Tufin Orchestration Suite Reviews

Our primary use case is fo the security of our medical facility. We have a lot of holes in the firewall and we wanted to see the details. For example, we see a lot of traffic between the different zones that we needed to reduce. So we use the solution to eliminate this traffic. It also allows us to have a lot of optimization rules for a good switching policy in the firewall. 

It can quantify and reduce a lot of risks.

I like the deployment and management of this solution. I don't have much experience in that kind of security solution, but I have three years of experience in similar solutions, like AlgoSec. I do some scripts to optimize the solution, such as configuring the API.

Additionally, when we export the report, you can see a lot of logs of all the equipment in the company and we can identify some of the machines or some log station in the network. Also, the user can create some requests to implement the flow and push the rules in the firewall. You can analyze the log and the traffic, you can have a lot of API's, and do some reporting.

In the next release I would like to see better migration in the Cloud because that will allow more visibility in the network.

I have been working with Tufin Orca for one year.

This solution was already deployed and we just manage it.

It is a stable solution.

This solution is scalable.

I have tons of contact with support. If you have some problems or issues you can contact support and manage the problem together. I did that with a lot of competitors, like Palo Alto on our network. If we have an issue in production, my production team will try to solve it or you can contact support to manage the issue.

I am satisfied with the support.

The initial setup is not complex. It's easy for me because I have some experience and training on it. Now I can do a whole production on the application.

We used an integrator for implementation because I have a colleague who has a lot more experience than me and we worked together to manage that solution.

I would recommend this solution. I think it's a good solution to have. It is good to know what this solution does in the network. You can have a lot of training on it and see a lot of questions from different users in the company.

On a scale of one to ten, I would rate it an eight.

It's very easy to document every change that has been done to auditors or internal auditing, but also to troubleshoot when you have more than one person taking care of your policies. So we're able to very easily and very quickly find out what our colleagues did and to mitigate that if it has caused any problems.

It seems to be stuck between the usability of a browser-based application and a full application. Part of my feelings about this have to do with my perception of working with web applications, and there tends to be almost natural laws that something might get stuck or the browser gets confused, things like that which could use some improvement.

We've had no issues with deployment.

I haven't seen any stability issues. We actually seldom see issues with the product, so the experience with the support is not that common, but I think the issues we've seen have been handled quite well.

It scales very easily. I'm in a market where a 5000-user company is a large company, so there's definitely no problem there, but I easily see that the solution can scale far larger than that.

They are responsive and quick in terms of technical support.

The basic installation is very easy and it's quick getting things up and running. Where there tends to be the problem is, and it's not really a Tufin issue but more a customer issue, how to really work through the policies and get the full value of the products. It's very easy to get started, and when you first get started, the further steps where you begin to make your change to your app, there are a lot of organizational work that needs to be done to get the full value of the product. This tends to be the issue with most companies.

We implemented it with our in-house team.

This is true for Tufin and as well for many of the security vendors and their products. I think it's very important just to get started or get the easy wins first, and then go to the solution afterwards. With Tufin, I think it's very, very easy to get big easy wins up front with all the documentation and all the tracking, just to get started and move forward from there.

We use it to track changes and the policies that we've implemented into our system.

It allows us to evaluate and build matrices, and see how rules work with it to see whether they are secure.

The biggest benefit of this is that it allows us to see how security functions as a hole. Also, it lets me see where the holes are and how things function.

The rules and configurations can be clunky. I have to wade through different things to get what I'm looking for, but the more I use, the more it makes sense to me.

The company has used it for 2 years, but I've used it for 1.

No issues with stability.

The scalability has been great, and we've implemented it on 25 devices now.

The implementation is straightforward.

I did it in-house, but tech support helped me walk through it and find missing pieces.

Try to get a training course on what it can do, so that when you go to implement it you can get the most out of it. If I had known all the features from a training class, I would have implemented it differently from the guy who did it for us.

We use Tufin for firewall management, firewall compliance monitoring, and unified policy implementation.

Tufin assists us in maintaining a robust view of our internal network topology. This topology may be built with a certain period, but it saves lots of operational and audit time in the long run.

The most valuable feature of this solution is the Interactive Map. The interactive map would show our network topology, which would benefit in terms of understanding our environment (especially for new staff) and first-level investigation (including end-to-end firewall path analysis).

The product should integrate with the UTM features. It may benefit the firewall implementation and migration.

There are a couple of valuable features for us.

The first is that it allows us to track every change to our infrastructure, such as when the administrator makes new rules. Not only are we able to track every change, we can roll them back very easily as well.

The second valuable feature is that when you have huge growth within your firewall, it predicts what the growth may be and makes adjustments accordingly.

There are several security devices that are not on their list, so Tufin needs to improve this list. There are also a few design elements that could be improved as well.

We've had no issues with deploying it.

The stability is quite good. We are deploying the solution on physical machines, and it's on a lot of devices in our company. I think that if we did reports every day and every week, there would be no problem with the stability. It needs no maintenance and it's very stable.

For us, it's a new product so we don't know about scalability right now. We may need to scale it in the next year or two.

The customer service is superb and quite good.

The technical support is online and it allows us to get very fast answers to our questions. We appreciate the speed very much.

The initial setup is neither easy nor complicated. We have I5 hardware, and we had a little bit of difficulty installing our devices and Tufin.

Try it and you will like it.

The solution helps us meet our compliance needs.

The visibility is fantastic.

The product is flexible.

The scalability is the best.

We previously used a different solution. We switched because of the value the solution could provide us in conjunction with Check Point.

The initial setup was complex. We have a big environment which contributed to the setup's complexity.

We use it for compliance, and the performance is good.

Before, we had to manage each file individually. Now, they can all be managed as a single entity.

• Central management for all the firewalls.
• The ability to do queries on the rules and understand in which files the rules are configured.

It needs better reporting with more graphics and more pie charts, so management can understand details. The reports that are done now are full of data and management would like to have an image to help understand, right away, what the reports are saying.

Stability is good.

Scalability is good.

I have been in contact with technical support. Sometimes they are slow but they get to a solution.

Plan ahead because the implementation of Tufin is hard if you don't have an idea of what you want to do. Without a plan, it will be hard to get it working.

When I'm selecting a vendor, I read the opinion of other people who use the product. I want to learn if it is buggy and if it is doing what people need it to do.

I rate Tufin at about eight out of 10 because they really need to improve the reporting.

Being able to use tools and zero key rules, we are in a place to clean up. It is good for management because they can see exactly what is going on.

It gives us a better view of the rules. We found that we can send invites to the owner of the application to find out if they still needs to use it, and if they say that they don't want it, then we can observe the rule and remove it if possible.

More integrations is something that I would like to see in the future.

It is very stable.

It's been able to scale for our needs. We only need to drag files for our subsidiaries into our devices, and currently we have about forty or fifty devices.

I've never contacted them directly as I go through our partner who were also the reseller.

I think it was very easy. Of course the technical guy was very good. He did it in a matter of two or three days because it was a big contract.

We are very happy and it's a good product We take the reports, we see the zero keys, we see no rules that are not used, rules left over, I focus on those because this is my field.