Securely simplify your network management

Orchestrate and automate security policies across firewalls and network devices to reduce the risk of breach and non-compliance, decrease costs and improve your network and security teams agility. With the broadest device support in the industry, Tufin enables customers to leverage their investment in Cisco security technology to deliver comprehensive network security policy management.

With Tufin, you can:

  • Automate firewall and security changes across Cisco devices including Meraki and non-Cisco devices including Microsoft Azure and Fortinet for example.

  • Automate optimizing and migrating rule sets from legacy Cisco ASA (Adaptive Security Appliance) firewalls to Cisco FirePower NGFW systems without the complexity of console management.

  • Consolidate management of switches, routers, and other Cisco devices across your data centers

  • Eliminate risky manual processes and strengthen network security with network change automation.

  • Deploy more customizations and automations than Cisco Secure Firewall FirePower Management Center.

Unparalleled automation for Cisco Firepower Firewall

Tufin provides full functionality to act as a single control plane to manage security policies across your entire infrastructure. With Tufin, you can:

  • Gain centralized, real-time visibility into interfaces, configs and policy violations from multiple next generation firewalls such as Cisco Firepower through to major cloud networks and vendors (e.g. Amazon AWS, Microsoft Azure, Google Cloud Platform).

  • Automate rule cleanup and policy optimization to reduce attack surface, improve network performance and remain audit ready at all times.

  • Reduce downtime and troubleshoot connectivity in real-time with an accurate topology model, routing, and path analysis.

  • Boost team agility with zero-touch network change automation.

  • Automate cybersecurity incident response for malware detection.


Which Cisco FirePower Firewall is best for me?

Cisco has many series of FirePower firewalls. The model that is best for your business depends on your desired firewall throughput, IPSec VPN throughput, and IPS throughput, as well as SD-WAN design, Power of Ethernet requirements, and your existing network configurations. Get instructions on how to monitor Cisco FMC devices with Tufin.

Which Cisco FirePower devices work with Tufin?

Tufin integrates with Cisco NGFWs through FMC thus any FMC connected firewall (including Cisco FirePower 1010, FirePower 2100, and FirePower 4100) can be integrated into Tufin’s Network Security Policy Management capability. Discover how the Tufin Orchestration Suite enhances Cisco Firewall security policy automation.

What other firewalls does Tufin work with?

Tufin acts as a single pane of glass for firewall and security policy automation and management, across your data center. As well as Cisco security devices mentioned, Tufin supports many other firewall vendors including Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, Red Hat, Check Point, F5 Networks, Fortinet, Forcepoint, Juniper Networks, OpenStack, Palo Alto Networks, Symantec, VMware and more. Learn which devices and platforms Tufin supports (hint: it’s a lot).