Search results

Silos hurt security NetworkSecurity is the responsibility of both NetOps SecOps In this panel with Cisco, Conscia AlgoSec security experts, we’ll share how to bring the teams together Webinars Bridging NetOps and SecOps: An Experts’ Panel Silos hurt security. Your network and its security are not managed by just one team. It is the responsibility of both NetOps and SecOps, but these teams don’t always play well together. In this security experts’ panel, Doug Hurd from Cisco, Henrik Skovfoged from Conscia, Oren Amiram and Tsippi Dach from AlgoSec will share how you can bring NetOps and SecOps teams together with Cisco ACI, Cisco Secure Workload (formerly Cisco Tetration) and AlgoSec. Discover how NetOps and SecOps teams can: Bridge the NetOps/SecOps divide, improve communication, and break down the silos between network and security. Align network, security, and business application owners Improve the entire network security with Cisco Secure Workload and firewall management Automate tasks and gain network traffic visibility of networks and security controls for threat detection, analysis and response across Cisco ACI and the entire hybrid and multi-vendor network. March 16, 2021 Alex Hilton Chief Executive at Cloud Industry Forum (CIF) Tsippi Dach Director of marketing communications Relevant resources Cisco & AlgoSec achieving application-driven security across your hybrid network Keep Reading DevSecOps: Putting the Sec into the DevOps Keep Reading Choose a better way to manage your network Choose a better way to manage your network Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. WORLDLINE AUTOMATES SECURITY POLICY MANAGEMENT AND IMPROVES VISIBILITY OF NETWORK SECURITY DEVICE CONFIGURATIONS Organization Worldline Industry Financial Services Headquarters Belgium Download case study Share Customer
success stories "With AlgoSec, not only did we improve visibility of our security policy and device configurations, but we were also able to gain tremendous operational savings by automating many of these processes." Background Worldline is the European leader in the payments and transactional services industry. Worldline delivers new-generation services, enabling its customers to offer smooth and innovative solutions to the end consumer. A key actor for B2B2C industries, with over 40 years of experience, Worldline supports and contributes to the success of all businesses and administrative services in a perpetually evolving market. Worldline offers a unique and flexible business model built around a global and growing portfolio, thus enabling end-to-end support. Challenge Worldline’s network is secured with more than 20 firewalls and routers from vendors such as Check Point and Cisco. Even with over 30 employees in the security and networking group, the company was spending a lot of time manually performing security management tasks such as monitoring and tracking security policy changes, conducting risk analysis, validating network schemas, and preparing for PCI-DSS and SAS70 audits. Additionally, while Worldline had a documented process for implementing firewall changes, there was little visibility into what was actually occurring, and enforcing the process was not trivial. “Manually trying to maintain control of our firewall and router policies was complex because we lacked the proper visibility of the firewall configurations and all of the changes that were occurring,” said Massoud Kamran, Senior Security Consultant at Worldline. Solution Worldline selected the AlgoSec Security Management solution to automate security policy operations, streamline audit preparation and validate security changes that were being processed. “We chose AlgoSec over other options because the solution leverages the routing information and the topology of firewalls to give us the most reliable visibility into what’s going on with network traffic and the security policy,” said Kamran. Results AlgoSec provides Worldline with an intelligent solution that enables Kamran and his team to find and asses risky rules and easily clean up their rule bases. Inaddition, Worldline leverages information from AlgoSec’s reports to enhance their Security Information and Event Management solution.AlgoSec’s comprehensive reporting gives Worldline continuous visibility into the firewall change process as well as provides evidence for PCI audits. “WithAlgoSec, we’ve improved our visibility into the current infrastructure and reduced the time spent on compliance audits, configuration management and change monitoring,” said Kamran. “In particular, time spent preparing evidence for PCI and SAS70 audits has been cut significantly. Assuming on average we make 700 security policy changes per year, we now save many man hours just by following AlgoSec’s change process and ensuring that the changes don’t introduce any risk,” concluded Kamran. Schedule time with one of our experts

Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. BM&FBOVESPA Invests In Security Policy Management To Improve Operational Efficiencies Organization BM&FBOVESPA Industry Financial Services Headquarters Sao Paulo, Brazil Download case study Share Customer
success stories "AlgoSec helps us maintain a problem-free environment. And because of operational efficiencies, the product paid for itself within the first year. With AlgoSec, we can do more with less" Leading Latin American Stock Exchange Maintains a Secure, Compliant Trading Environment AlgoSec Business Impact • Recouped investment in AlgoSec within the first year• Reduce rule review project from 1 month to 1 day• Helps maintain a secure, compliant environment• Frees up staff to focus on other crucial security tasks Background Headquartered in Sao Paulo, Brazil, BM&FBOVESPA is the largest stock exchange in Latin America. BM&FBOVESPA has a diversified and integrated trading model offering a complete custody system. Trading takes place in an exclusively electronic environment. The Exchange enables customers to trade equities, to hedge and to execute arbitrage, investment diversification, allocation and the leveraging of positions. Challenge To keep its systems and transactions secure, BM&FBOVESPA utilizes firewalls from several vendors. In total these firewalls have about 40,000 firewall rules, with another 5,000 added annually. Even with two full-time employeesfocused on maintaining firewall rules, the steady addition of rules and objects created clutter and consumed the firewall appliances’ CPU and memory. Therefore, BM&FBOVESPA realized that an automated solution for firewall policy management was the natural next step in the maturity of its information security