TrustRadius: an HG Insights company

Trellix Network Security vs. Tufin Orchestration Suite

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Trellix Network Security

    Score8.6 out of 10
    Enterprise companies (1,001+ employees)
    Trellix Network Security (formerly FireEye Network Security and Forensics products) combines network traffic analysis and network forensics for attack analysis .

    $0

    per appliance/ per mbps

    Tufin Orchestration Suite

    Score8.9 out of 10
    N/AIsraeli company Tufin offers a firewall security management offering via the Tufin Orchestration Suite, including SecureApp for managing network connectivity, SecureChange network change automation, and SecureTrack multi-vendor and next-generation firewall management.N/A
    Pricing
    Trellix Network SecurityTufin Orchestration Suite
    Editions & Modules
    SmartVision
    $0
    per appliance/ per mbps
    No answers on this topic
    Offerings
    Pricing Offerings
    Trellix Network SecurityTufin Orchestration Suite
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    YesNo
    Entry-level Setup FeeOptionalNo setup fee
    Additional Details——
    More Pricing Information
    Features
    Trellix Network SecurityTufin Orchestration Suite
    Firewall Security Management
    Comparison of Firewall Security Management features of Trellix Network Security and Tufin Orchestration Suite
    Feature
    Trellix Network Security
    -
    Ratings
    Tufin Orchestration Suite
    8.2
    2 Ratings
    3% above category average
    Policy planning and rule management00 Ratings9.32 Ratings
    Automated Policy Orchestration00 Ratings7.92 Ratings
    Device Discovery00 Ratings6.92 Ratings
    Policy Compliance Auditing00 Ratings8.62 Ratings
    Attack Path Simulation Testing00 Ratings5.62 Ratings
    Anomalous Event or Behavior Deviation00 Ratings9.01 Ratings
    Vulnerability Scans00 Ratings9.01 Ratings
    Firewall Rule Cleanup00 Ratings9.32 Ratings
    Best Alternatives
    Trellix Network SecurityTufin Orchestration Suite
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    Cisco Identity Services Engine (ISE)
    Score9 out of 10
    Palo Alto Panorama
    Score8.7 out of 10
    Enterprises
    Cisco IOS Security
    Score9.6 out of 10
    Palo Alto Panorama
    Score8.7 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Trellix Network SecurityTufin Orchestration Suite
    Likelihood to Recommend
    9.0
    (1 ratings)
    7.3
    (4 ratings)
    User Testimonials
    Trellix Network SecurityTufin Orchestration Suite
    Likelihood to Recommend
    Trellix (Musarubra US LLC)
    It’s a dedicated Network Advanced Threat Detection and
    Prevention solution. Easy maintenance and low operating costs fit perfectly for
    SMEs. Variety of appliance selection makes NX the perfect choice for large
    enterprises. As it’s a dedicated solution with its own appliance, price is higher
    compared to NGTP add on solutions. FireEye is an ecosystem therefore when you’ve
    the EX or HX vice versa, you should be looking to NX. Otherwise, you’re missing
    the threat intel exchange on the network side reverse is the true. Sizing is
    important before the purchase, if you select a low end model for a busy network
    you lose your initial investment. For multiple NX deployments I highly
    recommend CMS. Without CMS you’ll lose the threat intel exchange and this will
    negatively reduce the risk scores.
    Incentivized
    Read full review
    Tufin
    Well suited scenarios - 1) Firewall Policy / Ruleset management 2) Where all the products are from Tufin like TOS ST, SC, SecureApp etc 3) Where customer focuses on ruleset compliance - USP violations, and other features Less suited - 1) Agnostic/distributed environment - Tough with integrate with 3rd party like CyberArk 2) FW recertification processes / exception process when complex process is included
    Incentivized
    Read full review
    Pros
    Trellix (Musarubra US LLC)
    • Advanced detection of targeted attacks.
    • Mandiant team effort is a big plus.
    • Inline mitigation capabilities particularly well.
    • Different deployment models for specific needs.
    • License and information sharing selection 1 way or 2 way mode.
