Juniper and Tufin Security Suite Lifecycle Management Solutions
Total Page:16
File Type:pdf, Size:1020Kb
SOLUTION BRIEF Juniper and Tufin Security Suite Lifecycle MaNagement Solutions gain Visibility and Control of Juniper Networks Firewalls for Operations Management, Compliance, and Change automation In an attempt to apply and enforce security objectives on the ground, highly skilled managers rely on an array of administrative tools to implement configuration changes Challenge and to gather and analyze security data. Today, this process involves many repetitive, error-prone manual tasks and success depends entirely on the continuous vigilance Large organizations operate multiple of the security operations team. As security operations grow, it becomes increasingly firewalls across different time difficult to keep track of the details and be sure that there have been no human errors. zones and business units requiring In response, forward-thinking IT leaders are turning to Tufin Security Suite for Juniper a great deal of repetitive, manual Networks to manage firewall operations, ensure compliance with corporate, industry, work. Enterprises, managed service and regulatory standards and automate the security change lifecycle process. providers, and auditors need to accurately and cost-effectively manage The Challenge—Implementing, Managing, and Auditing security policies, enforce regulatory Security Policies requirements, and automate their change request processes. Providing network security for today’s enterprise is a continuous process of implementing corporate policy, fielding daily change requests, and demonstrating compliance with Solution standards. For most organizations, this has become a complex, resource intensive operation Tufin’s solutions ensure that security involving dozens of components, often located at distributed sites and maintained by objectives are aligned with day-to- multiple teams. at the same time, regulatory agencies are demanding increasingly rigorous day operations by providing security standards of transparency and accountability. Without a comprehensive, top-down view of administrators with complete visibility the entire security infrastructure, manual errors and inefficient configurations are difficult to into security policies across the avoid. and without process automation, security audits are time-consuming, painstaking, organization, as well as the necessary and ineffective in identifying threats before they occur. tools to automate and manage the Whether you are an enterprise, a provider of managed security services, or an auditor, you security lifecycle efficiently. need a tailored solution for implementing, managing, and auditing security policies faster, more easily, and more accurately than ever before. Benefits • Dramatic reduction in manual, The Juniper Networks-Tufin Technologies Security Lifecycle repetitive, error-prone tasks Management Solution • Optimized infrastructure utilization More than 700 companies around the world are using Tufin’s award-winning solutions to and improved network security increase the accuracy and efficiency of their firewalls and network devices. • Compliance with regulatory Tufin Security Suite for Juniper Networks includes SecureTrack™ Firewall Operations standards and shortened audit Management, SecureTrack™ auditing and Compliance, and SecureChange™ Workflow preparation times Change automation. • Proactive risk management SecureTrack Firewall Operations Management Tufin SecureTrack Firewall Operations Management is the industry-leading security operations management solution for Juniper Networks® ScreenOS® Software and Juniper Networks Junos® operating system-based firewalls and network infrastructure. With comprehensive real-time change tracking, in-depth security policy optimization, risk analysis and more, SecureTrack increases security and accuracy while slashing the time spent on repetitive, manual tasks. 1 Figure 1: SecureTrack spots policy changes in real time and maintains an audit trail to quickly reveal compliance breaches SecureTrack Auditing and Compliance Tufin SecureTrack auditing and Compliance maintains a continuous audit trail, making it far easier for organizations to Figure 2: SecureChange Workflow supports unlimited customized comply with standards and to successfully pass security audits. workflows that meet your business needs Featuring customized corporate security policies, automatic Features and Benefits compliance alerts, and a variety of robust, built-in reports such • Central management of all firewalls, routers, switches, as the latest version of Payment Card Industry Data Security and more Standard (PCI DSS), SecureTrack auditing and Compliance can slash audit preparation time by 50%. From the very first security • Real-time change tracking and a complete audit trail audit, Tufin dramatically reduces the cost of Juniper Networks • Network topology intelligence with automatic discovery firewall operations. • Policy optimization that identifies unused rules and objects SecureChange Workflow Change Automation • Policy and risk analysis that simulates policy to analyze risk Tufin SecureChange Workflow Change automation automates and business continuity the security change request process for Juniper Networks • automatic policy generator that eliminates overly firewalls and related network security infrastructure. With unique permissive rules security-aware technology, SecureChange Workflow replaces or • Rule recertification that enables documentation and complements existing help desk ticketing and workflow systems, identification of expired rules and it helps security teams to proactively reduce network security • PCI DSS report that instantly demonstrates compliance with and business continuity risks and enforce compliance. Designed the latest version to improve accuracy and efficiency at every stage of the security change process—from submission through design, risk analysis, • Corporate compliance reports and alerts, easily customized approval, verification, and auditing—SecureChange Workflow • Distributed deployment and multi-domain support supports IT governance and takes corporate and regulatory • Firewall and network change management compliance to the next level. • Unlimited customizable workflows with a simple editor • Proactive risk analysis prior to approvals and change implementation • SLa tracking that tracks service-level agreements for request workflows from submission through verification • Ticketing and change management integration 2 Data Center “It is nearly impossible to manually audit firewall and router rules and policies,” Admin PC ISG Series SRX650 Kindervag said. “To do it properly, you need to SSH/ SSH/ HTTPS Syslog Syslog NOC correlate the rule base to the log files to see what rules are being fired and which are just Email SSH/ Syslog SSG Series open holes into the network. Most companies Syslog are not even addressing this issue. I regularly SIM SNMP see companies that have never reviewed their SecureTrack/ SSH/ SSH/ SecureChange Syslog Syslog J Series firewall rule sets.” Workflow Remote John Kindervag, Oce Forrester SSG20 SSG Series Tufin offers solutions that are tailored for the needs of different Figure 3: SecureTrack and SecureChange Workflow network environment types of security organizations, combining cutting-edge Solution Components technology and usability with expert training and support. These Tufin Security Suite for Juniper Networks consists of SecureTrack solutions consist of the Tufin SecureTrack and SecureChange Firewall Operations Management, SecureTrack auditing and Workflow product suite along with additional features, licensing, Compliance, and SecureChange Workflow Change automation and support options that meet the needs of each market. software and appliance-based solutions. Enterprises Juniper Networks-Tufin Integration Providing enterprises with an end-to-end solution for network security teams helps to streamline operations, reduce risk, and Tufin SecureTrack and SecureChange Workflow are offered in optimize Infrastructure performance. Tufin enables organizations three form factors—as an appliance-based installation, a Redhat to successfully pass audits and proactively enforce corporate or CentOS Linux-based software installation, and as a VMware regulatory and industry compliance standards. installation. The appliance runs the TufinOS, a specialized hardened Linux OS. Customers that deploy SecureTrack and Managed Security Service Providers (MSSPs) SecureChange Workflow use these products to fully automate To compete in an increasingly competitive marketplace, security change management and monitor firewall devices of MSSPs need to enrich their service offerings while providing several Juniper product families including ScreenOS and Junos comprehensive network security for enterprises of all sizes. OS-based products, Juniper Networks SRX Series Services Featuring a scalable, multi-tenant architecture, versatile gateways, Juniper Networks J Series Services Routers, and distributed deployment, and role-based administration, Tufin Juniper Networks Network and Security Manager. Basic textual enables MSSPs to handle more customers more effectively with configuration integration management is also available for Juniper fewer resources. Networks E Series Broadband Services Routers and Sa Series Auditors SSL VPN appliances. Typically, Tufin’s products are deployed in the operations center and connect to devices that are located in Security audits are becoming a standard part of the corporate operations centers, data centers, and remote sites. IT landscape. as concerns over