Gaining visibility and improving cloud security of your Google Cloud Platform (GCP) firewall rules
Quickly secure and control your Next Generation Google Cloud firewalls and VPC network firewalls with unified policy management.
Tufin customers have visibility, control, and an agile way to optimize network firewall policies across their hybrid-cloud networks, including all three major cloud console vendors, Microsoft Azure, AWS, and Google Cloud Platform (GCP).
GCP customers can now benefit from centralized security policy orchestration, audit tracking, and automation—delivered through Tufin’s security policy orchestration platform. You can now bring GCP firewalls into the same real-time topology and compliance workflows already used for your on-premises and cloud environments.
Key Capabilities
Increase Protection
View GCP devices and network traffic paths directly in Tufin’s live topology map, including monitoring all types of firewall rule traffic source ips and ports such as TCP, UDP, SSH, SSL, etc. supporting the most common GCP deployment options:
- Shared VPCs
- VPC Peering
- Cloud VPN
- Dedicated Interconnect
- VPC Firewall Matching Rules
- Network Tags enabling troubleshooting for specific workloads.
Automated Policy Changes
Automate GCP rule changes with built-in risk analysis and compliance validation. Tufin automation includes:
- Verifying whether a change request is permitted by the VPC firewall and other relevant device permissions.
- Identifying the appropriate GCP VPC firewalls and associated devices involved.
- Performing automatic risk assessment as part of the change process.
Enhanced Visibility
Monitor GCP Projects and VPCs directly in Tufin Orchestration Suite (TOS), and visualize GCP VPC firewall rules, including ip addresses and ip ranges network tags and service account with intuitive mapping for deeper inspection.
Unified Rule Monitoring
Gain full audit trails, including metadata for authentication purposes and track changes across all GCP devices.
Violation Detection
Identify risky or non-compliant rules across GCP devices and generate a security best practice templates—including compliance checks for PCI and ISO 27001 standards.
Seamless Integration
Connect GCP devices into ServiceNow and other ITSM solutions for streamlined approvals.
Why It Matters
The default ingress rules and egress rules of a VPC firewalls permit intra-network traffic and allow ICMP, SSH, and RDP access to GCP resources.
Need to optimize that to meet your security posture?
Tufin makes it easy to align your network security policies with your specific requirements. With broader network coverage and GCP support, you can support the following use cases:
Streamline Regulatory Compliance
Automatically validate security posture with USP-based controls, reducing audit prep time and compliance violations.
Accelerate Network Operations
Visualize hybrid network topologies—including GCP topologies—and automate change processes to reduce Mean Time to Resolution (MTTR) and avoid costly misconfigurations.
Boost Operational Efficiency
Automate policy changes across multi-vendor environments, cutting manual effort and ensuring consistent, risk-free implementations.
Improve Risk Posture
Gain end-to-end visibility and enforcement across diverse environments, reducing exposure from misaligned policies and firewall inconsistencies.
FAQs
Tufin acts as a single point of control for all your device, router, and network management across your entire ecosystem. Need to view changes to VPC network firewall rules? You can do that from the Tufin Orchestration Suite across all your firewalls, instead of toggling between GCP’s web application and other dashboards.
Yes, you can easily install Tufin on a virtual machine. You’ll need to ensure you have all the compute and iam authentication permissions prerequisites, load balancing configurations. Ensure you read the docs, for IP address, DNS, CLI and other installation parameters needed to set up the server.
Security Policy Management for Google Cloud
Explore how Tufin and GCP can help your organization simplify its network security and policy management across hybrid environments.