Commercial bank unifies hybrid firewall governance across Palo Alto and Microsoft Azure with Tufin

Download the case study, and learn how Tufin helped a leading commercial bank bring 6 Palo Alto firewalls and 300 Microsoft Azure cloud VMs under a single control plane — launching a CISO-led firewall governance and rule cleanup program with continuous policy assurance across the hybrid estate.

The Challenge: Fragmented Visibility Across Hybrid Environments Blocking Governance and Audit Readiness

Two Environments, Two Ways of Working: No unified view of policy across Palo Alto Networks on-premises firewalls and a growing Microsoft Azure footprint, leaving audits and troubleshooting to start from scratch every time.

Labour-Intensive Audit Preparation: Every audit meant weeks of manual evidence collection, with policy reviews running on manual processes not built for the governance posture the business now required.

CISO Mandate for Continuous Hygiene: A new CISO launched a firewall governance and rule cleanup initiative with executive urgency and a board-visible timeline, turning a long-standing operational gap into a platform decision that needed to happen quickly.

The Results: Unified Hybrid Visibility and a Scalable Governance Foundation

306 Firewalls and Cloud VMs Under Continuous Policy Assurance: A single, real-time view of policy and topology across Palo Alto Networks and Microsoft Azure replaces two disconnected workflows with unified control.

Continuous Audit Readiness and Rule Cleanup: Evidence collection aligned to internal baselines and external frameworks (NIST, ISO 27001/27002, PCI-DSS, SOC 2, GDPR) replaces pre-audit scrambles, with rule cleanup and recertification moving to a continuous cadence.

Faster Troubleshooting and a Scalable Foundation: Topology and path analysis give engineers a device-centric view for rapid policy review, establishing a standardized governance foundation ready to extend as the CISO program matures.