Today, Tufin has published the second Major Release of TOS in 2016. Therefore it's called 16-2. Please find some information about changes in this version below.
This version includes some improvements, e.g.:
- Optional configuration of the user interface without Adobe Flash components
- Enhanced syslog support, up to 150k syslogs per second
- Improvements regarding Distributed Architecture
Cloud:
- Provisioning of AWS Security Groups, policy changes to AWS and built-in risk analysis checks
- Unified Security Policy for AWS
Automation:
- End-to-End Automation support for FortiManager ADOM Policies in SecureChangen, incl. Risk Analysis, Designer, Provisioning, Server Decomissioning
- Configurable Designer Suggestions regarding objects selected
- REST API allows the change of ownership of a Closed Ticket is possible now
Security and Compliance:
- Find permissive Rules using the Rule Documentation feature to optimize policies
- Rest API allows to configure Flow Exceptions in a Unified Security Policy
Devices and Platforms:
- Fortinet:
Full support of FortiManager 5.4 using ADOM Policies - Palo Alto:
Support of Panorama 7.1 regarding Devices using Device Groups - Cisco:
Cisco CSM 4.8 and 4.9 are now certified to work with TOS - Cisco:
Cisco ASA 9.5 is now certified to work with TOS - Forcepoint:
Stonesoft 5.10 is certified to work with TOS
Changes regarding SecureTrack:
- Unitied Security Policy for AWS
- Analyzing and Optimization of Policies using Rule Permissiveness Level
- IPv6 Support for Stonesoft Devices, Definition of IPv6 Zones in Zone Manager is possible now
- Filtering of Cisco ASA passwords is possible (optional)
- Support of FortiManager 5.4 managing Devices using ADOM Policies
- Managing Devices using Device Groups in Palo Alto Panorama 7.1 is possible
- Using REST API allows to get matching rules for Unified Security Policy exceptions as well as to configure flow exceptions is the Unified Security Policy
Changes regarding SecureChange:
- Provisioning of AWS groups
- End-to-End Automation for FortiManager
- Configurable Designer Suggestions - Object Selection
- View of additional Palo Alto Network Fields
- IPv6 Support for Stonesoft Policies and for Risk Analysis in Unified Security Policies
Changes regarding SecureApp:
- View of additional Palo Alto Network Fields
- Support of FortiManager ADOMs
- IPv6 support allowing security compliance checks for violations to IPv6 Zones
Further improvements and corrections are included.
The latest version of the Tufin Orchestration Suite can be found at the Tufin Portal: https://portal.tufin.com
