Global IT infrastructure leader modernizes a 1,000-firewall multi-vendor estate with Tufin

Download the case study, and learn how Tufin helped a leading global IT infrastructure and services provider replace a failed policy management platform across a 1,000-firewall estate spanning Check Point, Fortinet, Juniper, and Palo Alto — with ServiceNow-anchored workflows and a unified control plane built around how engineers actually work.

The Challenge: A Failed Operating Model Across One of the Industry’s Largest Multi-Vendor Estates

Legacy Platform Losing Engineer Trust: After two years on the incumbent tool, usability gaps, weak topology and path analysis, and brittle workflows meant engineers were spending more time fighting the tool than running clean policy.

Stalled Cleanup and Recertification: Rule cleanup, recertification, and decommissioning had all stalled, leaving policy hygiene across a 1,000-firewall multi-vendor estate to accumulate drift between reviews.

Weak ServiceNow Integration: Limited integration with the customer’s existing process model forced manual handoffs and rework, blocking end-to-end change automation across Check Point, Fortinet, Juniper, and Palo Alto.

The Results: A Unified Control Plane That Fits How Engineers Actually Work

1,000 Firewalls Under a Single Control Plane: Topology, path analysis, and policy assessment unified across Check Point, Fortinet, Juniper, and Palo Alto, replacing point-tool variability with one standardised operating model.

End-to-End Change Automation in ServiceNow: Rule cleanup, recertification, modification, and decommissioning anchored directly in the customer’s existing process model, removing manual handoffs and restoring engineer productivity.

Continuous Policy Hygiene at Scale: Risky and overly permissive rules identified and remediated systematically across the multi-vendor estate — establishing an automation foundation ready to extend to new use cases and vendors as the estate evolves.