FireMon Security Manager vs Skybox Security Suite comparison

FireMon and Tufin are both solutions in the Firewall Security Management category. FireMon is ranked #5 with an average rating of 8.3, while Tufin is ranked #6 with an average rating of 7.3. FireMon holds a 17.6% mindshare in Firewall Security Management, compared to Tufin’s 9.1% mindshare. Additionally, 87% of FireMon users are willing to recommend the solution, compared to 83% of Tufin users who would recommend it.

FireMon Security Manager

Read 56 FireMon Security Manager reviews

3,283 Views
3,185 Comparison Views

87% willing to recommend

Skybox Security Suite

Read 37 Skybox Security Suite reviews

2,899 Views
1,884 Comparison Views

83% willing to recommend

FireMon Security Manager

Skybox Security Suite

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 7, 2025

FireMon Security Manager and Skybox Security Suite both compete in the firewall management and security solutions category. FireMon seems to have an upper hand in policy management and technical support, while Skybox excels in vulnerability management and offers comprehensive network assurance.

Features: FireMon Security Manager is noted for its firewall auditing capabilities, traffic flow discovery, and redundancy analysis, enhancing security intelligence and policy testing. Skybox Security Suite offers notable features in vulnerability management, attack vector simulation, and endpoint security integration, primarily focusing on security risks and mitigation.

Room for Improvement: FireMon requires advancements in network mapping, policy implementation, and device integration, along with improved reporting formats. Users desire better migration processes and user interfaces. For Skybox, enhancing the user experience, especially in web-based interfaces, data logging, and reporting customization, is necessary. Improved support for various firewalls and more effective change management are also sought after.

Ease of Deployment and Customer Service: FireMon supports hybrid cloud and on-premises deployments, with technical support praised for its responsiveness. Its WebEx training sessions are valuable. Skybox also offers deployment options but is considered complex without specialized skills. Technical support has mixed reviews, with opportunities for improvement in promptness and knowledge.

Pricing and ROI: FireMon is expensive but justified for large enterprises due to its feature set, contributing to ROI by enhancing security and reducing audit times. It offers flexible licensing structures. Skybox, though pricier, provides substantial value for large organizations but less so for smaller ones, with a subscription-based licensing model that offers limited flexibility.

To learn more, read our detailed FireMon Security Manager vs. Skybox Security Suite Report (Updated: September 2025).

Buyer's Guide

FireMon Security Manager vs. Skybox Security Suite

September 2025

Download the complete report

Helped 873,003 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

FireMon Security Manager

Ranking in Firewall Security Management

5th

Average Rating

8.2

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Skybox Security Suite

Ranking in Firewall Security Management

6th

Average Rating

7.6

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Vulnerability Management (46th)

Mindshare comparison

As of November 2025, in the Firewall Security Management category, the mindshare of FireMon Security Manager is 17.6%, up from 16.3% compared to the previous year. The mindshare of Skybox Security Suite is 9.1%, down from 10.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewall Security Management Market Share Distribution
Product	Market Share (%)
FireMon Security Manager	17.6%
Skybox Security Suite	9.1%
Other	73.3%

Firewall Security Management

Featured Reviews

Ganesh-Khutwad

Senior Network Specialist at Tech Mahindra Limited

Rapid policy insights with robust dashboards and cross-vendor automation

FireMon Security Manager is excellent for real-time compliance management. It allows us to quickly retrieve any policy needed for testing and easily analyze it for loopholes. If a loophole exists, FireMon provides comprehensive details within the policy manager. It alerts us to firewall rule additions or changes that violate compliance policies. It supports various firewall platforms, including Checkpoint, Zscaler, Fortinet, Cisco, and AWS, and provides centralized management for all configured policies through a single console. FireMon Security Manager provides many features, like whether my firewall is compatible with required standards such as NTP and SNMP. Each compliance included in our RFPs is shown in the UI of FireMon. It gives robust and clear dashboards, making it easier to understand risks because the policies have ratings showing usage, and the number of hit attacks. It streamlines our compliance reporting processes by providing comprehensive risk and compliance assessments. It offers a range of features, including verification of firewall compatibility with protocols like NTP and SNMP, and detection of signal charges. FireMon effectively addresses all compliance requirements outlined in our RFPs. For instance, it can determine if firewalls or proxies within a stack are configured in Secure Mode or Active-Active mode. FireMon Security Manager enables us to generate reports on all these aspects, ensuring thorough compliance monitoring and documentation. FireMon Security Manager is robust and can help automate firewall policy changes across large multi-vendor enterprise environments. FireMon Security Manager helps automate firewall policy changes across various environments, including on-premises, cloud, hybrid, SASE, and SD-WAN. It also simplifies cleaning up firewall rules in our environment. The time required to accurately create, approve, and deploy firewall policy rules has been reduced. Tasks that took 30 minutes can now be completed in just five minutes using FireMon. FireMon provides immediate visibility into our policies through a robust and clear dashboard, making it easy to identify errors or misconfigurations based on the policy rating.