    • Frequent updates.
    • Low false positive rates.
    • FireEye sandboxing is immune to sandboxing attacks.
    • Central management (CMS) capabilities for managing several NX's.
    • Extra IPS/IDS functionality in the product.
    • Smartvision specific to lateral movement detection.
    • Upgrades and updates with zero down time.
    • Local FireEye support is superb.
    • Multiple deployment scenarios (span, inline) in the same NX for different interface pairs.
    • SSL inspection support.
    • No need to maintain, build or updates the images. It's highly automatic.
    Incentivized
    Read full review
    Tufin
    • Firewall management
    • Compliance reports
    • Unused rules and optimization
    • Policy Automation
    Incentivized
    Read full review
    Cons
    Trellix (Musarubra US LLC)
    • Very first detected APT sample can pass the NX even it's inline blocking mode.
    • Performance optimization for busy networks is cumbersome.
    • CMS does not provide all the management capabilities, CLI or local config. Should be done for advanced customization.
    • Constant limitations of tcpdump/ packet capture for 10G interfaces.
    • IPS functionality is a bit cumbersome, not a full feature IPS, lack of signatures and customization of IPS signatures.
    • It's not a full NDR solution or a UBA solution.
    • Lack of device or user mapping.
    • Forensics is based on the specific APT. May not provide the whole story and need some additional tools.
    • You cannot make manual submission to NX (needs AX).
    • You cannot access the kernel directly for deep analy[sis] or troubleshooting (assist from FireEye Support should be taken).
    Incentivized
    Read full review
    Tufin
    • Palo Alto Networks Integration
    • Better/more user friendly api for integration with ticketing systems
    • Web UI structure is not user-friendly
    Incentivized
    Read full review
    Alternatives Considered
    Trellix (Musarubra US LLC)
    FireEye NX is a solid product. It gives you sustainable
    security throughout the organization. NX detection engines are more capable
    compared to others. Its catch rate is higher, FP rate is lower, [and] speed is
    awesome. NX can work for highly regulated environments with 1 way solution.
    Operation costs are much lower. Software quality is very good. It may have bugs, but these bugs do not compromise the security in general. SOC team loves the
    FireEye NX for its pinpoint detection capabilities. Local and partner support
    is exceptional.
    Incentivized
    Read full review
    Tufin
    1) Fairly okay overall but definitely needs improvement overall Vs the other products available in the market like Palo Alto XSOAR 2) Cost wise okay at the beginning but when client demands add-ons/ more features/customization tailored to their needs, Tufin Orchestration Suite recommends RFE / custom costs/development costs 3) USP feature is cool to use overall Vs FireMon 4) Tufin ProServ needs to buckle-up/Support compared to other competitors in the market
    Incentivized
    Read full review
    Return on Investment
    Trellix (Musarubra US LLC)
    • As [a] financial company on the digital markets, we need to be safeguard for 0days and targeted attacks. FireEye NX provides the best updated protection with its enhanced capabilities.
    • Security score based on detection/prevention metrics [is] very high ensuring the highest level of security.
    • APTs in our region successfully detected and mitigated by the NX.
    • For the ROI, in a six month period FireEye is paying off its [investment].
    • One negative thing, especially with increasing network bandwidths, [is that] you need to make [the] investment every two or three years.
    Incentivized
    Read full review
    Tufin
    • I think if you correctly configure your SIEM, you don't need Tufin. You can correlate a lot of things for firewalls.
    Incentivized
    Read full review
    ScreenShots

    Trellix Network Security Screenshots

    Screenshot of Network Security Dashboard- Summary view of alerts and threats to organizationScreenshot of Alerts dashboard- detailed information around alerts discovered by FireEye Network SecurityScreenshot of Configuration for FireEye Network Security Product.