Tufin Orchestration Suite Reviews

Name: Tufin Orchestration Suite
Brand: Tufin
Rating: 4 (181 reviews)

Vendor: Tufin

4.0 out of 5

181 reviews
91% willing to recommend

1,955 followers

Post review

What is Tufin Orchestration Suite?

Tufin enables organizations to automate their security policy visibility, risk management, provisioning and compliance across their multi-vendor, hybrid environment. Customers gain visibility and control across their network, ensure continuous compliance with security standards and embed security enforcement into workflows and development pipelines.

Get the Tufin Orchestration Suite Buyer's Guide and find out what your peers are saying about Tufin Orchestration Suite, Wiz, Prisma Cloud by Palo Alto Networks and more!

Tufin Orchestration Suite is the #2 ranked solution in top Firewall Security Management solutions and #23 ranked solution in Container Security Solutions. PeerSpot users give Tufin Orchestration Suite an average rating of 8.0 out of 10. Tufin Orchestration Suite is most commonly compared to Wiz: Tufin Orchestration Suite vs Wiz. Tufin Orchestration Suite is popular among the large enterprise segment, accounting for 68% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 19% of all views.

Buyer's Guide

Tufin Orchestration Suite

August 2024

Get the report

Helped 802,829 peers since 2012

Featured reviews

Amroy Lumban Gaol

Information Security Engineer at a financial services firm with 10,001+ employees

Our company uses the solution to auto deploy and analyze locks for hundreds of Layer 2 firewalls which are more challenging than Layer 3. We write script for manual configurations, create policies, analyze all rules and locks, and then auto deploy. We currently have 40 engineers and 100 staff who…

Read full review

NetworkEccd3

Network Engineer Lead at a energy/utilities company with 10,001+ employees

The change workflow process is getting better. I wish it was a little more customizable. Right now, my biggest issue is that it wants to optimize everything we put in. Sometimes, we need a rule to be more readable, and we want it to go in a specific way. Sometimes, it's difficult to get Tufin to accept that. It wants to optimize and reduce the number of ACLs. On the compliance side, sometimes you just want more ACLs, so it's more readable for an auditor. I got a sneak peek of a release or two. There are some new features coming out that we could use today. E.g., SecureChange won't allow us to put in more readable ACLs rather than try to compress them. Sometimesm we don't want it to full optimization of a rule set. I would love the ability to tell it, "Thank,s but no thanks. I don't want to optimize this rule. Please put it in the way that I want it." Right now, that's hard to do. It's almost impossible.

Read full review

NetworkS2695

Network Security Operations at a insurance company with 10,001+ employees

I would like to drive value from is to getting to a point where we are almost like a DevOps operation for security changes. We have put in a lot of requests. Some of them are high level related to cloud. Others relate to some of the reporting structures that we have. E.g., some of the automated reporting capabilities for specifics on certain regulations. Certain countries have certain regulations, and with GRC, if we can associate that on certain regulations, then we can spit out reports from that. We would like to see integration of the different versions of this product, e.g., SecureChange and SecureTrack. They eventually need to start amalgamating all these into an end-to-end product for visibility.

Read full review

Tufin Orchestration Suite mindshare

As of September 2024, the mindshare of Tufin Orchestration Suite in the Firewall Security Management category stands at 20.9%, down from 21.9% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Firewall Security Management

Key learnings from peers

Last updated Sep 16, 2024

Valuable Features

Tufin Orchestration Suite's most valuable features include compliance checks, comprehensive monitoring, intuitive interface, robust reporting, firewall and router integration, alerting on changes, and customizable change management. Users appreciate visibility into network devices, policy management, vulnerability assessments, and recommendations for compliance. The suite is straightforward to set up and scales well. Integrates seamlessly with various firewalls, offers clarity around auditing, and automates change processes for improved efficiency. Stability and technical support are also highly regarded.

"It made us look at security policies more holistically."
"The most valuable feature of Tufin is security auditing. We are able to check the rules and compliance of the company, for example, what is allowed or not. We are able to check the rules over different gateways and set over firewalls."
"The most valuable feature of Tufin is we have better visibility and management of our file infrastructure."

