Tufin Software Technologies Ltd.

Tomer Barkan

Reuven Harrison

Amir Cogan

Michael Hamelin

There are provided network analyzer and method of analyzing connectivity between a source and a destination. The method comprises: upon obtaining a partial topological network model comprising at least one cloud, generating the one or more paths between the source and the destination, specifying the cloud as a source point of the one or more paths if at least one source network address belongs to the cloud address space and specifying the cloud as a destination point of the one or more paths between the source and the destination if at least one destination network address belongs to the cloud address space. The method further comprises discovering at least one on-path cloud, the method further comprising specifying, by the processor, the at least discovered on-path cloud as a router configured to route the cloud traffic in accordance with predefined rules.

Method of network connectivity analyses and system thereof

There are provided a method of automated managing one or more security rule-sets and a system thereof. The method comprising: obtaining data characterizing a connectivity request and an amended rule-set, the amended rule-set being derivative of an initial rule-set amended to fit the connectivity request; automated verifying each possible combination of values in the connectivity request against the initial rule-set and the amended rule-set; calculating one or more values selected from a group comprising values characterizing relative amount of extra allowed traffic and values characterizing relative amount of dissatisfied requested traffic; automated comparing the calculated values and/or derivatives thereof with a predefined threshold; and automated classifying the amended rule-set as applicable for implementation if the results of the automated comparing match a predefined verification criterion.

Method and system for management of security rule set

There are provided a method of automated managing two or more security rule-sets and a system thereof. The method comprises: obtaining data characterizing a first rule-set and a second rule-set; automated recognizing all possible combinations of values in the first and the second rule-sets; automated verifying each combination of values in the second rule-set against the first rule-set; calculating one or more values characterizing the differences in allowable and rejectable traffic in the first rule-set and the second rule-set; automated comparing the calculated values and/or derivatives thereof with a predefined threshold; and automated classifying the relationship between the first rule-set and the second rule-set in accordance with comparison results. The method may further comprise obtaining a connectivity request; automated verifying each combination of values in the connectivity request against the first rule-set and the second rule-set; and automated classifying the second rule-set with regard to the connectivity request, wherein the second rule-set comprises extra allowable traffic resulting from amending the first rule set.

Growing community of inventors

Alfei Menashe, Israel

Tomer Barkan