Skybox Security vs. Tripwire IP360

For any customer that has a complex network environment spanning globally, skybox helps manage firewall policy compliance for many vendors quite easy. It has a variety of security and network vendors that it is compatible with in its database.

I think Tripwire IP360 is suited for any environment as long as the leadership is willing to support the outcome.

Incentivized

• Skybox manages compliance for firewalls better than we have seen with other tools.
• Skybox integrates into standard change management tools so change control can flow through Skybox and assist with all decisions to implement a change.
• The Skybox network map is more detailed than other management tools showing us paths other tools didn't find.

Incentivized

• I find the Tripwire IP360 reporting features extraordinary. I can run various audit and inventory reports at any point since the inception of the tool. For example, I can execute a report on the history of an asset, which establishes a baseline and can be used to support many security objectives.
• Scan scheduling. This feature allows the tool to run independently without human intervention. I don’t have time to manually run scans of different departments. Therefore, I schedule all my audits and check the report the next day. This has worked brilliantly for 3 years now.
• Automated update of the vulnerability rules. Automatically updating these rules and binding them to the scans preserves the tool relevancy during audits

Incentivized

• User experience. On the first approach, it's not the simplest tool that I have ever used.
• Web-based console. In my honest opinion it's very important [to have] this type of functionality to extend the use of Skybox.
• Too many updates of the product.

Incentivized

• I’d like to see IP360 have the ability to discover additional security appliances such as PaloAlto and Fortinet appliances.

Incentivized

It is user friendly and quite easy to use. It centralizes all info in one portal and generates good reports to help you visualize and assess your change management decision

The support team needs to be improved especially in their response and awareness about recent bugs in their solution. For example, sometimes they are not aware about how to integrate specific vendors like Microsoft Azure and they still don't have answers to it until now.

CloudGuard Dome9 does not have a suite for an on-premise datacenter.

Incentivized

I chose Tripwire IP360 because of its flexible reporting features

Incentivized

• Overall ROI is good as this product is an augmentation for us but we already have a mature security program with an experienced security team so the ROI is high.

Incentivized

• The biggest impact Tripwire has had in the organization is risk reduction. Since the inception of the tool our vulnerabilities have been reduced by 40%.

Incentivized