Cisco Defense Orchestrator vs. Tufin Orchestration Suite

Cisco Defense Orchestrator is an ideal software to easily manage firewalls at the enterprise level, as well as to implement security policies that allow the corporate infrastructure to remain free of threats that can put at risk all the devices that are handled on a daily basis. For example, it is ideal for preventing network intrusions, since it has the ability to block malware and any suspicious activity. In addition, the fact that it is based on a single console provides the benefit of keeping all devices under view and thus preventing any threat in the simplest way.

Well suited scenarios - 1) Firewall Policy / Ruleset management 2) Where all the products are from Tufin like TOS ST, SC, SecureApp etc 3) Where customer focuses on ruleset compliance - USP violations, and other features Less suited - 1) Agnostic/distributed environment - Tough with integrate with 3rd party like CyberArk 2) FW recertification processes / exception process when complex process is included

Incentivized

• Upgrade OS
• Manage changes at scale
• Group like configurations
• Clone configs for other firewalls
• Migrate from on prem to cloud

Incentivized

• Firewall management
• Compliance reports
• Unused rules and optimization
• Policy Automation

Incentivized

• Better templates like pushing config. when a particular firewall checks in with CDO.
• Compliance checking for configurations would be great. For example: make sure http is shut and https is open.

Incentivized

• Palo Alto Networks Integration
• Better/more user friendly api for integration with ticketing systems
• Web UI structure is not user-friendly

Incentivized

I give this score because I believe that Cisco Defense Orchestrator helps our company to be resilient, this is because this software is also focused on offering security resilience at the enterprise level, that is, through its features such as high visibility, acceleration of threat detection and response, simple management, and end-to-end protection. By having it, it is more feasible to avoid disasters or risks in the devices that are handled daily and of course avoid data loss and, given this, be able to recover quickly if something happens.

I believe that Cisco Defense Orchestrator is available when needed, this solution has allowed the security team to have better productivity thanks to the fact that their workflow is less intense because they can carry out their tasks with the help of this software, in addition to the presence If there is an error, they can be overcome quickly because their support team is efficient.

Cisco Defense Orchestrator is a software that is easy to implement, although knowledge is required for it, but if you do not have it, going to its valuable support team is very helpful. If done knowingly, this process can take less than two hours. Having a simple implementation is a valuable feature because it saves time and expense.

We used the on box management platform. This required API usage for automating things. It was not scalable and a lot of features are not there. There are platforms like manage engine, but they are not Cisco FP native and had limitations as well.

Incentivized

1) Fairly okay overall but definitely needs improvement overall Vs the other products available in the market like Palo Alto XSOAR 2) Cost wise okay at the beginning but when client demands add-ons/ more features/customization tailored to their needs, Tufin Orchestration Suite recommends RFE / custom costs/development costs 3) USP feature is cool to use overall Vs FireMon 4) Tufin ProServ needs to buckle-up/Support compared to other competitors in the market

Incentivized

• Much faster management.
• Can access firewall without having to go on site if the VPN tunnel is down.

Incentivized

• I think if you correctly configure your SIEM, you don't need Tufin. You can correlate a lot of things for firewalls.

Incentivized