processes. “Manually managing our firewall policies was difficultand time consuming. We needed a solution that supported a variety of different firewall vendors and could integrate and manage all policies in an automated manner,” said Wellington Vita, Information Security Manager of BM&FBOVESPA. Solution Following a recommendation from Compugraf, one of BM&FBOVESPA’s key security partners, Vita and his team evaluated AlgoSec’s Security Management solution. The proof of concept clearly showed the value of the solution and the ease and speed with which it could be deployed. The ability to integrate and manage devices from multiple vendors and provide visibility across the entire network was also important in BM&FBOVESPA’s decision to select AlgoSec. Results BM&FBOVESPA uses AlgoSec on a daily basis to manage its firewall policies. “AlgoSec is a great product which helps us maintain the core of our environment -the firewall policy. With AlgoSec we can easily identify unused rules and objects, as well as rules that were not compliant with our information security policy.” noted Vita. “While using AlgoSec, we also discovered a new benefit. AlgoSec enables our information security architects to understand how information flows between firewalls, which helps them significantly with their information security projects.” The gains in efficiency and productivity have dramatically reduced the time consumed by firewall policy management. “Because of operational efficiencies AlgoSec paid for itself in the first year,” said Vita. In addition to cutting the time needed to perform ongoing policy management, the solution enabled BM&FBOVESPA to meet deadlines that would previously have been unachievable. “A month ago, we had to review our incoming internet access rules in two days — and did. Without AlgoSec, it would have taken us at least a month to accomplish this task,” added Vita.“AlgoSec helps us maintain a problem-free environment. And we have been able to move members of our team who previously handled these maintenance jobs onto other tasks, so we can do more with less. I recommend AlgoSec to other companies — it will help them improve their firewall policy management processes,” concluded Vita. Schedule time with one of our experts

Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. Nationwide Organization Nationwide Industry Financial Services Headquarters Columbus Ohio, USA Download case study Share Customer
success stories AlgoSec delivers an application-centric solution to meet the network security challenges of one of the top financial services firms in the US. To learn more, go to https://algosec.com/ Schedule time with one of our experts

Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. Arcon Maintains Security Across Diverse Customer Networks With AlgoSec Organization ARCON Industry Financial Services Headquarters Rio de Janeiro, Brazil Download case study Share Customer
success stories "Using AlgoSec is a double benefit to us because we can reduce the cost and number of errors in our daily operation and also expand our offerings to our customers" Global Managed Services Company Optimizes Firewall Policies and Reduces Risks AlgoSec Business Impact • Improve security and assure compliance of its customers • Deliver comprehensive reports • Reduce costs and misconfiguration errors • Expand offerings to Arcon’s customers Background Founded in 1995, Arcon is the leading MSSP in Brazil. The company operates facilities in Rio de Janeiro, Sao Paulo, Brasília, Flórida, Salvador and Belém, managing the networks of many of Brazil’s top 100 companies, including banks, retailers, manufacturers and telecom companies. Arcon protectsmore than 600,000 users across five continents and processes more than one billion transactions each day. In addition to strategic management of IT security, Arcon protects data, servers, workstations and mobile devices and helps customers identify and control access to their systems. The company also evaluates risks in applications and provides technology infrastructure to support its customers’ businesses. Challenge Arcon provides security services to hundreds of other companies, including major retailers and banks, which require the tools that enable it to rapidly identify compliance issues and assess risks associated with network configurations. It must also be able to determine how to best optimize customers’ security policies and track changes made to firewall rules. With so many customers and service level agreements that require near immediate responses, Arcon needed visibility across the networks it manages and into reports allowing them to quickly find and fix issues and to counsel customers on changes that would improve their systems’ security. Solution Flavio Carvalho, the Security Management Services Director at Arcon, was charged with maintaining security across its own network, as well as diverse customers’ networks. Carvalho and his team selected the AlgoSec Security Management solution. “The combination of ease-of-use and the value add of AlgoSec’s reports, the ability to manage different technologies from multiple vendors, the cost per device managed, and the visibility across customer’s networks were key for us,” comments Carvalho.The quality of the AlgoSec’s reports clinched the deal. “With AlgoSec, we can quickly and easily provide PCI compliance reports to our customers, including banks and large retail stores. The excellent quality of the reports adds value to the services we manage for them,” says Carvalho. Results Arcon’s clients expect regular updates on the security of their networks — including recommendations for policy optimization, risk mitigation strategies, compliance verification and the impact of rule changes. “It would be impossible for us to deliver all of these in monthly reports without AlgoSec,” Carvalho notes. We have a big retail customer with SLAs of just one hour. “With AlgoSec we have been able to meet these SLAs much more easily than before. A report that previously took a day to generate can now be completed in a few minutes at the click of a button,” Carvalho notes.Shortly after implementation, Arcon’s experience with one large bank customer validated their decision to use AlgoSec — and made their customer very happy. “Our customer was under pressure because of high CPU utilization in their main firewall cluster,” explains Carvalho. “They needed us to investigate what was going on and to solve the issue as quickly and cost-effectively as possible. Using AlgoSec, we were able to easily identify a series of duplicate and poorly-written rules that were causing the trouble, and we solved the problem at no cost to the customer.”“Using AlgoSec is a double benefit to us because we can reduce the cost and number of errors in our daily operations and also expand our offerings to our customers,” adds Carvalho. “It’s easy to work with AlgoSec, as we have a direct contact and an excellent AlgoSec support team, which is always available to help us when necessary” concludes Carvalho. Schedule time with one of our experts

Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. PORSCHE INFORMATIK SIMPLIFIES NETWORK OPERATIONS AND STRENGTHENS SECURITY Organization PORSCHE Industry Retail & Manufacturing Headquarters Austria Download case study Share Customer
success stories "We quickly saw a clear return on our investment with AlgoSec. It enabled us to significantly increase the efficiency of our firewall operations team without increasing head count. With AlgoSec, We can focus on what is most important to Porsche Informatik: our customers" Leading European Automobile Trading Enterprise Increases Security, Ensures Compliance, Optimizes Firewall Operations and Streamlines Productivity AlgoSec Business Impact • Increase IT productivity without adding headcount• Reduce time and resources required to implement firewall policy changes• Improve IT Governance and accountability over the network security policy• Improve security posture and gain visibility into the impact of proposed changes Background Porsche Informatik GmbH, a subsidiary of Porsche Holding, is one of the biggest private trading enterprises in Austria and the most successful automobile trade companies in Europe. The Company provides integrated software solutions for the automobile sector serving importers, retailers and financial service providers in over 21 countries. With its multi-vendor, multi-firewall infrastructure consisting of various Check Point clusters and firewalls, Porsche Informatik has been supporting some of the most successful automobile brands in the world including Volkswagen, Audi, Porsche, Seat and Skoda. Challenge As an enterprise serving the leading automobile brands, Porsche Informatik is committed to ensuring the integrity of its network and maintaining compliance with corporate security policies. Optimizing its operations is another top priority. With a large number of firewalls undergoing continuous rule changes, Porsche Informatik’s team had to manually confirm that all of the changes were correctly configured and adhered to corporate policy. To do this, Porsche Informatik needed to keep track of changes: when they were made, who made them and verify that they weren’t introducing clutter and subsequent risk into their environment. “As the rule base continued to grow, it became increasingly complex and harder to keep track of the details,” says Anton Spitzer, Infrastructure Services Manager at Porsche Informatik. “Monitoring and auditing of our firewalls and clusters has become a painstaking manual, time and labor intensive process and we needed to handle it more effectively.” Porsche Informatik looked for a solution that would allow them to automatically and comprehensively manage the entire change lifecycle of their heterogeneous firewall infrastructure to improve and optimize operations, bolster security and comply with the corporate security policy in an easier way. Solution Porsche Informatik selected the AlgoSec Security Management solution to provide automated, comprehensive firewall operations and security risk management.In particular, Porsche Informatik liked AlgoSec’s auditing capability as it tracks changes in real-time as well as provides analysis of the operational and security implications of those changes. Results With AlgoSec, Porsche Informatik can now intelligently automate manual, labor and time intensive tasks, optimize firewall operations and improve network security while enforcing corporate policies to provide improved IT Governance.“AlgoSec allows our team to quickly and easily understand the operational and security impact of rule changes on our corporate policy, while at the same time provides a detailed audit trail, which is crucial for us to maintain compliance,” says Spitzer. From an operations and risk perspective, AlgoSec enables Porsche Informatik to instantly know which rules and objects are obsolete, invalid and duplicate and where potential security holes exist. The ability to clean up the firewall policy has streamlined network operations and given Porsche Informatik better visibility into their firewall infrastructure. “We cleaned up our existing policy base and now utilize the “what if” analysis to prevent the introduction of clutter and risk into our environment,” explains Spitzer.Ultimately, with AlgoSec, Porsche Informatik can now easily determine the necessity of changes and their potential security implications which saves time and effort. As a result productivity has increased without adding headcount. “After several months of use, AlgoSec has made a quantifiable impact on our firewall operations and security risk management. We know exactly what changes are being made, by whom and the implications of those changes on our operations and security posture,” said Spitzer. “We now spend much less time analyzing and auditing our firewalls, allowing our IT personnel to work on additional projects. As a customer-centric company, optimized internal operations directly benefits our clients by allowing Porsche Informatik to focus wholly on their needs instead of on firewall management.” Schedule time with one of our experts

Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. VERIZON HELPS CLIENTS IMPROVE SECURITY AND BUSINESS AGILITY USING ALGOSEC Organization Verizon Industry Telecom Headquarters NJ, USA Download case study Share Customer
