Currently my client is using R77.30 (one SMC and 2 Gateways) and have a few very permissive policy rules. So he is looking to create more restrictive policy rules. The idea is to see all the traffic in real time and then create new rules only for the legitimate traffic .
To do so, I am looking to install Tufin to inspect the traffic and then generate new more restrective policy with the "tufin automatic policy generator"
As I see that R80 gives the ability to monitor and inspect trafic, so I am thinking about upgrading the SMC and gateways of my customer and use this features.
So do you really think there is a solution for my problem with the R80 without using TUFIN?
Thank you for your help.