Tufin Extensions

Workflow Integrator

Tufin

Tufin’s Workflow Integrator app integrates with SecureChange to build custom code-free integrations between SecureChange and any other REST API-based solution, such as ITSM, IPAM, Vulnerability Management, SIEM, and more. Organizations can use this solution to enhance their existing change management process, and increase their efficiency with automated data submission and/or retrieval steps. Customers select existing workflows in SecureChange, configure the data exchange between the SecureChange server and third-party server, and map data field values and prior or subsequent automated steps, and configure the trigger.

This application is included in the SecureChange+ subscription tier.

Vulnerability Mitigation App

Tufin

The Tufin Vulnerability Mitigation app (VMA) enables Tufin customers to prioritize remediation and mitigation efforts by enhancing vulnerability scanner output with network insights. By combining vulnerability measures (CVSS and severity) with insights into how these vulnerabilities may be accessed and exploited via the network, customers have the context to identify and address the vulnerabilities that pose the greatest threat to their critical business assets.

The Tufin Vulnerability Mitigation app provides out-of-the-box integration between Tufin SecureTrack and the most widely used vulnerability management solutions, including Tenable.io, Tenable.sc, Qualys VMDR, Rapid7 Nexpose, and Rapid7InsightVM.

With Tufin’s Vulnerability Mitigation app, you can:

• Prioritize vulnerability remediation efforts based on exposure of critical assets as well as severity of vulnerabilities
• Easily assess overall risk to critical assets resulting from vulnerabilities that are both accessible and exploitable
• Automate risk mitigation by blocking access to the critical asset until remediation efforts can be fully implemented
• Monitor and measure risk exposure over time via a comprehensive dashboard that highlights overall vulnerability exposure networkwide and the impact of mitigation and remediation efforts

Instructions for generating an evaluation license are available in the app's documentation linked in the sidebar.

This application is included in all Tufin subscription tiers.

SecureTrack Reporting Essentials (Aurora)

Tufin

The SecureTrack Reporting Essentials (STRE) is a Marketplace application for generating a wide variety of operational reports based on SecureTrack data in a format that is easily read and understood. Reports can be either vendor agnostic or vendor specific.

Each report is generated from a predefined report template that you can configure according to your preferred settings. These report settings can then be saved for future use. You can define which information is displayed, how frequently the report output is generated, and the date and time in which it is distributed to recipients. These automation capabilities eliminate the need to manually create reports (although this feature is also supported), and allow you to align the timing of the report output distribution to when it is required. This will allow you to automatically distribute reports before reoccurring meetings, and enable participants to come better prepared.

Report recipients can view the generated reports in their browser, and/or you can distribute the reports as PDF or CSV files.

The STRE reports are used in a wide variety of use cases. For example, you can use the reports to:

• Detect unauthorized policy changes or device configurations that violate the corporate security policy
• Detect connectivity interruptions
• Detect which rules are impacting traffic
• Summarize changes to rules and objects between revisions
• Summarize current policies and compare them to global standards, such as PCI and ISO
• Assess severity of violations against Unified Security Policies (USP)
• Discover redundant rules
• Determine the compliancy of a device's configuration

This application is included in all Tufin subscription tiers.

Rule Lifecycle Management

Tufin

The Rule Lifecycle Management App (RLM) is a Tufin Extension that simplifies and manages the rule review and certification process. The application automatically identifies expiring or expired rules and maps them to the appropriate owner(s), enabling simple recertification or decertification of the rule. This process generates an audit trail of tickets opened in Tufin's SecureChange product where the firewall policy and metadata changes can be implemented, effectively eliminating many of the manual steps normally required for orchestrating what is often a manual and complex process.

The RLM enables you to:

• Configure a rule review process based on a generic model
• Identify inactive owners for rule reassignment
• Orchestrate rule review across owners
• Automate rule certification, changes when needed, and disablement when appropriate
• Maintain a consistent audit trail

The RLM application is included in the SecureChange+ subscription tier.

Dashboard Essentials

Tufin

Dashboard Essentials is a Tufin extension that provides additional analytics to help you track progress toward security, compliance, and operational efficiency goals. Graphs and visuals are also designed to help you prioritize efforts by making outliers and problem areas more visible. Compared with the SecureTrack core dashboard, this extension provides a suite of more granular analytics tools, each focused on specific goals that your organization may have. The visuals are intended to help you monitor progress across time and can be easily exported in PDF form to document progress or report out to stakeholders.

What Problems Does Dashboard Essentials Solve?

You may find these dashboards helpful if you are responsible for reporting on progress toward goals like the following:

• Implementing a network security compliance program for your organization using Tufin
• Attaining compliance with a rule certification process
• Identifying and cleaning up risky network rules
• Implementing an auditable change process for network access flows
• Achieving accountability around rule certification and change management

Each dashboard provides instructions for exporting to PDF.

