RedSeal vs Tufin Orchestration Suite comparison

"RedSeal has different modules, such as the Analyzer module, which can be leveraged."

"This is the only solution in the world that gives you a digital resilience score."

"The most valuable features are network mapping and configuration."

"RedSeal integrates the network and gives us a visual or graphical overview of our network. If an organization is geographically dispersed, for instance, with one office in Canada and one office in the Philippines, the whole network, including all devices, is integrated into RedSeal, and you can see from where the traffic is going in and out."

"SecureChange is the most interesting part. It all comes down to having the user request firewall access and SecureChange, based on workflows, takes care of it, sending two or three emails to the business approvers. With one click, you can automate a firewall rule."

"Tufin is our audit trail for all changes. We have to be PCI compliant, and it's the tool we go to for enforcing PCI on the network side."

"SecureChange makes our lives easier with automation."

"This has helped us to better clean up and audit changes to the firewall policy."

"It's user-friendly. It's easy to understand menus on the web GUI. That's a good feature for us. I can say that it's doing what it's supposed to do. It also integrates well with other products like Check Point."

"I don't think that we were ever slow, but we can now say that changes are completed within twenty-four hours."

"We use this product to sharpen our change cycle. A request used to take quite a while as we did manual assessments. A lot of that is now done through SecureTrack."

"The automated reporting on a regular basis is helping us to be compliant with legal requirements."

"The dashboard should be improved to make correlating data easier to do."

"One of the areas of concern is the GUI. It is important to our customers that the GUI looks beautiful. It's a Java Client, so you have a Java dependency."

"There is room for improvement in integrating the OT security part and the private 5G security part in RedSeal."

"Sometimes, it required us to refresh the configuration. When we integrated any of the configurations into the device, sometimes, it could not detect the exact picture of that device. So, we had to reset the device to see that if it was giving true-positive results or false-positive results. In some cases, we were not able to get true-positive results. There was some kind of bug in that version. Its interface is not user-friendly and needs to be improved. It takes time to understand the interface and various options. Skybox has quite a user-friendly interface. They could provide a feature for compliance audit policy if it is already not there. A compliance audit policy ensures that all configurations are based on the best practices standards, such as CIS benchmarks standard or other similar standards. It provides visibility about whether your device configuration is based on best practices or not. Usually, such a feature is provided by other solutions such as Meteor or Tenable Nessus."

"With scalability, we are going to run into some issues. We have been talking about converting over to actual hardware as opposed to virtual. Therefore, I don't think we are scalable at this time, especially with the updates coming. I'm told that they're going to need a lot more horsepower to push them."

"My worry with Tufin is that it cannot connect to Fortinet, which is what I want to do."

"The product should integrate with the UTM features."

"The GUI is limited with respect to how much you can develop and visualize the process."

"We would like better communication on tickets, a better way to do metrics, and better communication to the customer. The biggest change that my team would like right now is communication on the process of the ticket, so the customer knows where their ticket is while their waiting."

"We were just talking to them about usage for the F5 platform. They will not be going after specific environments, but a more OpenAPI. They will have other companies write it, etc. It's a little different than I had expected."

"The metrics need improvement. They need more consistency or understanding of automation, along lines of customization of automation."

"The initial setup was complex. We have a big environment which contributed to the setup's complexity."

"The pricing is based on the number of endpoints and devices, and we have seen it range from mid-five figures to low six figures."

"The price is on the cheaper side."

"Tufin reduced the time it takes to solve a problem, which reduces the time of the outage."

"It's not that expensive, except for Security Groups. For us, just the Security Groups were about half of the total price. The total was about €500,000 a year, of which €200,000 was for Security Groups."

"The cost is pretty high. It's close to seven figures."

"It's quite an expensive solution."

"There is a permanent license for devices, but it's not relative to a device itself. Once you purchase 10 licenses for virtual appliances or virtual context, you can put them into different virtual firewalls, but you can reuse these licenses for other devices if you don't need them for the old ones."

"The licensing costs are a significant amount of money."

"Our evaluation showed that Tufin's features were on par with AlgoSec, but Tufin was the better financial choice."