success stories "I selected AlgoSec’s Security Management Solution because the reporting is very trustworthy, it helps reduce the operational workload for network security administrators, and ultimately it improves performance and security." AlgoSec Business Impact Reduce the workload for the operations team and improve efficiency Provide comprehensive trustworthy reporting on change management Improve overall network performance and security Background Verizon is one of the world’s largest global communications companies and an international technology innovator. Verizon provides products and services related to networks, cloud, machine to machine and mobile technologies; data, hosting and storage; and managed security, as well as other wired and wireless offerings to business and government clients around the world. The company’s Global IP Network connects people and businesses in 2,700 cities and 150 countries. Challenge Verizon’s professional services consultants find that their clients too often focus on compliance to the detriment of security and operational issues. “From an auditing perspective, if the firewall is up and running some clients think they are more or less okay,” says Stefano Ciminelli, EMEA Practice Manager, Business Resiliency & Optimization at Verizon Business. Ciminelli warns that clients also need to be certain that “the firewall policies do not contain mistakes—those that could bring down their business. It’s not just a problem of protecting the IT systems, it’s really a matter of protecting the business,” he notes. Firewall management can also create tension between the network security group and business managers. “You always have the network security people focused on IT and the business people who like to focus on change management. Often these two groups don’t really communicate or understand each other easily,” Ciminelli adds.Moreover, many companies have several people devoted to managing firewalls and “firefighting,” “because they simply do not have the right tools,” says Ciminelli. Solution Ciminelli and his team at Verizon wanted to provide their clients with a way to address IT and security issues and, at the same time, automate change management workflows in order to support business continuity.“You want to be operationally efficient; you want to be secure; and especially, you want to help your business do their business. But, when it comes to network firewall management and analysis, you actually have few tools available that help you meet all those goals,” says Ciminelli. From the security manager’s perspective, AlgoSec’s Security Management Solution was the top choice. “The reporting is very trustworthy, it helps reduce the operational workload for network security administrators, and ultimately it improves performance and security,” Ciminelli states. “You can find a lot of vendors for security products in the market. But I don’t want to just sell products. I am entrusted to recommend quality services, so I rely on an extremely trustworthy partner like AlgoSec.” Results Ciminelli reports that when his customers invest in AlgoSec, “they are very happy because they can proactively manage their firewalls.” More importantly, though, “they are not forced to change a rule, close their eyes, cross their fingers and hope that everything is going to be okay.” Customers can trust AlgoSec’s reports to show how a rule change will affect access and their overall security before a change is made, and that there will be no surprises after the fact. The ability to share information between IT and business managers has also provided some unexpected benefits for Ciminelli. “When it comes to asking for additional budget, for instance, IT can now prove value and that makes life easier for everybody,” he notes. Customer service ranks high in Ciminelli’s priorities—and AlgoSec consistently delivers. “Whenever I have a problem I always get very efficient and proactive technical support from the AlgoSec team. This is one of the primary reasons I continue to advise my customers to purchase AlgoSec,” he says. Ciminelli urges his clients and other companies to think broadly about the real purpose of firewall policy management. “What you want is not just a well configured firewall, you want good long-term security management.” The goal is to have a firewall that provides excellent protection as the company grows, needs change, and applications are deployed, changed or decommissioned. Ciminelli’s final recommendation? “Using AlgoSec products and relying on good professional services to help you, that is really the smart choice.” Schedule time with one of our experts

Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. TECHCOMBANK SAVES TIME AND RESOURCES WITH SIMPLIFIED FIREWALL POLICY MANAGEMENT Organization Techcombank Industry Financial Services Headquarters Hanoi, Vietnam Download case study Share Customer
success stories "AlgoSec enables us to identify ways to consolidate and optimize rules and perform deep risk analysis and automate workflows in ways that other products cannot match" Background Techcombank is one of the largest joint stock commercial banks in Vietnam. With more than 300 branches and 7,000 staff, Techcombank provides deposit products, loans, leasing, cash management and other services to more than 3.3 million individual customers and 45,000 corporate clients. Challenge Tens of firewall devices and hundreds of routers and switches protect the financial data of Techcombank’s customers, as well as the operations of hundreds of branches throughout Vietnam. As a bank, all security policies and firewall configurations must comply with PCI-DSS and ISO27001 standards. Ensuring compliance, however, created ongoing headaches for the IT security team. “With equipment from many different vendors, even simple policy audits were challenging tasks,” says Mr. Van Anh Tuan, CSO of Techcombank. “As a result of the diversity of products and lack of visibility, it was difficult for us to monitor changes to rule configurations in real time in order to maintain internal security compliance as well as PCI compliance.” “Cleaning up and fine tuning firewall policies was a particularly complex process, which made it difficult to respond quickly to the changing needs of our business applications,” adds Mr. Tuan. “We wanted a way to optimize and consolidate rules across all of our firewalls, regardless of manufacturer, and completely automate the end-to-end workflow for firewall rule change management.” In addition, Techcombank sought a solution that would simplify the process of conducting risk analysis, evaluating PCI compliance and identifying the necessary steps for remediation. Solution Following an in-depth competitive evaluation, Techcombank selected AlgoSec’s Security Management solution. “AlgoSec met many of our key requirements, better than its competitors in our evaluation,” Mr. Tuan notes. Techcombank particularly liked AlgoSec’s superior security policy analysis and ability to make actionable recommendations with a high level of accuracy. “AlgoSec will enable us to identify ways to consolidate and optimize rules, perform deep risk analysis, automate workflows and ensure compliance in ways that other products cannot match,” says Mr. Tuan. Techcombank’s IT team wants to be able to quickly identify security policy risks and see what specific steps they need to take for remediation. The bank uses AlgoSec to identify overly permissive firewall rules based on actual use as well as duplicate, unused and expired rules and objects. This information gives Techcombank the data they need to