Tufin, represented locally by Blue Turtle Technologies, has announced the release of its Automatic Policy Generator (APG), which makes it possible for firewall administrators to automatically create a rule base for any firewall. APG optimises security infrastructure and improves network performance by replacing broadly defined rules with specific networks and services.
APG has been developed as an add-on for Tufin SecureTrack. The product is designed to help organisations address issues that include the integration of firewalls into new network segments, refining rules that may be too permissive, and the facilitation of easy migration from one firewall vendor to another.
The APG migration feature is a major benefit to organisations that are considering introducing new firewall vendors, as it can eliminate hidden migration costs.
In many situations, the time and cost required to prepare a migration can nullify any return on investment that may be gained from said migration. The seemingly simple task of implementing a new firewall can take months of rule analysis, as the work requires conversion from one methodology to another.
Many organisations have firewall policies that include rules that are no longer used or are duplicated. Using APG, SecureTrack refines rules, while identifying rules that have expired, or are no longer compliant with an organisation`s security policy. APG then automatically excludes these rules from the new policy. Since SecureTrack analyses rules based on an organisation`s risk and business continuity policy, it is able to eliminate the risk of changes being implemented that create vulnerabilities, or cause breaks in critical business services.
APG creates a firewall rule base through the analysis of firewall log usage. The logs are automatically retrieved, standardised and analysed. A rule base is then generated. Using permissive rule analysis technology, all required network connectivity is identified automatically. APG then re-orders rules based on usage, and optimises the rule base to allow only necessary traffic. APG runs on devices from all network firewall vendors.
Share