ManageEngine Firewall Analyzer vs. Tufin Orchestration Suite

Offering enhanced network security, performance, and connectivity, it is well as used in a business setting. Features including application control, web content filtering, firewall, IP address, application control, VPN, and good advanced threat protection. With enhanced features and advanced threat protection you get an awesome performance cost effective firewall device.

Incentivized

Well suited scenarios - 1) Firewall Policy / Ruleset management 2) Where all the products are from Tufin like TOS ST, SC, SecureApp etc 3) Where customer focuses on ruleset compliance - USP violations, and other features Less suited - 1) Agnostic/distributed environment - Tough with integrate with 3rd party like CyberArk 2) FW recertification processes / exception process when complex process is included

Incentivized

• Live traffic monitor: Firewall Analyzer lets us monitor traffic as it flows through the firewalls. It also breaks it down according to what type of traffic (e.g., web, mail, FTP, etc.) it is. It lists the tops hosts, the top users from traffic, and a lot of other useful statistics, all in a very visual format.
• Security Monitoring: Another good visual graph Firewall Analyzer provides is the security one, which shows us if we're being attacked, from where, by what, how many, etc. It will also send us alerts when there's an alarm of any kind on the firewall.
• Reporting: We can run all sorts of custom reports, and that helps us both with compliance and informing management as to what's going on. It would be difficult to describe all the various kinds of things we can include in these reports, but they are extensive.

Incentivized

• Firewall management
• Compliance reports
• Unused rules and optimization
• Policy Automation

Incentivized

• Configuration is easy and you can expect all the features and modules.
• Simple and intuitive dashboard.
• Firewall Analyzer helps us to gain insight into security threat and traffic.
• Analyze the user behavior.

Incentivized

• Palo Alto Networks Integration
• Better/more user friendly api for integration with ticketing systems
• Web UI structure is not user-friendly

Incentivized

It is fast to
download the test software and implement. It takes some sometime to understand the
ways you have to on board your firewalls into it. It is nice to buy and just
activate the product that you have already installed. Maybe some wizards could
be improved in order to accelerate these tasks.

ManageEngine was chosen over the use of AlgoSec as it slotted nicely with other Manage engine services we use for services such as active directory management. Other benefits include how lightweight and easy to install and set up it is. You can install it inside your network and start testing within 20 minutes.

Incentivized

1) Fairly okay overall but definitely needs improvement overall Vs the other products available in the market like Palo Alto XSOAR 2) Cost wise okay at the beginning but when client demands add-ons/ more features/customization tailored to their needs, Tufin Orchestration Suite recommends RFE / custom costs/development costs 3) USP feature is cool to use overall Vs FireMon 4) Tufin ProServ needs to buckle-up/Support compared to other competitors in the market

Incentivized

• Firewall Analyzer has definitely freed up a lot of IT's time, by congregating logs and displaying them in a more useful, visual way.
• The cost for licenses and proactive alerting, compared to the man-hours spent reactively through data, paid for itself in a few months.
• There was no negative impact to users, and only some to IT staff who had to train on the software, which mostly consisted of videos and playing around with the software.

Incentivized

• I think if you correctly configure your SIEM, you don't need Tufin. You can correlate a lot of things for firewalls.

Incentivized