VMware vRealize Orchestrator and Tufin Orchestration Suite

Technology Partner Solution Brief

vRealize Orchestrator™ Streamlines Complex IT Operations Highlights VMware vRealize™ Orchestrator™ is a drag-and-drop workflow software solution that simplifies the ™ automation of complex IT tasks. It integrates with VMware vCloud Suite components to adapt The integration of VMware vRealize and extend service delivery and operational management, thereby effectively working with existing Orchestrator™ and Tufin Orchestration infrastructure, tools and processes. It enables administrators to develop complex automation tasks, Suite™ delivers agility through the then quickly access and launch workflows from the VMware vSphere® client, various components of automation of server and network security VMware vCloud Suite, or other triggering mechanisms. provisioning. It enables IT organizations to: vRealize Orchestrator includes easy-to-use development and management tools including a • Eliminate process bottlenecks in IT workflow designer, workflow engine and built-in workflow library. vRealize Orchestrator provides operations 100 percent coverage of the vSphere and VMware vCloud Director® APIs, and is integrated with other VMware solutions such as vRealize Automation, vRealize Operations and vCenter Update • Reduce IT operating expenses and Manager™. With this type of coverage, administrators or developers can automate virtually any task total cost of ownership in their cloud and virtual infrastructure. Plug-ins and workflows are published on VMware Solution Exchange, a marketplace of extensible solution plug-ins, to connect to multiple VMware and third- • Automate management and party applications. operational tasks across hybrid network infrastructure

™ • Perform risk analysis to ensure The Tufin Orchestration Suite compliance with network security policy The Tufin Orchestration Suite™ is a complete solution for automatically designing, provisioning, analyzing and auditing network security policy changes from the application layer down to the • Meet stringent SLAs for security and network layer. Tufin reduces the attack surface and minimizes disruptions to critical applications. Its deployment activities network security automation enables enterprises to implement security changes in minutes instead of days with continuous compliance and increased agility.

The Tufin Orchestration Suite’s™ SecureChange product maximizes agility with end-to-end automation of network security changes. SecureChange reduces human error and minimizes remediation efforts. The Tufin Orchestration Suite’s™ automated workflows are extensible and customizable using an open API.

Figure1: Tufin Orchestration Suite www.tufin.com Agility through Automation Businesses are constantly trying to reduce cost and accelerate service delivery to internal users and Tufin at a Glance external customers. Many are turning to automation as a solution. However, in today’s heterogeneous environments complete end-to-end automation can be difficult to obtain due to interoperability, lack of APIs or resource constraints. Offices: North America, Europe and Asia-Pacific

Automating across Heterogeneous Environments Customers: More than 1,900 in over While automation solutions have been made available for all aspects of IT infrastructure, solutions 50 countries that are vendor-specific can create islands of responsibility that undermine productivity gains. This issue becomes further complicated with the prevalence of both private and public clouds, and Leading Verticals: Finance, telecom, the challenges of achieving full end-to-end automation for instantiating new servers. For vRealize energy and utilities, healthcare, retail, Orchestration customers, automating the creation and configuration of a new server is a start, but education, government, manufacturing, provisioning connectivity can be delayed if connectivity approval is done by a different team. transportation and auditors

Channel Partners: More than 240 worldwide Capture VM Provision VM Setup Deploy VM SecureChange Topology Risk Analysis Attributes Change Complete Technology Partners & Supported Platforms: , BMC, Figure 2: Tufin and vRealize Orchestrator Automation Flow ServiceNow, Blue Coat, , Cisco, F5 Networks, , Forcepoint™, , Microsoft Azure, OpenStack, , VMware and more Integrated Automation through Open APIs Using the open APIs of the Tufin Orchestration Suite™ and vRealize Orchestrator, customers can now eliminatate their islands of automation. When a request for a new server is relayed to vRealize Orchestrator, a new virtual machine is instantiated, and the underlying operating system is configured along with any other unique configuration requests. The details of the new server configuration VMworld 2016 Awards are then relayed via a RESTful API to the Tufin Orchestration Suite™. Tufin’s SecureChange then validates the requests, determines which devices need to be altered and upon completion of the change notifies vRealize Orchestrator that the server is fully provisioned. This integrated automation reduces the time to provision and also removes the time variability of the request. Now users are able to provision a server from end-to-end without delay and in a consistently reliable manner.

Best of Show Award

Validation is a Critical Step While automation can repeat any task, it can also repeat any mistake. It’s essential to validate all changes within the automation process to prevent the proliferation of errors. The Tufin Orchestration Suite™ can validate the accuracy of proposed changes across policies, and then validate the change. The Risk Analysis mechanism within Tufin validates that any automation change does not violate network policy, then Tufin’s Target Analysis verifies that the correct devices are always involved in the change process, and lastly Tufin validates that all the changes were successfully and correctly Gold Award for Agility and Automation applied after the provision process is completed.

Summary VMware vRealize Orchestrator and the Tufin Orchestration Suite™ provide an integrated automation solution that saves time and bridges communication and process gaps between departments within organizations. Through the use of open APIs, new servers and their network connections can be seamlessly provisioned, ensuring that security is maintained through change validation. By utilizing VMware and Tufin together, organizations can respond to business demands quickly and accurately.

Copyright © 2017 Tufin Tufin, Unified Security Policy, Tufin Orchestration Suite and the Tufin logo are trademarks of Tufin. All other product names mentioned herein are trademarks or registered trademarks of their respective owners. www.tufin.com SB-07-17