close off potential access points and help prevent attacks. AlgoSec also provides clear, detailed recommendations on how to best reorder rules for optimal firewall performance. In addition, AlgoSec validates firewall policy and rules against regulations such as PCI, as well as industry best practices and customized corporate policies to uncover and prioritize risks and track trends over time. For Mr. Tuan, one of the most valuable benefits of AlgoSec is the increased visibility into security policies across the full range of devices. “Now we can easily monitor our firewall operations and quickly detect any mistakes or non-compliant changes made. These operations used to be invisible to me.” Mr. Tuan comments. The AlgoSec deployment process went very smoothly for Techcombank. “Our team received training from AlgoSec and their partners here in Vietnam and we were fully utilizing the product almost immediately. Post-implementation support has addressed every issue quickly and enabled us to take advantage of all aspects of the product in order to optimize our firewall rules and improve our security posture even faster than we anticipated,” Mr. Tuan adds. Since implementation, AlgoSec has enabled Techcombank’s IT team to “greatly reduce our time and resources when complying with internal policies and PCI standards, and when monitoring changes in rules,” says Mr. Tuan. “We are very happy with the improved security and visibility provided by AlgoSec and will continue to use and exploit more AlgoSec features and add licenses,” he concluded. Schedule time with one of our experts

Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. Natura Cosméticos Improves Security Change Management with AlgoSec Organization Natura Cosméticos Industry Healthcare & Pharmaceuticals Headquarters Brazil Download case study Share Customer
success stories "With AlgoSec we are proactive. Now we can see all the changes and reduce the risks we have regarding requirements for SOX as well as maintain all the policies for information security" International Cosmetics Company Gains Visibility, Reduces Risk and Ensures Compliance with SOX AlgoSec Business Impact Deliver proactive security policy management Gain immediate visibility into all security policy changes Reduce risks and ensure compliance with SOX Background Natura Cosméticos is the largest cosmetics manufacturer and distributor in Latin America, with more than 1.5 million independent consultants and 100 million customers. Founded in 1969, the company is based in Brazil, where almost two-thirds of households buy its products. At $7.5 billion in revenues, Natura is a Forbes Global 2000 company and ranked #75 on the magazine’s most innovative companies list in 2014. Challenge Natura has offices throughout Brazil and operations throughout Latin America and France supported by two data centers, 33 firewalls, 18 clusters and 250 switches and routers. For years, a third party managed the company’s firewall rule changes, making visibility and management challenging.“If a change was made over the weekend, it would be difficult for us to find out what rules were changed, for what reason, who created them or why,” says Newton Rossetto, Chief Security Officer, Natura Cosméticos.“We’d find some firewall rules in the wrong places and unused rules,” adds Rossetto, but changing them was no simple matter. “Users had to create a worksheet with their requirements for our environment and then they would be implemented by a third party. After the rule was created, we then needed to check that it was right.” Natura needed a streamlined system for making and tracking security changes that gave IT better visibility across the company’s complex security environment. Solution Natura recognized that it had a “really confusing change management process,” Rossetto states. The company chose the AlgoSec Security Management Solution to manage and streamline the process. Results After a “simple and quick deployment,” according to Rossetto, AlgoSec enabled Natura to quickly “consolidate security policy management for our environment.” AlgoSec provides detailed online reports for each step of the change workflow and enables Rossetto’s team to manage security policy changes for multiple security devices on one common platform.“Now I can see all of the reports I need at any time. I can also see which rules were created and what objects are no longer needed,” says Rossetto. This visibility has allowed Natura to take a proactive role in security policy management which had been impossible when changes were previously outsourced to a third party. For a company growing at 14 percent each year, particularly one that does the majority of its sales and workforce management online, having complete visibility into the security rule-change process brings real peace of mind.For the Natura team, AlgoSec’s preset workflows for implementing and removing rules, changing objects and verifying rules, combined with its flexibility to accommodate the company’s specific needs, held great appeal. In addition, users liked the pre-populated request templates that saved them time compared to the old worksheets, as well as simplified communication with the security team. “With AlgoSec, the change management process is all automatic. We can approve the changes and know we will have the right rules with the right objects,” says Rossetto.AlgoSec also helped Natura’s security team reduce risks associated with Sarbanes-Oxley (SOX) requirements. AlgoSec evaluates every proposed change against regulatory standards, such as SOX, as well as industry best practices and corporate-specific policies. Any change found to be out of compliance is flagged before it can be implemented.In terms of customer service, as well as implementation, Rossetto states that working with AlgoSec has “been a very good experience. We have been very well supported from negotiation through successful deployment. We are very satisfied.” Schedule time with one of our experts

