Sprawling Firewall Estate and Change Processes That Couldn’t Scale

Massive Internet-Facing Exposure: Thousands of hosts were exposed to the internet with no clear ownership across ~300,000 potential IP addresses.

Decades of Stale Rules: Tens of thousands of inherited firewall rules — many unused or overly permissive — created widespread attack points across the estate.

Manual Change Processes: Workflows failed often and required too many people to run, blocking the organization’s cloud migration goals.

The Results: Drastically Reduced Attack Surface and Automated Change Control

94% of Internet-Facing Hosts Eliminated: 2,000+ exposed hosts removed and 17,000 unused internet-facing hosts remediated globally.

80% Fewer Firewall Rules: 60,000+ rules removed, ~400 firewall pairs decommissioned, and 2,750 overly permissive “Any” rules eliminated — saving millions in hardware and software costs.

76% Faster Change Tickets: End-to-end automation cut completion time by 76% and improved first-time change success by 50%, enabling continuous, measurable security posture.