Read full review

NenadMijatovic

Director of Sales at S4E Serbia

Efficient in vulnerability management, stable and easy to use

Vulnerability management is the most valuable feature because it lets you focus on the most critical vulnerabilities. That's the important thing. Here in Serbia, there are not so many companies that have too many firewalls inside one company. So, they usually don't buy this model for Firewall Assurance unless there is some compliance. So you can prove that your firewalls are compliant. So, that model is not so important here in Serbia. It's for bigger companies. So, they usually buy network assurance to build the model of the network and vulnerability management to focus on the most important vulnerabilities. Moreover, Skybox can collect data for many vendors. From the endpoint protection vendors to the network equipment vendors to other security vendors. So, it supports more than one hundred vendors to collect data from them.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The firewall assessment feature is great."

"It provides us with a single pane of glass for our on-prem environment, to see configuration. We have not implemented into the cloud yet. We can search for an object group and see where it lives on any firewall in the enterprise or find security rules, no matter what firewall they're on."

"It is a good product. Previously, we were using only spreadsheets to compare the usage, but now with FireMon, we are able to clean up or review the policies to some extent. It is still a work in progress, but we are at a good stage now."

"The unused objects is another nice feature, where it digs a little bit deeper into comparing the logs that it sees versus the configurations that it sees... The unused objects feature will go through in a pretty detailed way and show us which ones aren't being used. Or, if they are used, it will show us how often they're used."

"I've been using the reports to see what is going on, and that is a helpful feature. We can track down unused rules, which helps with compliance. We can see rules that have not been used or that are duplicates or overly permissive."

"Overall, I would rate this solution a nine out of ten."

"The most valuable feature is that everything is recorded in the historical logs, including the firewall rules, headcounts, object-level usage, and the rule documentation. The rule certification details are also there, which means that someone can be held accountable for a specific firewall rule."

"It is the single place where we go to review all of our firewall changes. The solution makes it easier for us to track all the changes made. It is a central place where we can look at all the firewall rules, because we have three different firewall vendors. It save us time and creates efficiencies by looking at the general picture."

More FireMon Security Manager pros

"The performance could be good because we chose it at the time, but it is too complex for us to appreciate its performance because we lack the necessary skills."

"The most valuable features of Skybox Security Suite are all the modules that are provided, such as vulnerability assessments and network, and firewall assessments."

"Skybox Security Suite is cost-effective."

"Change Manager is most important because of the impact on each other of a network change or a firewall change. We want to understand this and to know, beforehand, what the impact of a change will be. We are a large network so that is a very important tool."

"instead of asking for firewall rules which may or may not be relevant, or could already be there, or could be over-permissioned, Skybox can be used to map out the resources that that application is going to use and provide the exact rules that an application would require to function correctly. If the traffic isn't able to flow for the application, if it's erring out, Skybox can be used to troubleshoot that and say, "All right, where is the traffic being stopped and why, and how do I fix that.""

"The revalidation and policy recertifications are most valuable."

"The most valuable features are Firewall Assurance and Vulnerability Control."

"The way that it's built with three-tier architecture, it makes it very horizontally scalable, so I can have multiple fallbacks. If one machine does fall offline, there are four other machines that are doing the exact same job to pick it up"

More Skybox Security Suite pros

Cons

"It comes as a Linux appliance on a server and we're not a Linux shop, we're more of a Windows shop. It would be great if they could automate or integrate the backups into it and other things through their GUI interface, just to make the management of Linux a little more transparent."

"Policy Planner requirements section is good, but could use some improvement to allow flexibility to enter different types of requests (modifying an existing policy, object or service group, for example) in a structured task format that can be auto-verified."

"Our firewalls have multiple paths through them and FireMon falls short a little bit because it's not Palo Alto-centric. I don't think FireMon has kept up with where Palo Alto is at. They started out being Check Point-centric for years and they've never really fully embraced the nuances others, like Palo Alto or Fortinet, have. They don't handle a lot of the capabilities and attributes that Palo Alto does yet. They're working on it. They're getting there."

"The initial setup can take some time, including connecting it and configuring it. It's not something that is easy for anybody to do. There is time and energy required because of the number of systems you have to configure to get it to work properly."

"The current health and monitoring of the devices is atrocious... Imagine you have a list of 200 devices, and you can grade each of those devices as either green, yellow, or red. However, there might be three different reasons for you to go to red, or eight different reasons to go to yellow, and all of those things could be combined... Out of all those categories, I only find one or two of them that are, perhaps, pertinent."

