Firewall Security Management Tool Tufin Support

The primary purpose of this request is to procure the Tufin Enterprise Suite. Tufin will support the Common Communications Gateway (CCG) and CSRIC/Cybersecurity teams in reviewing,analyzing, auditing, and implementing firewall policy changes. It will replace the FireMon Security Manager, streamlining policy management and change workflows.

The platform integrates with enforcement points—including firewalls, routers, cloud accounts, and SASE services—via API and CLI access to retrieve live configurations and routing data. This capability enables Tufin to generate an interactive, unified map that consolidates traffic flows, endpoints, and connectivity paths across hybrid environments.

Tufin provides comprehensive Security Policy Management capabilities, including change tracking, policy optimization and cleanup, device configuration compliance and audit, and network segmentation management. It enhances network visibility through detailed mapping, visualization, and path analysis to support efficient troubleshooting and operational insight. Additionally, Tufin integrates with ServiceNow to support ITSM change management processes.

This integration enables automation of key functions such as proactive risk assessment, change request verification, change design and path identification, and target selection, streamlining workflow efficiency and reducing manual intervention.