What users are saying about
17 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 9.2 out of 100
7 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 7 out of 100

Likelihood to Recommend

Palo Alto Panorama

We have multiple internal and external firewalls at our headquarters as well as firewalls at our remote locations. Users are always needing to access services and systems at our headquarters and when they tell us they don't have access we can use Panorama to view the traffic and see where they are getting denied. Without Panorama we would need to log into each firewall and see if they are getting denied with Panorama we get an overview of was is happening and it's amazing.
No photo available

Tufin Orchestration Suite

Tufin is great for reviewing firewall policy and changes, it makes tracking access down and auditing policy a breeze. We are replacing firewalls and Tufin has been a great help to review/audit/create new policies. We are finding that Tufin is lacking for use with Palo Alto. You can either work through Panorama and lose a lot of reporting or the firewall and lose the security policy. Tufin has stated they are working on this but it is the biggest issue we are facing.
Alex Waitkus, CISSP-ISSAP, OSCP profile photo

Feature Rating Comparison

Firewall Security Management

Palo Alto Panorama
8.8
Tufin Orchestration Suite
Policy planning and rule management
Palo Alto Panorama
9.0
Tufin Orchestration Suite
Automated Policy Orchestration
Palo Alto Panorama
9.0
Tufin Orchestration Suite
Device Discovery
Palo Alto Panorama
9.3
Tufin Orchestration Suite
Policy Compliance Auditing
Palo Alto Panorama
8.7
Tufin Orchestration Suite
Attack Path Simulation Testing
Palo Alto Panorama
8.5
Tufin Orchestration Suite
Anomalous Event or Behavior Deviation
Palo Alto Panorama
9.0
Tufin Orchestration Suite
Vulnerability Scans
Palo Alto Panorama
9.0
Tufin Orchestration Suite
Firewall Rule Cleanup
Palo Alto Panorama
7.7
Tufin Orchestration Suite

Pros

Palo Alto Panorama

  • Being able to create common rules that can be maintained on multiple firewalls is very beneficial to our management of the different functional needs of the firewalls.
  • Using templates to manage regional requirements is helpful for rolling out changes in the networking side, from user managemnet globally to SEIM/Syslog collection regionally, being able to stack templates helps deliver the necessary changes across multiple firewalls.
  • Panorama's Dashboard and ACC provides useful information that can be set to see All firewalls, or just certain groups of firewalls. Since each group of firewalls has different applications running through them, being able to isolate one group at a time helps identify if there are errant devices causing unexpected traffic, and what type of traffic it is.
Bruce Bennett profile photo

Tufin Orchestration Suite

  • If you set your zones correctly Tufin will create your network topology map.
  • You can find which object or rule you want easily for all firewalls in the network.
  • Tufin provides more features for Checkpoint.
No photo available

Cons

Palo Alto Panorama

  • It needs improvement for the threats categorized as "high" severity. There are lot of false positives. Therefore finding real ones is hard in "high" category.
  • The threat/traffic view needs improvement. It needs at least a feature to sort based on columns. Downloading and parsing using Excel takes a lot of time.
No photo available

Tufin Orchestration Suite

  • Palo Alto Networks Integration
  • Better/more user friendly api for integration with ticketing systems
  • Web UI structure is not user-friendly
Alex Waitkus, CISSP-ISSAP, OSCP profile photo

Likelihood to Renew

Palo Alto Panorama

Palo Alto Panorama 9.0
Based on 1 answer
Panorama has given us much more than we expected and the support for the product, by Palo Alto Networks has been great. We would like to see some improvements that I mentioned in another review, like scheduling changes, but overall Panorama has provided a very capable product and we are very happy with it.
Bruce Bennett profile photo

Tufin Orchestration Suite

No score
No answers yet
No answers on this topic

Usability

Palo Alto Panorama

Palo Alto Panorama 8.0
Based on 1 answer
My biggest issue is not being able to schedule changes or software pushes, other than that the software is very easy to use after using it for a short period of time.
Bruce Bennett profile photo

Tufin Orchestration Suite

No score
No answers yet
No answers on this topic

Support

Palo Alto Panorama

Palo Alto Panorama 8.7
Based on 3 answers
They have always been able to resolve our issues promptly. We have only had one critical issue, and it was handled expediently.
No photo available

Tufin Orchestration Suite

No score
No answers yet
No answers on this topic

Alternatives Considered

Palo Alto Panorama

We have selected Panorama because it is the one which could only provide us management and control of PA firewalls. It would be very difficult to replace this with another solution due to the features provided and benefits no other vendor can provide under one console with complete satisfaction and stability.
Amit Gumber profile photo

Tufin Orchestration Suite

Tufin and AlgoSec both provide a lot of the same features. I would say the choice of the two depend on your overall objective and use case. Both tools have features to accomplish different things. For firewall policy review, they are about the same in my opinion. We are currently evaluating RedSeal and don't have enough data to compare. RedSeal may lack some of the change features but appears to give the same level of reporting functionality.
Alex Waitkus, CISSP-ISSAP, OSCP profile photo

Return on Investment

Palo Alto Panorama

  • At a previous company, I deployed Palo Alto firewalls to a data center, and 12 branch locations. This allowed us to replace MPLS links with IPSec tunnels between the sites. This resulted in significantly more throughput and soft savings of increased productivity. However, the estimated net of $220,000 in hard savings over five years is what is most impressive. I could not have effectively managed all those devices without Palo Alto Panorama.
No photo available

Tufin Orchestration Suite

  • I think if you correctly configure your SIEM, you don't need Tufin. You can correlate a lot of things for firewalls.
No photo available

Pricing Details

Palo Alto Panorama

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Tufin Orchestration Suite

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Rating Summary

Likelihood to Recommend

Palo Alto Panorama
9.6
Tufin Orchestration Suite
5.5

Likelihood to Renew

Palo Alto Panorama
9.0
Tufin Orchestration Suite

Usability

Palo Alto Panorama
8.0
Tufin Orchestration Suite

Support

Palo Alto Panorama
8.7
Tufin Orchestration Suite

Add comparison