Skybox Security vs. Tufin Orchestration Suite

For any customer that has a complex network environment spanning globally, skybox helps manage firewall policy compliance for many vendors quite easy. It has a variety of security and network vendors that it is compatible with in its database.

Well suited scenarios - 1) Firewall Policy / Ruleset management 2) Where all the products are from Tufin like TOS ST, SC, SecureApp etc 3) Where customer focuses on ruleset compliance - USP violations, and other features Less suited - 1) Agnostic/distributed environment - Tough with integrate with 3rd party like CyberArk 2) FW recertification processes / exception process when complex process is included

Incentivized

• Skybox manages compliance for firewalls better than we have seen with other tools.
• Skybox integrates into standard change management tools so change control can flow through Skybox and assist with all decisions to implement a change.
• The Skybox network map is more detailed than other management tools showing us paths other tools didn't find.

Incentivized

• Firewall management
• Compliance reports
• Unused rules and optimization
• Policy Automation

Incentivized

• User experience. On the first approach, it's not the simplest tool that I have ever used.
• Web-based console. In my honest opinion it's very important [to have] this type of functionality to extend the use of Skybox.
• Too many updates of the product.

Incentivized

• Palo Alto Networks Integration
• Better/more user friendly api for integration with ticketing systems
• Web UI structure is not user-friendly

Incentivized

It is user friendly and quite easy to use. It centralizes all info in one portal and generates good reports to help you visualize and assess your change management decision

The support team needs to be improved especially in their response and awareness about recent bugs in their solution. For example, sometimes they are not aware about how to integrate specific vendors like Microsoft Azure and they still don't have answers to it until now.

CloudGuard Dome9 does not have a suite for an on-premise datacenter.

Incentivized

1) Fairly okay overall but definitely needs improvement overall Vs the other products available in the market like Palo Alto XSOAR 2) Cost wise okay at the beginning but when client demands add-ons/ more features/customization tailored to their needs, Tufin Orchestration Suite recommends RFE / custom costs/development costs 3) USP feature is cool to use overall Vs FireMon 4) Tufin ProServ needs to buckle-up/Support compared to other competitors in the market

Incentivized

• Overall ROI is good as this product is an augmentation for us but we already have a mature security program with an experienced security team so the ROI is high.

Incentivized

• I think if you correctly configure your SIEM, you don't need Tufin. You can correlate a lot of things for firewalls.

Incentivized