Tufin Launches Tufin Security Suite 6.0

PRESS RELEASE

September 13, 2011 – Ramat Gan, Israel -- Tufin Technologies today announced version 6.0 of its award-winning Tufin Security Suite (TSS), the combined offering of its flagship firewall operations management and compliance product, SecureTrack™, and SecureChange™, its security change automation solution. Version 6.0 continues Tufin’s tradition of innovation: The ability to set and enforce user and application level policies for Palo Alto Networks Next Generation firewalls is a major market milestone, as is Tufin’s Topology Intelligence, with support for an unlimited number of devices. Tufin’s comprehensive Topology Intelligence enables network administrators to immediately and strategically determine what policy changes result in the most efficient path between any given network source and destination.

“Next Generation firewalls offer many advantages over traditional network firewalls, but they introduce additional complexity. Tufin’s ability to set and enforce polices based on user and application data has enabled us to maximize our investment in Next Generation firewalls and despite the added complexity, has substantially reduced our management burden,” said Alistair Carnegie, network security analyst, Baillie Gifford. “As we transitioned to Next Generation firewalls, we used Tufin’s Automatic Policy Generator, which added tremendous value by enabling us to quickly populate our Next Generation firewalls with optimized policies.”

“As a former firewall administrator, I know how hard it is to implement and maintain effective firewall rules, and as an analyst, I can appreciate how the increased complexity of those rule sets impacts operations as more business applications run through the browser,” said Diana Kelley, principal, Security Curve. “Application aware firewalls are becoming the standard, but most organizations are still early on the migration path. Solutions that help companies manage network and application firewall rules effectively can reduce risk and overhead while gaining better control over their security and compliance posture."

Key additions to TSS 6.0 include:

Enhanced support for Next Generation firewalls: TSS 6.0 provides deeper directory services integration of user and application intelligence, support for multi-dimensional Policy Analysis queries according to user and application, and definition of Compliance Policies and Compliance Reports such as black list and white list according to user and application. As a result, Tufin has delivered the first Security Lifecycle Management solution to transition from monitoring to proactive management of Next Generation firewalls. Enhanced Network Topology Intelligence is integrated into several key components of TSS, allowing security administrators the ability to leverage security policies as a strategic tool for controlling the flow of network traffic via a dynamic, visual map of all devices and zones on the network. Cisco Device Configuration Reports: TSS’s Device Configuration Report is specially designed for Cisco routers and switches, checking for common security settings and misconfigurations that are critical for overall device and network security. The report, which is in line with the CIS IOS Benchmark and the NSA’s Router Security Configuration Guide, checks for many common security settings like SNMP settings, authentication settings, NTP settings, unnecessary services, Syslog settings, and more. Enhanced, Graphical Policy Change Advisor with Vendor-Specific Change Recommendations uses Tufin’s Network Topology Intelligence to provide a graphic display of policy rules along with the full access path between any specified source and destination. It gives security administrators vendor-specific configuration recommendations for each of the devices in the access path, making it much easier and faster for administrators to fulfill change requests accurately. Enhanced Rule Documentation and Recertification now includes triggered alerts and scheduled reports for expiring rules, rule owners, or any other documentation field. Extensive SecureChange Customization API allows security managers to customize ticketing workflows and integrate with additional systems. New API capabilities include the ability to execute scripts between workflow steps, submit requests via e-mail, and open requests from an external system. Enhanced Support for Conditional Workflows includes more options for defining the most complex change flow scenarios. Workflows may include an instruction to skip a step under a defined condition or to perform steps automatically. For example, risk analysis can be performed automatically, and according to the risk level, an approval step may be required. High Availability: Tufin Security Suite can be now configured for High Availability, providing continuous synchronization between the primary TSS server and the secondary TSS server. The secondary server can be deployed either locally or in geographically remote data centers. T-80 Appliance: The latest addition to the Tufin family of appliances is specifically designed for small data centers and distributed deployments. Extended Support for Multi-Tenancy: Following on the multi-domain capabilities of SecureTrack, SecureChange now supports multiple tenants and domains. Service providers and large enterprises can handle tickets from different business units, data centers or customers securely. SecureChange automatically associates every change ticket to the correct domain context and maintains full segregation of data between domains. Each requestor only sees the devices and objects in the domains to which he/she belongs.

“We are proud of the ground we have broken with TSS 6.0,” said Ruvi Kitov, CEO, Tufin Technologies. “Not only do we lower the cost and ease much of the management burden associated with moving to and managing Next Generation firewalls, but our customers tell us that the other capabilities we have delivered played a crucial role in enabling them to successfully meet their compliance, security and operational objectives. As long as we keep customer satisfaction our number one priority while delivering real innovation in our products, we are confident we will continue our strong growth and momentum.”

Pricing and Availability TSS 6.0 is available immediately. Pricing starts at $20,000.

About Tufin Technologies Tufin™ is the leading provider of Security Lifecycle Management solutions that enable companies to cost-effectively manage their network security policy, comply with regulatory standards, and minimize IT risk. With the award-winning Tufin Security Suite, security teams are successfully managing firewall operations and performing audits and risk assessments – often in half the time. Founded in 2005 by leading firewall and business systems experts, Tufin serves more than 800 customers in industries from telecom and financial services to energy, transportation and pharmaceuticals. Tufin partners with leading vendors including Check Point, Cisco, Juniper Networks, Palo Alto Networks, Fortinet, F5, Blue Coat, McAfee and BMC Software, and is known for technological innovation and dedicated customer service. For more information visit www.tufin.com, or follow Tufin on: • Twitter: http://twitter.com/TufinTech • Facebook: http://www.facebook.com/Tufintech • LinkedIn: http://www.linkedin.com/companies/tufin-technologies • YouTube: http://www.youtube.com/user/Tufintech • The Tufin Blog: http://www.tufin.com/blog