Room for Improvement

Tufin Orchestration Suite needs improved firewall management and better integration with various firewalls, including Fortinet. Users want more configuration options, full support during on-premises deployments, and simplified implementation. Enhanced cloud migration, physical topology viewing, alerting capabilities, and improved cost are necessary. The web GUI needs modernization. Additionally, there should be better compliance with IPV6, integration with VMware, and more automation in reporting with AI elements. Licensing options should be clearer.

"Customizing it can be a little tricky, but that depends on your use cases."
"The reporting function could improve in Tufin. For our clients with companies that have strong compliance, reporting privacy data is mostly a problem. In the IT department, private data needs a function that one person can analyze it. It requires multiple people to analyze the data."
"We need to implement micro-segmentation in our infrastructure, and we are using Cisco ACI. However, we are facing an issue with Tufin, as it does not currently support integration with ACI for micro-segmentation, even though it is advertised as such."

ROI

Users expressed that they achieved their expected functionality, noting significant time savings in firewall changes and a faster implementation rate. This efficiency allowed them to reduce their engineers' workload, saving costs and broadening their customer base. Although hard to quantify, users reported benefits such as quicker network changes, better visibility, management of file infrastructure, and integration features. Engineering managers observed organizational cost savings due to time efficiencies.

Pricing

Enterprise users find Tufin Orchestration Suite's pricing to be on the higher side, though the ROI justifies the cost for large companies. The pricing structure is not very transparent, leading to confusion. Licensing is typically annual, with some users finding it cost-effective and others noting higher costs compared to competitors. Flexibility in licensing allows reuse but results in loss of historical data upon redeployment. Users suggest discussing pricing flexibility with Tufin.

"For us, the pricing was six out of ten, with ten being the most expensive and one being the cheapest."
"Tuffin is expensive, and we have to explain to our customers the benefit for them to purchase. If we explain the benefits in the correct way they do not mind the price. We typically do costing for the customer for three to five years. We make the general total cost of ownership at the beginning of a project for our customers."
"I had a bad experience with the financial department, and the price is too high. The software does work and does the job. The solution is worth the money. If I had a different partner to implement the solution, it would have been worth the price."

Popular Use Cases

Tufin Orchestration Suite is primarily used for firewall audit, compliance, automation, managing firewall rules and changes, recertifying connections, policy orchestration, security monitoring, network migration management, and tracking firewall rule requests and installations. Users deploy it on-premises and in the cloud for diverse needs, including reducing network traffic, optimizing firewall policies, and consolidating firewall vendors. It provides reporting, policy automation workflows, and integrates with various firewall platforms for improved security compliance.

Service and Support

Customers generally find Tufin Orchestration Suite support responsive, helpful, and knowledgeable, though they mention that better initial contact and quicker escalation to higher-level support would improve the experience. Some find support expensive and slow at times, but others praise the tailored solutions and positive support interactions. While some users handle issues themselves, most appreciate Tufin's technical team's dedication. There are mixed opinions on response times, with some facing delays and others receiving timely support.

Deployment

Initial setup experiences with Tufin Orchestration Suite vary significantly. Some users found it complex, requiring assistance and extra costs, while others faced difficulties without proper training. Many highlighted the importance of external consultants or engineers for successful integration. Conversely, some users found it straightforward and quick, often benefiting from prior training or simpler configurations. The complexity often depended on the specific network environment and existing protocols. Mixed feedback emphasized the need for a tailored approach based on individual requirements.

Scalability

Tufin Orchestration Suite is highly scalable and can handle numerous devices and users efficiently. Scaling is straightforward, allowing companies to expand without issues. It suits both small teams and large enterprises, managing complex environments and various firewalls effortlessly. Proper planning with sales engineers is recommended. Integration with databases and management servers is seamless, though experiences with technical support can vary.

Stability

Tufin Orchestration Suite is praised for its high reliability and stability, with users noting minimal bugs and exceptional performance. Some users mention occasional issues related to external factors like firewall upgrades, but these are not tied to Tufin. Updates and maintenance are straightforward, and users appreciate the stream of changes and support provided. The system maintains reliability without crashing or freezing, making it a dependable choice.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Tufin Orchestration Suite Buyer's Guide for additional reliable information.