Security policy automation is the process of automating certain cybersecurity tasks like threat detection (ransomware, malware, security... Firewall Policy Management What is Network Security Policy Automation? Tsippi Dach 2 min read Tsippi Dach Short bio about author here Lorem ipsum dolor sit amet consectetur. Vitae donec tincidunt elementum quam laoreet duis sit enim. Duis mattis velit sit leo diam. Tags Share this article 8/9/23 Published Security policy automation is the process of automating certain cybersecurity tasks like threat detection (ransomware, malware, security rules, network changes), investigation, and remediation. Automating such practices reflects in the policy that governs them. Thus, security policy automation is the process of automating network security controls using a programmatic solution. In present-day security operation centers (SOCs), NSPM solutions can facilitate automation. These work by identifying vulnerabilities, threats, and attack surfaces in the security posture, assessing them, prioritizing them, responding to them in order through pre-defined actions, and streamlining the process for the security executives. So, automation doesn’t mean everything from end to end is automated. Some human intervention may be necessary, at least at the higher decision-making level. Benefits of network security policy automation Automation in security policy has several benefits for an organization. Thus, it’s not hard to see why companies are pumping money into network security automation solutions . Some of the proven benefits are: Automate manual tasks in cybersecurity The primary benefit of any automation practice is to reduce manual labor. Connectivity security automation frees up resources from many redundant manual tasks, which you can then deploy elsewhere. This automation yields several other benefits that make automation irresistible for companies. Bring down false positive alerts False positive alerts or alarms are those instances where the cloud security system gets triggered because of a false threat, like firewall rules . In other words, the management platform perceives certain actions to be threatening, which actually are harmless. This consumes unnecessary resources. IT teams can prevent such real-time false alerts by making use of regulatory automation. Automation tools can detect and verify such alarms and take pre-defined actions should the alerts be false. Consider it a second check before raising the issue at a higher level. Reduce downtime Downtime is one of the pressing issues in IT departments. A study by Gartner penned the average cost of downtime at $5,600 per minute for certain businesses. When the system detects a threat, it typically shuts down certain network segments (like web services, routers, and so on). This can result in downtime. Some downtimes might be unavoidable, but those arising from false positive alerts certainly are. Thus, network security policy automation helps in that regard too. Reduce headcount There’s a shortage of talent in the cybersecurity And often, competent men and women demand sky-high salaries. So, from an economic standpoint, using automation to counter the lack of talent makes sense. With automation, you can divert human resources to other productive tasks. Make compliance easier Compliance is critical for businesses, especially in critical insurance, medical, and legal sectors. Up-to-date infrastructure comprising of Cisco, AWS, Tufin , and other reputed companies with the latest cybersecurity measures is one of the prerequisites laid out by most regulators. Network security policy automation can help update the infrastructure to the latest standards. This, in turn, helps the business stay compliant. Why is automation still a challenge in network security? Despite all its promises and proven benefits, many companies are reluctant to invest in security automation And the reason is it’s challenging to do so. Automation is hard because management itself is hard. You can’t automate something you can’t fully manage properly. E mployees, teams, and projects change, as do the access control Because of such a dynamic environment, automation is still challenging. Another reason is teams tend to work in silos. Multiple stakeholders are involved, including the customers, who must understand and accept the changes. Automation in such instances, known as Deploy and Configure, remains a challenge. But despite the challenges, there are ways to automate multi-vendor on-premises network security Even if you successfully automate some aspects of the policy, it’d be a huge time and resource saver. How to automate network security policy management? Cloud-based security policy automation has been around for quite some time. It has received upgrades over time and has gotten better. Let’s look at present-day automation practices, change processes, and troubleshooting tips. Review the current policy You can’t start from scratch, especially if you have an existing network security policy . The best approach is to start automation from where you are. This way, your security teams do not need to make drastic changes, which may put your network in a more vulnerable state. So as a first step, review your existing cloud environments policy and establish needs. Post that, formulate a plan on which things you can automate and which require manual intervention. Start with things that can be automated. If starting from starch, you must create a security policy first. So, hire cybersecurity experts from AlgoSec to formulate and optimize a policy for your organization’s hybrid network. You can also use Prevasio CNAPP to manage the multi-cloud security You might also want to conduct a webinar if important stakeholders work remotely. The idea is to bring everyone on the same page. Select the type of security automation tools There are three types of hybrid environment security automation tools to choose from. These are no-code, low-code, and full-code automation. The type of automation you select will impact your security policy changes . Pricing of each tool will also play an important role. No-code security automation is the newest type. As the name suggests, such tools do not require coding to automate network security . There are several use cases and pre-made workflows that you can use right off the bat. These are much easier to manage but don’t grant you complete control over the policy. You can have several automation tools within low-code tools like some-code or more-code. Most businesses prefer these security tools since they offer a balance of user-friendliness and robust coding capabilities. You can change and apply the pre-defined use cases to your company’s security policy. Finally, you have full-code automation AlgoBot , for instance, is an intelligent chatbot for handling network security policy management tasks. These are legacy security orchestration, automation, and response (SOAR) platforms. A high level of coding work is necessary to work with these full-code firewall management tools, which poses a high barrier to entry. But the upside is you get full control over the policy. Adopt zero-touch change management Truth be told, you can’t automate 100% of the security policy. Skilled personnel will still be needed to look over everything. However, for those manual tasks, you