Tufin Orchestration Suite Reviews

Our primary use case is fo the security of our medical facility. We have a lot of holes in the firewall and we wanted to see the details. For example, we see a lot of traffic between the different zones that we needed to reduce. So we use the solution to eliminate this traffic. It also allows us to have a lot of optimization rules for a good switching policy in the firewall. 

It can quantify and reduce a lot of risks.

I like the deployment and management of this solution. I don't have much experience in that kind of security solution, but I have three years of experience in similar solutions, like AlgoSec. I do some scripts to optimize the solution, such as configuring the API.

Additionally, when we export the report, you can see a lot of logs of all the equipment in the company and we can identify some of the machines or some log station in the network. Also, the user can create some requests to implement the flow and push the rules in the firewall. You can analyze the log and the traffic, you can have a lot of API's, and do some reporting.

In the next release I would like to see better migration in the Cloud because that will allow more visibility in the network.

I have been working with Tufin Orca for one year.

This solution was already deployed and we just manage it.

It is a stable solution.

This solution is scalable.

I have tons of contact with support. If you have some problems or issues you can contact support and manage the problem together. I did that with a lot of competitors, like Palo Alto on our network. If we have an issue in production, my production team will try to solve it or you can contact support to manage the issue.

I am satisfied with the support.

The initial setup is not complex. It's easy for me because I have some experience and training on it. Now I can do a whole production on the application.

We used an integrator for implementation because I have a colleague who has a lot more experience than me and we worked together to manage that solution.

I would recommend this solution. I think it's a good solution to have. It is good to know what this solution does in the network. You can have a lot of training on it and see a lot of questions from different users in the company.

On a scale of one to ten, I would rate it an eight.

Being able to use tools and zero key rules, we are in a place to clean up. It is good for management because they can see exactly what is going on.

It gives us a better view of the rules. We found that we can send invites to the owner of the application to find out if they still needs to use it, and if they say that they don't want it, then we can observe the rule and remove it if possible.

More integrations is something that I would like to see in the future.

It is very stable.

It's been able to scale for our needs. We only need to drag files for our subsidiaries into our devices, and currently we have about forty or fifty devices.

I've never contacted them directly as I go through our partner who were also the reseller.

I think it was very easy. Of course the technical guy was very good. He did it in a matter of two or three days because it was a big contract.

We are very happy and it's a good product We take the reports, we see the zero keys, we see no rules that are not used, rules left over, I focus on those because this is my field.

There are a couple of valuable features for us.

The first is that it allows us to track every change to our infrastructure, such as when the administrator makes new rules. Not only are we able to track every change, we can roll them back very easily as well.

The second valuable feature is that when you have huge growth within your firewall, it predicts what the growth may be and makes adjustments accordingly.

There are several security devices that are not on their list, so Tufin needs to improve this list. There are also a few design elements that could be improved as well.

We've had no issues with deploying it.

The stability is quite good. We are deploying the solution on physical machines, and it's on a lot of devices in our company. I think that if we did reports every day and every week, there would be no problem with the stability. It needs no maintenance and it's very stable.

For us, it's a new product so we don't know about scalability right now. We may need to scale it in the next year or two.

The customer service is superb and quite good.

The technical support is online and it allows us to get very fast answers to our questions. We appreciate the speed very much.

The initial setup is neither easy nor complicated. We have I5 hardware, and we had a little bit of difficulty installing our devices and Tufin.

Try it and you will like it.

Our primary use case is the policy request automation workflow.

Tufin saves a lot of time on the policy requests deployment. It enhances the SLA of the policy requests or changes and enhances the accuracy of the policy deployment.

I like the policy topology map, which allows us to visualize the picture of the security policy of the whole organization.

I would like to see the hardware specifications improved. The solution requires very high specifications of hardware platforms to run it. These high requirements are quite difficult to be acquired for users. 

I have been working with Tufin for the past three or four years.

Tufin performs very well.

Tufin is definitely scalable.

Technical support is very good when escalating questions with them.

Positive

The initial setup is straightforward and easy.

I think the pricing, comparatively, is good.

The functionality, roadmap, and technical support are important to most customers. It is important to consider the integration support with other security tools and compatibility. I would rate Tufin a eight out of ten.

We use Tufin for firewall management, firewall compliance monitoring, and unified policy implementation.

Tufin assists us in maintaining a robust view of our internal network topology. This topology may be built with a certain period, but it saves lots of operational and audit time in the long run.

The most valuable feature of this solution is the Interactive Map. The interactive map would show our network topology, which would benefit in terms of understanding our environment (especially for new staff) and first-level investigation (including end-to-end firewall path analysis).

The product should integrate with the UTM features. It may benefit the firewall implementation and migration.

Implementing new rules and the ticket system as users are creating changes. We're using Tufin to implement these rules.

It's much easier to implement rules. It's easier to have an overview of the policies because we don't have to review them, so it's much faster.

Sometimes it hangs when I go to the designer or verification. You can wait, wait, wait and then forget it. Then you cancel it and start again, and within two seconds, there it is.

Stability is OK. My customer has one problem, but I am not sure where the problem is. It's not really my part to fix the problems so that they do not always get the target. They have nine gateways and by some changes, Tufin does not find the target. You have to search for the target which has the policy where the change has to be implemented. This is so complicated if you do not know the policy as well.

It's been able to scale for our needs.

I've never had to use technical support yet.

The setup is complex. I think Tufin is a big product.

Sometimes I work with the AlgoSec solution as well, but not much. I think Tufin's user interface is a little bit better, but this is subjective.

We use it for compliance, and the performance is good.

Before, we had to manage each file individually. Now, they can all be managed as a single entity.

• Central management for all the firewalls.
• The ability to do queries on the rules and understand in which files the rules are configured.

It needs better reporting with more graphics and more pie charts, so management can understand details. The reports that are done now are full of data and management would like to have an image to help understand, right away, what the reports are saying.

Stability is good.

Scalability is good.

I have been in contact with technical support. Sometimes they are slow but they get to a solution.

Plan ahead because the implementation of Tufin is hard if you don't have an idea of what you want to do. Without a plan, it will be hard to get it working.

When I'm selecting a vendor, I read the opinion of other people who use the product. I want to learn if it is buggy and if it is doing what people need it to do.

I rate Tufin at about eight out of 10 because they really need to improve the reporting.

We were looking for a solution to provide firewall rule management that would enable us to choose which firewall rules to keep and which to eliminate.

Now we can confidently remove firewall rules that are not needed and make the configuration of firewalls more strict.

We are able to discover firewall rules that are too broad and widen the security footprint.

This solution would benefit from an improved reporting functionality with graphing so that reports can be presented to management.