Site Usage Monitoring

Tufin automatically collects site usage data on devices and SecureApp applications from customers who use the tiered licensing model in order to allow better monitoring of license consumption. The Site usage report can be downloaded from the customer portal (My Account > Available Licenses) as an Excel file.

The site usage is not enforced by TOS. The information is sent as reports to Tufin. Tufin performs periodic audits based on these reports.

Site usage information is only collected from production environments, and not lab environments. When restoring TOS to a new or changed environment, TOS assumes that the machine is intended for lab purposes. such as testing or debugging, and operates in 'lab mode'. In 'lab mode' TOS automatically shuts down after 30 days. If you are restoring TOS to a new or changed production environment, make sure to reinstall the license to enable TOS to collect site usage information from that machine.

Send Reports Automatically

By default, site usage reports are generated and stored in TOS every 24 hours. When a user logs into TOS Aurora, all unsent site usage reports are sent to Tufin. These reports are encrypted, and include all site usage data collected from the site, such as the number of monitored devices and SecureApp Applications.

Once the report is received successfully by Tufin, an acknowledgment message with the most recent date a report was received will be displayed in the License Management page.

The automatic site usage report mechanism is implemented through JavaScript that runs on the end-user's browser. The JavaScript interacts with TOS to get the site usage data and forwards it as an encrypted report to a Tufin owned service running on the sub-domain: aus.tufin.com. This sub-domain needs to be accessible from the browsers of TOS end-users. aus.tufin.com is configured to receive the license usage report only and cannot be displayed in the browser. If the browsers' network access is monitored by security tools, you may have to prevent them from triggering security alerts when access to this sub-domain is detected.

Disable Automatic Sending of Site Usage Reports

If you disable automatic sending of Site Usage reports, no information will be collected, and the Site Usage report in the customer portal will be empty.

  1. Go to Admin > Licenses.

  2. In the License Usage section > Send Automatic Usage Reports, select Off.