need speed while still upholding the security principles. How do you balance both? With zero-touch change management. Zero-touch orchestration is an alternative to semi-automated security processes. Vulnerability management accelerates change requests, reducing the time it takes to implement requests to minutes. Despite the speed advantage, zero-touch orchestration has flaws. For example, it accepts the requests as-is and doesn’t check their validities. This can result in misconfiguration. For security risk mitigation , you can embed conditional logic into the orchestration and leverage security and speed. This form of automation will ensure none of the process steps are missed in the lifecycle. FireFlow provides automated security policy management, helping you confidently automate security policy change process. Establish priorities Deploying automation tools is one part done. The next part is adopting the best practices and organizing your team. One of the best practices of policy automation is to establish priorities. Finding the DevOps issues that are more critical to your security needs is imperative. Then place them higher for the team to address them. This requires you to look at your overall network posture (which you have done in the first step). Once you’ve established clear priorities, you should define the use cases and implement workflow automation. Train team members Last, to ensure continuous compliance, you must upskill your team members to grasp the implemented changes. The transition from manual to automated will be challenging for employees too. Make them understand why it’s being done and what they’re supposed to do. This is done through a combination of courses and practical knowledge. Besides the knowledge, they should also clarify where the machine’s capabilities end and human responsibility begins. Once automated, it will take some time for the team to get familiarized with it. For the best results, automate the workflow in batches and not the entire network at once. Develop the playbook along the way and get everyone on the same page. Once you get a tempo, invest in third-party tools and vendors to speed up the automation What’s next? Network security policy automation makes compliance easier, reduces downtime, and automates manual tasks in cybersecurity. However, automation still means having the right tools and professionals within reach. If you are looking forward to automating network security policy automation and getting the right guidance, we are here. Contact us today to learn more. Schedule a demo Related Articles 2025 in review: What innovations and milestones defined AlgoSec’s transformative year in 2025? AlgoSec Reviews Mar 19, 2023 · 2 min read Navigating Compliance in the Cloud AlgoSec Cloud Mar 19, 2023 · 2 min read 5 Multi-Cloud Environments Cloud Security Mar 19, 2023 · 2 min read Speak to one of our experts Speak to one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Schedule a call

Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. Orange Cyberdefense Furnishes Application Delivery and Network Automation Organization Orange Cyberdefense Industry Retail & Manufacturing Headquarters Multinational Download case study Share Customer
success stories "We cut the time it takes to implement firewall rules by at least 50%" Application owners for global retail chain get faster response times with application visibility and automated deployment. Orange Cyberdefense is the expert cybersecurity business unit of the Orange Group, providing managed security, managed threat detection & response services to organizations around the globe. They embed security into Orange Business Services solutions with more than 250 security researchers and analysts and 16 SOCs distributed around the world supporting customers in over 160 countries. The Challenge Orange Cyberdefense is an on-site consultant for a large retail chain with hundreds of stores and hundreds of thousands of employees spread out across the world.The client has over 2,500 multi-vendor firewalls and Layer 3 devices in their global data centers. They also run hundreds of mission-critical business services. Business services include supply chain management and ERP systems, global eCommerce operations, financial management systems, and much more. As a result, they had to cope with hundreds of change requests daily.Some of the challenges included: Lack of centralized management – Multiple vendors’ firewalls are deployed, which were implemented by multiple third-party vendors. There was no validation that rules were consistently applied across multiple vendor’s management consoles. Commissioning and decommissioning devices – A mix of multi-vendor new and legacy devices run in the data center and maintaining consistency across multiple vendors and multiple versions of devices was difficult. Lack of automation – Firewall communication and traffic flows were described in Excel sheets and needed to be manually updated whenever there was a change. Slow execution of change requests – Implementing firewall changes took over a week. Poorly implemented rules – The rules did not reflect what the requester asked for. They either allowed too much traffic in or were too narrow, not allowing the required traffic and thus needed to be re-implemented. The Solution The client searched for a solution that provided: Faster implementation of firewall changes. Comprehensive firewall support for a globally dispersed multi-vendor, hybrid estate. Automation of security policy change management and documentation of security policy changes. Visibility into their business applications and traffic flows. They implemented the AlgoSec Security Policy Management Solution, made up of AlgoSec Firewall Analyzer, AlgoSec FireFlow, and AlgoSec AppViz and AppChange (formerly AlgoSec BusinessFlow). AlgoSec Firewall Analyzer analyzes complex network security policies across on-premise, cloud, and hybrid networks. It automates and simplifies security operations, including troubleshooting, auditing and risk analysis. Using Firewall Analyzer, the client can optimize the configuration of firewalls, and network infrastructure to ensure security and compliance. AlgoSec FireFlow enables security staff to automate the entire security policy change process from design and submission to proactive risk analysis, implementation, validation, and auditing. Its intelligent, automated workflows save time and improve security by eliminating manual errors and reducing risk. AlgoSec AppViz and AppChange (formerly AlgoSec BusinessFlow) discover, identify, and map business applications, providing critical security information regarding the firewalls and firewall rules supporting each connectivity flow. With AlgoSec AppChange, changes can be made at the business application level, including application migrations, server deployment, and decommissioning projects. The Results Some of the ways the client benefits from using AlgoSec include: Greater transparency by providing a single source of truth that took into consideration the entire network estate. 