This application is included in all Tufin subscription tiers. 

Vulnerability-based Change Automation

Tufin

Tufin’s Vulnerability-based Change Automation app (VCA) enables Tufin SecureChange customers to expand their risk-based access request workflows to reflect the results of vulnerability scan results. Customers can automatically check source and destination assets for known vulnerabilities prior to granting access or connectivity.   Risk levels are pulled from existing vulnerability scanners based on historical data or active scans. SecureChange workflows can be fully automated so that risk assessments can be consistently integrated into your existing change management processes, and fully documented for audit assurance.

With the Tufin Vulnerability-based Change Automation app users can:

• Make accurate risk decisions based on policy and security data
• Enable the business by reducing reliance on security teams to manually review each access request
• Maintain a consistent and documented security policy-based change management process

This application is included in the SecureChange+ subscription tier.

Policy Change Automation for Cisco ACI

Tufin

Policy Change Automation App for Cisco ACI (PCA) is a Tufin Marketplace application that helps network and security teams manage and automate security policy changes to the Cisco ACI fabric using a SecureChange Workflow. With this app, you will be able to rapidly provision changes to the relevant EPGs and non-ACI assets – both on-premise and in public cloud environments.

To create the seamless integration between SecureChange and the ACI fabric, PCA uses a SecureChange Access Request Workflow and an Ansible Playbook, providing a standardized process for automating the entire flow from opening the ticket to provisioning the changes. PCA allows you to ensure that access changes to contracts and multi-vendor firewall rules are implemented quickly and accurately throughout the hybrid environment, according to your organization’s security policies.

Please note that the appropriate SecureChange licensing for ACI is required to use the app.

This application is included in Tufin's Enterprise subscription tier. 

AKIPS

Tufin

SUMMARY

AKIPS Network Monitoring Software provides visibility of critical real-time and historical performance metrics and logs from the heart of the data center all the way to the end user. AKIPS allows network engineers to be proactive instead of firefighting: to detect, analyze and rectify issues and faults before user complaints, and to significantly reduce business impact and disruption.

Network visibility
Track your entire network using SNMP, traps, syslog and ping. Visualize traffic paths using NetFlow. Trace connections between core devices and edge ports with SPM. Use configuration crawler to backup and compare historical configuration of key devices. Our intelligent polling won't overwhelm your network.

Alerting & reporting
Create custom status alerts and be notified on critical network events. Aggregate alerts into device, event and interface dashboards. Harness table and graph reports to summarize the most relevant data. Identify unused interfaces on your network.

Integration & customization
Go beyond standard reports with custom site scripts, for full control and advanced data analysis. Integrate with the services your team relies on to receive critical alerts. Forward and fanout messages to specialized tools for deeper analysis. Group devices to view specific data in a logical hierarchy.

TufinMate Management App

Tufin

TufinMate is an AI assistant that helps you troubleshoot network access issues with the same convenience as messaging a colleague.  With integrations for Microsoft Teams and Microsoft Security Copilot, TufinMate answers user questions about network access flows and can provide details about server to host connectivity and firewall devices. TufinMate is highly secure and configurable: admins can enforce least privilege by restricting the level of detail given to different users.  By resolving small, every-day requests for users across your IT organization, TufinMate will make an exceptional addition to your network operations team.

Visit the Customer Portal Download Center to download the application for a three month free trial. Free trial begins after the first integration is configured.

Tufin Connector for FortiSOAR

Tufin

Integrated into the Fortinet Security Fabric, FortiSOAR security orchestration, automation and response (SOAR) provides innovative case management, automation, and orchestration. It pulls together all of an organization's tools, helps unify operations, and reduce alert fatigue, context switching, and the mean time to respond to incidents. Using FortiSOAR helps enterprises adapt and optimize their security processes with:

• Response-times that are up to 98% faster than manual options
• 160+ out-of-the-box playbooks
• 350+ connectors

The Tufin connector enables you to search for and enforce network security policies, perform network topology searches, and query network device information across managed firewalls, SDNs and cloud environments.

Tufin IBM Resilient App

Tufin

Tufin SecureTrack integrates with IBM Resilient to provide SOC analysts with unified real-time network visibility and policy intelligence to accelerate incident response based on a rich set of real-time data, while using automated, playbook-driven response in IBM Resilient.

With the Tufin IBM Resilient App, security analysts can:

• Automatically gather critical network intelligence to provide communication path context to incident indicators
• Visualize network topology and application connectivity to allow investigators enhanced visibility to quickly and accurately assess the possible scope of an incident
• Automatically initiate, design and implement network access changes using playbooks and Tufin workflows (e.g. to contain potentially infected systems)
• Maintain compliance and adherence to established change control processes throughout the incident, with full auditability

The Tufin IBM Resilient App can be found in the X-Force/App Exchange.