"To my knowledge, there's no cloud component to FireMon whatsoever. We're on the hook for any updates to versioning of the operating system or the application that runs on the operating system. It would be nice if it was a little bit more automated."

"We have had some stability issues that are affecting operations. We rely heavily on this solution and if it isn't working then we have to create rules manually."

"FireMon could be made more user-friendly when it comes to creating filters or conducting traffic analysis."

More FireMon Security Manager cons

"There is room for improvement in pricing. It would be better, especially if a customer bought all four modules."

"Skybox Security Suite can improve the change management module. It is the one part of the tool that is used with the firewall devices and you have a change management module that is used to record changes of all firewalls in the company. It's not compatible with all brands, this is where they can improve the solution."

"There are multiple dashboards but no custom dashboard. It would be good to include a custom dashboard so that we can actually choose which field and what kinds of things we want to look at."

"The dashboard's UI is not interesting; it is quite normal. It would be better if something more attractive or similar useful information found in AlgoSec was available."

"The cloud site could be better. They should provide some use cases to help users."

"The stability is something that is questionable. I don't know whether it is because of the kind of infrastructure we have or because of the product in itself. We're running it on a virtual machine right now. Maybe once a month, or once in every 45 days, it requires a restart because the application fails to connect. So I have to restart the whole Skybox Manager itself, the Skybox server itself, and then connect to it from our Skybox Manager."

"The solution was quite technical. It would be easier to manage if the solution was more specific about aspects of the solution and provided more advisory around how to use it effectively. It would help users a lot if they were more clear about everything."

"The primary room for improvement would be to enable a web interface, which is not something which is there in the product. This is supposed to have come a year, a year and a half ago, but still has failed to come out. It still needs a client application to be installed on a workstation to be able to access that server and then run these reports. So I cannot extend that access to anybody. It has to be one administrator all the time. So unlike a web interface, where you can give multiple users simultaneous access and generate the various reports, that isn't a possibility at the moment."

More Skybox Security Suite cons

Pricing and Cost Advice

"FireMon is cheaper than AlgoSec."

"Its pricing is good. Compared to others, it is not so expensive."

"This is an expensive solution. The cost of three modules for three years was approximately one million."

"Pricing is reasonable."

"FireMon is very expensive. I think that they charge a premium. In general, they are very pricey. Compared to their competitors, they cost a little more than the other solutions that we evaluated."

"Relative to what it offers, the price is fair."

"It's a good value. From a licensing standpoint... it's very simple to understand, and gives us a good bang for the buck."

"The pricing was very good during our initial year, but they increased it this year a little bit. The price is okay. It is not cheap, but it is still average."

More FireMon Security Manager pricing and cost advice

"When compared with other companies, the license is more costly."

"Fully understand the total cost of ownership. They have gone to a new model where you have to replace the hardware every X amount of years at a very substantial cost and fully understand your intended number of nodes. To operate a firewall, you have to pay two licenses, a firewall node and a network node. If you are a reasonable-sized organization, this gets expensive very quickly."

"I rate the pricing two on a scale of one to ten, where one is very expensive, and ten is cost-effective."

"The solution is based on a subscription model for annual licenses."

"I would rate the tool's pricing an eight out of ten."

"I think the price is fair."

"The licensing fee is paid yearly and is approximately $100,000."

"I think for the cost, what we got definitely is worth it. The only caution I would give is that whenever you license for Firewall Assurance at the same time, for some weird reason, you have to get one Network Assurance license, just to manage one firewall. That's a little bit of overkill. But otherwise, in general, the pricing is fairly okay."

More Skybox Security Suite pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewall Security Management solutions are best for your needs.

See recommendations

873,003 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Computer Software Company

13%

Manufacturing Company

12%

Comms Service Provider

Financial Services Firm

18%

Computer Software Company

13%

Manufacturing Company

10%

Energy/Utilities Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	9
Large Enterprise	44

By reviewers
Company Size	Count
Small Business	21
Midsize Enterprise	4
Large Enterprise	20

Questions from the Community

What do you like most about FireMon?

I like the Security Manager console where we can see any changes that have been made or pull the results of an assessment and control the policies that we implement.

See all answers

What is your experience regarding pricing and costs for FireMon?

Comparatively, FireMon has a very good price and is below the general competition in cost. I have not seen any additional fees beyond the general contract fees for the usage I have. So, I have not ...

See all answers

What needs improvement with FireMon?

For one company I work with, I use Fortinet, and FireMon is not able to understand the zones that Fortinet uses. Part of that compliance piece does not provide me with the necessary information. An...

See all answers

What do you like most about Skybox Security Suite?