50% reduction in the time needed to implement firewall rules. More communication between network security/IT staff and business application owners who are now able to submit change requests in business language and easily describe their needs, thus reducing misconfigurations and potential breaches. Better compliance reporting – with both an easy API integration and also audit-ready compliance reports. Automated change management – network changes are now recorded while being made – not managed with Excel. By using AlgoSec, application owners have more visibility into the network and are better able to trace what has changed within their business applications. “Documentation is several hundred percent better this way,” said Hans Broomé, Network and Security Consultant at Orange Cyberdefense. “With many different versions of the services, by using AlgoSec the IT team is confident that they are making changes to the correct version.” There were even unexpected gains, such as improved security management procedures. Change requests became more accurate as they gained visibility into the network and made the change request process more systematic and transparent. Requesters, as well as stakeholders such as their managers, have full visibility of their change request’s status and can verify that the request works as intended. Orange Cyberdefense is also impressed with the dedicated attention they receive from AlgoSec. AlgoSec’s support team is familiar with the global organization and provides dedicated attention tailored to their exact needs. They stay up to date with the AlgoSec solution’s latest capabilities, and the technical team maximizes their use of it thanks to an extensive training library. “The best is yet to come,” concluded Broomé. Schedule time with one of our experts

Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. Atruvia (formerly Fiducia IT AG) Reduces Security Risks For Banks With Algosec Organization Atruvia Industry Technology Headquarters Karlsruhe, Deutschland Download case study Share Customer
success stories "AlgoSec’s Security Management Solution is incredibly powerful. Its intelligent process improvements have directly translated into the highest level of security and compliance for our customers’ networks" Background With over 45 years’ experience in the banking sector, Atruvia ( formerly Fiducia IT AG) is one of the top ten IT providers in Germany. Today, Atruvia manages the IT networks of nearly 1,100 banks, constituting more than 100,000 PC workstations, 6,600 servers and 25,000 self-service banking terminals. Responsible for ensuring the smooth and secure processing of more than 16 billion transactions per year for its customers, Atruvia’s risk mitigation and regulatory compliance strategies are of utmost importance. Challenge To protect its customer networks, Atruvia implemented a number of security solutions, including 60 Check Point and 20 Juniper firewall clusters. However, managing multiple firewalls in a multi-vendor environment proved challenging. “Performing vulnerability assessments for such a large and complex firewall environment was extremely time-consuming, labor-intensive and prone to human error,” says Lutz Bleyer, Atruvia’s Chief Information Security Officer. With multiple stakeholders at each of its client organizations, Atruvia required a structured change management process to prevent firewall policies from growing unmanageable and creating security risks. “We needed a proven firewall management and workflow solution to eliminate potential security risks while providing us with complete visibility into our customer networks, anytime, anywhere,” says Bleyer. Solution After an in-depth analysis, Atruvia chose the AlgoSec Security Management Solution to optimize its security, compliance and change management processes. “AlgoSec provided the most comprehensive, intelligent automation solution for our firewall operations, helping us increase efficiency while improving risk mitigation and compliance,” says Bleyer. Results AlgoSec’s topology-aware technology provides Atruvia with complete visibility into the security landscape of its customers’ networks. “AlgoSec’s in-depth visibility enables us to easily create a hierarchy profile and establish a competency baseline of operations for each networks’ firewalls, even when multiple vendor technologies are involved,” says Bleyer. Atruvia’s security consultants and auditors are now closely aligned with their customers’ IT teams, regardless of their location. “The level of visibility AlgoSec provides across our customers’ security networks, and the ability to perform coordinated tasks remotely with them, enables us to work hand-in-hand as a joint team,” says Bleyer. Atruvia also uses AlgoSec to automate policy change management across customers’ firewall environments, enabling the company to eliminate manual and inefficient processes associated with the security policy change lifecycle, save time and reduce the potential for human error. “AlgoSec has fundamentally changed how we manage sophisticated, multi-device, multi-vendor firewall environments. By automating our workflows, we’ve eliminated unnecessary policy changes and reduced the time required to process changes by half,” explains Bleyer. “Thanks to AlgoSec’s intelligent automation, we’ve gained valuable optimization capabilities enabling our teams to operate smarter and faster.” Another important AlgoSec feature is its automatic assessment and reporting capabilities, which help Atruvia ensure that it remains in continuous compliance with corporate governance rules and adheres to regulatory standards, including ISO 27001, ISO 27002 and Sarbanes-Oxley (SOX). Data and network security, particularly within the financial sector, requires incredible focus on risk management and mitigation. “With AlgoSec we can now analyze every change and its impact on the network before it is live, and focus on risk mitigation rather than crisis management.” In summary, Bleyer commented, “Not only does AlgoSec more than measure up from a technology perspective, but the integrity of the company and its employees has surpassed our expectations and raised the bar for what we look for in other partners.” Schedule time with one of our experts