Tufin Cortex XSOAR Extension

Other

Tufin SecureTrack integrates with Cortex XSOAR to provide SOC analysts with unified real-time network visibility and policy intelligence to accelerate incident response based on a rich set of real-time data, while using automated, playbook-driven response in Cortex XSOAR.

With the joint Tufin-Cortex XSOAR app, security analysts can:

Automatically gather critical network intelligence to provide communication path context to incident indicators

• Visualize network topology and application connectivity to allow investigators enhanced visibility to quickly and accurately assess the possible scope of an incident
• Automatically initiate, design and implement network access changes using playbooks and Tufin workflows (e.g. to contain potentially infected systems)
• Maintain compliance and adherence to established change control processes throughout the incident, with full auditability

To enable the Tufin integration in Cortex, you need to enable the extension in the UI of Cortex.

EfficientIP SOLIDserver

Other

Tufin integration with EfficientIP ensures that IP/DNS network information automatically creates/deletes zones in Tufin SecureTrack, updates existing SecureTrack zones to provide real-time visibility on risk in your network, and ensure risk calculations in SecureChange reflect the dynamic changes in your network.

This integration enables identification of legacy access that violates your security policy, and alerts of any resulting violations during address re-assignment.

With the Tufin TAP-certified EfficientIP SOLIDserver DDI app, security and network teams can:

• Use the Network attributes of Efficient IP SOLIDserver DDI to create and update zones in SecureTrack to use for creating Unified Security Policies
• Gain continuous visibility into existing policy violations or those created by IP re-addressing/assignment
• Ensure automated risk assessments during change requests measure against any recent IP/DNS changes in EfficientIP

Swimlane

Other

Tufin SecureTrack integrates with Swimlane to provide SOC analysts with unified real-time network visibility and policy intelligence to accelerate incident response based on a rich set of real-time data, while using automated, playbook-driven response in Swimlane.

With the joint Tufin Swimlane, security analysts can:

• Automatically gather critical network intelligence to provide communication path context to incident indicators
• Visualize network topology and application connectivity to allow investigators enhanced visibility to quickly and accurately assess the possible scope of an incident
• Automatically initiate, design and implement network access changes using playbooks and Tufin workflows (e.g. to contain potentially infected systems)
• Maintain compliance and adherence to established change control processes throughout the incident, with full auditability

The joint Tufin Swimlane App can be found by searching through their product's UI for partners.

Tufin-Splunk Phantom Integration

Other

Tufin SecureTrack integrates with Splunk Phantom to provide SOC analysts with unified real-time network visibility and policy intelligence to accelerate incident response based on a rich set of real-time data, while using automated, playbook-driven response in Splunk Phantom.

With the joint Tufin-Splunk Phantom app, security analysts can:

Automatically gather critical network intelligence to provide communication path context to incident indicators

• Visualize network topology and application connectivity to allow investigators enhanced visibility to quickly and accurately assess the possible scope of an incident
• Automatically initiate, design and implement network access changes using playbooks and Tufin workflows (e.g. to contain potentially infected systems)
• Maintain compliance and adherence to established change control processes throughout the incident, with full auditability

To enable the integration, enable the integration through Splunk Phantom's UI.

Tufin DFLabs IncMan SOAR Integration

Other

Utilize DFLabs IncMan SOAR R3 Rapid Response Runbooks to enable the collection of actionable network intelligence by integrating with Tufin Orchestration Suite.

Harness the vast amount of network intelligence available from Tufin, such as device, policy and path information, along with the automation, orchestration and measurement power of DFLabs IncMan, SOAR to respond faster and more efficiently to computer security incidents.

DFLabs IncMan SOAR and Tufin Orchestration Suite solve these specificchallenges:

• How can I get a current list of network devices?
• How can I get a current list of rules and polices?
• How can I determine the network path from source to destination?

The Tufin DFLabs IncMan SOAR Integration can be enabled in the UI of DFLans IncMan SOAR.

Infoblox Grid Manager

Other

Tufin integration with Infoblox ensures that IP/DNS network information automatically creates/deletes zones in Tufin SecureTrack, updates existing SecureTrack zones to provide real-time visibility on risk in your network, and ensure risk calculations in SecureChange reflect the dynamic changes in your network.

This integration enables identification of legacy access that violates your security policy, and alerts of any resulting violations during address re-assignment.

With the Tufin TAP-certified Infoblox app, security and network teams can:

• Use the Network attributes of Infoblox to create and update zones in SecureTrack to use for creating Unified Security Policies
• Gain continuous visibility into existing policy violations or those created by IP re-addressing/assignment
• Ensure automated risk assessments during change requests measure against any recent IP/DNS changes in Infoblox