Overall, the tool has helped us reduce risks. If any step is missing, it's easier for my team or engineers to identify it. The tool provides accurate recommendations based on the data. Its integrat...

See all answers

What is your experience regarding pricing and costs for Skybox Security Suite?

From a commercial perspective, AlgoSec is more expensive compared to Skybox Security Suite. Skybox Security Suite is cost-effective.

See all answers

What needs improvement with Skybox Security Suite?

The dashboard's UI is not interesting; it is quite normal. It would be better if something more attractive or similar useful information found in AlgoSec was available.

See all answers

Comparisons

Tufin Orchestration Suite vs FireMon Security Manager

Compared 45% of the time

AlgoSec vs FireMon Security Manager

Compared 38% of the time

ManageEngine Firewall Analyzer vs FireMon Security Manager

Compared 4% of the time

RedSeal vs FireMon Security Manager

Compared 3% of the time

Palo Alto Networks Panorama vs FireMon Security Manager

Compared 3% of the time

More FireMon Security Manager Competitors

AlgoSec vs Skybox Security Suite

Compared 32% of the time

Tufin Orchestration Suite vs Skybox Security Suite

Compared 27% of the time

RedSeal vs Skybox Security Suite

Compared 5% of the time

Qualys VMDR vs Skybox Security Suite

Compared 4% of the time

ManageEngine Firewall Analyzer vs Skybox Security Suite

Compared 4% of the time

More Skybox Security Suite Competitors

Product Reports

Buyer's Guide

FireMon Security Manager

November 2025

Download FireMon Security Manager product report

Buyer's Guide

Skybox Security Suite

October 2025

Download Skybox Security Suite product report

Overview

The increasing complexity of networks, driven by the constant influx of new devices, applications, and cloud services, presents a daunting challenge for managing firewall policies and rules. A typical enterprise environment has millions of rules, and just one simple misconfiguration can lead to devastating consequences like compliance violations, outages, and data breaches.

FireMon’s Security Manager is a purpose-built network security policy management (NSPM) platform that automates the management of firewall and cloud security policies to eliminate policy-related risk, accurately and quickly change rules, and meet internal and external compliance requirements.

Reduce Risk Manage risk with real-time visibility and control
Manage Change Avoid misconfigurations, accelerate business, and improve security
Enforce and Maintain Compliance Avoid violations, avoid risk, and avoid fines

FireMon

Skybox Security Suite provides comprehensive tools for network and firewall compliance, vulnerability management, and change management, with a focus on risk reduction and network optimization.

Skybox Security Suite supports over 130 vendors with massive scalability and seamless integration, notably with Nessus and Qualys. Its features include network path analysis and offline attack simulation, which enhance management effectiveness. Despite its robust offering, improvements are needed in its UI, web interface, reporting detail, and customization. Automation, orchestration, and device policy provisioning require better support, and integration with tools like Rapid7 could be improved. Enhancements in firewall configuration checks, cloud connectivity, pricing, and marketing awareness are also called for, alongside a transition from Java GUI to a consistent web-based system.

What Are Key Features of Skybox Security Suite?

Network Assurance: Enhances visibility and optimization of network paths.
Firewall Assurance: Facilitates firewall rule set audits for compliance.
Vulnerability Management: Offers path detection and risk prioritization.
Compliance Management: Ensures adherence to standards like PCI.
Change Management: Simplifies management across extensive infrastructures.

What Benefits and ROI Can Users Expect?

Scalability: Supports numerous vendors and large-scale deployments.
Integration: Seamlessly connects with tools like Nessus and Qualys.
Risk Reduction: Improves security across network infrastructures.
Simplified Management: User-friendly interface and reporting tools enhance usability.
Network Optimization: Streamlines processes and improves performance.

Skybox Security Suite is commonly used in industries requiring strict compliance like finance and healthcare. Firms employ it for firewall audits, enhancing network visibility, and managing configurations against standards such as PCI, ensuring security and policy compliance across expansive networks.

Tufin

Sample Customers

Convey, MGM Resorts International, Southwest Airlines, Alkami, Costco, Aetna, IBM, Verizon, Wells Fargo

ADP, Blue Cross Blue Shield, BT, USAID, Delta Dental, EDF Energy, EMC, HSBC, Johnson & Johnson

Buyer's Guide

FireMon Security Manager vs. Skybox Security Suite

September 2025

Free Report: FireMon Security Manager vs. Skybox Security Suite

Find out what your peers are saying about FireMon Security Manager vs. Skybox Security Suite and other solutions. Updated: September 2025.

DOWNLOAD NOW

873,003 professionals have used our research since 2012.

See our FireMon Security Manager vs. Skybox Security Suite report.

See our list of best Firewall Security Management vendors.

We monitor all Firewall Security Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.