Skybox Security vs. Tufin Orchestration Suite

For any customer that has a complex network environment spanning globally, skybox helps manage firewall policy compliance for many vendors quite easy. It has a variety of security and network vendors that it is compatible with in its database.

If there is any organization who is having more then 10-15 firewalls and from different vendors, Tufin Orchestration Suite can be best suited there as it can manage all the firewalls from one single pane of glass and push the policy, and get the Standard based compliance reports for the rules created on the firewalls.

Incentivized

• Change tracking
• Configuration compliance
• Network map

Incentivized

• If you set your zones correctly Tufin will create your network topology map.
• You can find which object or rule you want easily for all firewalls in the network.
• Tufin provides more features for Checkpoint.

Incentivized

• It doesn't support and integrate with Microsoft Azure
• The pricing is quite high compared to others
• There are a lot of bugs in the solution
• The implementation is not that easy and takes a long time, it needs to be more automated.

• Tufin SecureChange needs to be more agnostic, easy to integrate with Service NOW
• JSON payload identification for Tufin SecureChange while integrating it with SNOW
• customization should be made more easy, like custom dashboarding
• Tufin Orchestration Suite Professional services experience could be also improved overall - Taking more ownership
• API calls to 3rd party tools should be more flexible

Incentivized

It is user friendly and quite easy to use. It centralizes all info in one portal and generates good reports to help you visualize and assess your change management decision

The support team needs to be improved especially in their response and awareness about recent bugs in their solution. For example, sometimes they are not aware about how to integrate specific vendors like Microsoft Azure and they still don't have answers to it until now.

Skybox performs better than Tufin and RedSeal and while AlgoSec performs as well, it requires far more manual configuration and customization than Skybox

Incentivized

1) Fairly okay overall but definitely needs improvement overall Vs the other products available in the market like Palo Alto XSOAR 2) Cost wise okay at the beginning but when client demands add-ons/ more features/customization tailored to their needs, Tufin Orchestration Suite recommends RFE / custom costs/development costs 3) USP feature is cool to use overall Vs FireMon 4) Tufin ProServ needs to buckle-up/Support compared to other competitors in the market

Incentivized

• Reduces cost in terms of time and money to spend in remediation activity.
• Improve the network topology and then it's possibile to reduce cost of network/security appliances where they're not necessary.
• The cost of the solution is not trivial when the number of network appliances is big.

Incentivized

• Tufin has helped increase firewall migration time letting us build new policies instead of migrating garbage in
• Tufin helps to identify who changed what when so if a change impacts access Tufin can help find what change was made from a single location
• Tufin has a great reporting feature - except for Palo Alto right now - that helps to review and audit policy, flagging overly permissive and shadow or partially shadow policies.

Incentivized