Try our new research platform with insights from 80,000+ expert users
Tufin Orchestration Suite Logo

Tufin Orchestration Suite pros and cons

Vendor: Tufin
4.0 out of 5
Badge Leader
1,956 followers
Post review

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Filtering based on a wide range of criteria is highly valued.
Alerting to notify of changes and compliance checks with actionable recommendations are standout features.
Allows comprehensive security audits including vulnerability and risk checks, which help ensure network devices are not compromised.
Features robust scalability and customization options that can adapt to changing management needs.
Provides extensive visibility into network device status and traffic flows, facilitating enhanced troubleshooting and policy management.

CONS

The pricing of Tufin Orchestration Suite is rather expensive and could be more competitive.
The initial setup of Tufin Orchestration Suite can be tough and complex, with some issues related to the architecture.
There is a lack of support for newer firewall vendors, specifically Palo Alto firewall platform and Fortinet.
Tufin Orchestration Suite does not currently support integration with ACI for micro-segmentation, despite being advertised as such.
Customizing Tufin Orchestration Suite can be tricky depending on use cases.
 

Tufin Orchestration Suite Pros review quotes

it_user884007 - PeerSpot reviewer
Apr 3, 2019
SecureChange is the most interesting part. It all comes down to having the user request firewall access and SecureChange, based on workflows, takes care of it, sending two or three emails to the business approvers. With one click, you can automate a firewall rule.
RL
Jul 17, 2019
We use Tufin to clean up our firewall policies. It benefits us, because you can run a query for whatever your cleanup criteria is, e.g., "Has it been hit in 90 days?" It displays the list, then you can see the rules right there. If you want to get rid of it (or highlight it), then it creates a ticket that goes ahead and flags them all as disabled. While you can delete them, we always disable first. Then, we have a strip that comes back, and if it's been disabled for 90 days, then the system will remove them.
PM
Jul 18, 2019
The best feature for me is being able to look up objects within all of our policies, because we have a little over 12,000 rules and over 30,000 objects. When one person says, 'Hey, where's my server?' I can just go to Tufin and say, 'Hey, where is that server?' and very quickly it tells you where it is, what policy it's on. That is a life saver.
Learn what your peers think about Tufin Orchestration Suite. Get advice and tips from experienced pros sharing their opinions. Updated: October 2024.
816,406 professionals have used our research since 2012.
BW
Jul 18, 2019
One of the things that came up this week was the ability to decommission a server, which we thought was interesting. We had a workshop recently that talked about all the things that need to be thought about when managing firewalls. People said, "A lot of times, things get forgotten when you are decommissioning a server." E.g., making sure rules are taken away and taking out the rule set. The fact that there is an automated workload for that can be helpful.
NetworkS2695 - PeerSpot reviewer
Jul 18, 2019
We use this product to sharpen our change cycle. A request used to take quite a while as we did manual assessments. A lot of that is now done through SecureTrack.
NetworkS2260 - PeerSpot reviewer
May 2, 2019
The change workflow process is flexible and customizable... If we have a firewall completed and we want to redo it, if we need to re-engineer a particular firewall and open a different destination, we can do that by creating a break-fix... That is one of its useful tools.
BS
Jul 17, 2019
The APIs are the most valuable feature of this solution, as they facilitate integration with ServiceNow and other solutions.
reviewer1033653 - PeerSpot reviewer
Jan 23, 2022
Policy management and the cartography of the network have been the most valuable features.
MU
Jul 18, 2019
In our current environment, the most valuable feature from Tufin is their Network Map.
SF
Mar 18, 2019
The most valuable function is the SecureChange where it is able to automate everything from the validation of the rules to the pushing of the rules.
 

Tufin Orchestration Suite Cons review quotes

it_user884007 - PeerSpot reviewer
Apr 3, 2019
The interface is like a 1990s kind of thing. It's a little ugly. There are many things that you cannot tweak, little things like the column width and how you display the information. You end up exporting everything to an Excel file and doing your work there.
RL
Jul 17, 2019
The topology needs improvement. If I click on the network tab, I can go get a cup of coffee, come back, and my topology is still not painted. Maybe, it's just because we have so many devices, but looking at the topology, it is too slow. The problem is that when I click on the network tab, I do not want to see the topology. I want to click on the "Next" button, so I can put in the source and destination, so I can see the path. However, I still have to sit there and wait for the topology to load, and it's frustrating. I'll click on topology and try to click that "Next" button in time to where I can get around it. But, typically, you have to wait for that topology to paint. When it paints it, it's just a bunch of black smudges because there is just so much there. It can't paint it to where you see something. I can always zoom out, or something like that, but it's really worthless.
PM
Jul 18, 2019
For me, there are two things that can make Tufin a bit better... [It needs] a better focus on automation - automating a lot of the processes; and automating rule re-certification, or at least finding a way to simplify it.
Learn what your peers think about Tufin Orchestration Suite. Get advice and tips from experienced pros sharing their opinions. Updated: October 2024.
816,406 professionals have used our research since 2012.
BW
Jul 18, 2019
There are things that could be explained a little better for somebody brand new to this system, which could be helpful, especially if it was in real-time while you were working in the system. Having the ability in real-time to be able to understand search query suggestions would be helpful.
NetworkS2695 - PeerSpot reviewer
Jul 18, 2019
The product that we have deployed for our main process gets bogged down in terms of its response. Maybe, we need to deploy a slightly smaller box. Eventually, we need to discuss this with Tufin is to see if we can move over to some sort of VM environment where we can add more processing power to it.
NetworkS2260 - PeerSpot reviewer
May 2, 2019
When it comes to web services, in my experience, Tomcat has always gone down; after a certain amount of load it breaks down and we have to get things restored again.
BS
Jul 17, 2019
I would really like to see a new UI for SecureChange. SecureTrack 2.0 has quite an improvement in the UI and it flows more smoothly. The current SecureTrack and SecureChange are a little blocky, and sometimes loading a tab or a page is required to refresh information. Whereas in SecureTrack 2.0, they're starting to improve on that.
reviewer1033653 - PeerSpot reviewer
Jan 23, 2022
The network part of the solution could be improved. It's too hard because of the Tufin licensing model for the routing devices.
MU
Jul 18, 2019
The biggest area where I see a need for improvement is some of the documentation and training stuff. It does a really good job of hitting the big concepts, but it needs like another layer deeper of actually getting into some of the details of how to do some of the things. Conceptually, I understand how the product works, but now how do I start building stuff and integrating it into my environment.
SF
Mar 18, 2019
There is room for improvement in the speed of Tufin. It is using so many of my VM resources and yet it is still a bit slow... Even though we are allocating 130 gigs of RAM, we still have to wait for a few minutes for a single report to be generated. Otherwise it would be a perfect tool.