Tufin Orchestration Suite Reviews

There are a couple of valuable features for us.

The first is that it allows us to track every change to our infrastructure, such as when the administrator makes new rules. Not only are we able to track every change, we can roll them back very easily as well.

The second valuable feature is that when you have huge growth within your firewall, it predicts what the growth may be and makes adjustments accordingly.

There are several security devices that are not on their list, so Tufin needs to improve this list. There are also a few design elements that could be improved as well.

We've had no issues with deploying it.

The stability is quite good. We are deploying the solution on physical machines, and it's on a lot of devices in our company. I think that if we did reports every day and every week, there would be no problem with the stability. It needs no maintenance and it's very stable.

For us, it's a new product so we don't know about scalability right now. We may need to scale it in the next year or two.

The customer service is superb and quite good.

The technical support is online and it allows us to get very fast answers to our questions. We appreciate the speed very much.

The initial setup is neither easy nor complicated. We have I5 hardware, and we had a little bit of difficulty installing our devices and Tufin.

Try it and you will like it.

Our primary use case is the policy request automation workflow.

Tufin saves a lot of time on the policy requests deployment. It enhances the SLA of the policy requests or changes and enhances the accuracy of the policy deployment.

I like the policy topology map, which allows us to visualize the picture of the security policy of the whole organization.

I would like to see the hardware specifications improved. The solution requires very high specifications of hardware platforms to run it. These high requirements are quite difficult to be acquired for users. 

I have been working with Tufin for the past three or four years.

Tufin performs very well.

Tufin is definitely scalable.

Technical support is very good when escalating questions with them.

Positive

The initial setup is straightforward and easy.

I think the pricing, comparatively, is good.

The functionality, roadmap, and technical support are important to most customers. It is important to consider the integration support with other security tools and compatibility. I would rate Tufin a eight out of ten.

We use Tufin for firewall management, firewall compliance monitoring, and unified policy implementation.

Tufin assists us in maintaining a robust view of our internal network topology. This topology may be built with a certain period, but it saves lots of operational and audit time in the long run.

The most valuable feature of this solution is the Interactive Map. The interactive map would show our network topology, which would benefit in terms of understanding our environment (especially for new staff) and first-level investigation (including end-to-end firewall path analysis).

The product should integrate with the UTM features. It may benefit the firewall implementation and migration.

Implementing new rules and the ticket system as users are creating changes. We're using Tufin to implement these rules.

It's much easier to implement rules. It's easier to have an overview of the policies because we don't have to review them, so it's much faster.

Sometimes it hangs when I go to the designer or verification. You can wait, wait, wait and then forget it. Then you cancel it and start again, and within two seconds, there it is.

Stability is OK. My customer has one problem, but I am not sure where the problem is. It's not really my part to fix the problems so that they do not always get the target. They have nine gateways and by some changes, Tufin does not find the target. You have to search for the target which has the policy where the change has to be implemented. This is so complicated if you do not know the policy as well.

It's been able to scale for our needs.

I've never had to use technical support yet.

The setup is complex. I think Tufin is a big product.

Sometimes I work with the AlgoSec solution as well, but not much. I think Tufin's user interface is a little bit better, but this is subjective.

We use it for compliance, and the performance is good.

Before, we had to manage each file individually. Now, they can all be managed as a single entity.

• Central management for all the firewalls.
• The ability to do queries on the rules and understand in which files the rules are configured.

It needs better reporting with more graphics and more pie charts, so management can understand details. The reports that are done now are full of data and management would like to have an image to help understand, right away, what the reports are saying.

Stability is good.

Scalability is good.

I have been in contact with technical support. Sometimes they are slow but they get to a solution.

Plan ahead because the implementation of Tufin is hard if you don't have an idea of what you want to do. Without a plan, it will be hard to get it working.

When I'm selecting a vendor, I read the opinion of other people who use the product. I want to learn if it is buggy and if it is doing what people need it to do.

I rate Tufin at about eight out of 10 because they really need to improve the reporting.

We were looking for a solution to provide firewall rule management that would enable us to choose which firewall rules to keep and which to eliminate.

Now we can confidently remove firewall rules that are not needed and make the configuration of firewalls more strict.

We are able to discover firewall rules that are too broad and widen the security footprint.

This solution would benefit from an improved reporting functionality with graphing so that reports can be presented to management.

Being able to run reports to see what rules are there and which rules are not needed is very useful to me. It allows me to optimize the policies. Also, every time someone pushes policy it sends an email to say that the change was made. I have it set up to run reports every two days to let me see the state of the firewall or the state of the policies.

The ability to get a sanity check for the rule base is important. Right now, we write our own firewall rules, and with Tufin, we can cut those down to four hundred.

The upgrade was a bit cumbersome because we had to do a complete reinstall. We removed it from a version of Linux that wasn’t supported and we had to do our first fresh install.

We’ve used it for a couple months now.

We haven’t had any issues with stability so far.

We’re a small team and we manage five clusters, so it’s not too bad.

We used technical support for the upgrade and they were very helpful. We haven’t had any issues, apart from the fact that we had to do a fresh install, but we were provided support through that process. They were online with us right through using WebEx. That was great.

My experience with Tufin has been good. We haven’t had any technical issues and the features that I have seen in the software so far are excellent.

You can search through policies of different firewalls with one step. That's one of the main features, because I have a lot of firewalls and do lot of firewall installations.

It makes it easy to find a rule and to make sure that all the firewalls are working in just one step, so this saves us time.

Granularity in rule evaluation needs work, especially if you want to narrow it down to a specific device, a cluster or a specific rule set. To have it more combinable so I can say that I want this and this cluster, but only a specific subset.

We've been using it since 2007.

It scales with functionality.

We don't have outages with Tufin and stability has never been an issue.

They've been great as they're quick and responsive. We use both phone and email to contact them.

It was straightforward.

I was invited to look at AlgoSec, but I did not have the time. I only know about it from white papers and so on. SecureChange is the differentiator. I think the part which competes is more SecureTrack, but SecureChange and SecureApp are what makes Tufin more special and they are what we require, which is not provided by Algosec.