Name: Tufin Orchestration Suite and VMware NSX
Uploaded: 2018-05-21T20:18:20.000Z
Duration: 3 min 19 s
Description: Tufin Orchestration Suite and VMware NSX

Help Desk

Web and Video Conferencing

Customer Support

Augmented Reality Development

Performance Testing

Development

School Management

Education

Business Intelligence (BI)

Collaboration

Data Analytics  and BI Services

Data Discovery and Visualization

Digital Rights Management (DRM)

Document Management

Enhanced 911 (E911)

Enterprise Generative AI

Integrated Workplace Management (IWMS)

Payment Facilitation

Enterprise

Accounting

Trust Management

Finance and Accounting

Applicant Tracking

Corporate Learning Management

Corporate Volunteering

Employee Monitoring

HR Management

Payroll

Recruitment Agency

Stock Option Plan Administration

Talent Intelligence

Talent Management

Video Interview

Workforce Analytics

Workforce Management

Human Resources

3D Printing

AI Governance

Application Performance Management (APM)

Cloud Migration

Cloud Storage

DevSecOps

Firewall

Fraud Detection

Hadoop-Related

Integration Platform as a Service (iPaaS)

Network Performance Monitoring

Product Implementation Services

Robotic Process Automation (RPA)

Telecom Expense Management (TEM)

Web Scraping

Zero Trust Security Solutions

Information Technology

A/B Testing

Ad Serving & Retargeting

All-in-One Marketing

Appointment Scheduling

Audience Engagement

Content Management

Cross-Channel Campaign Management

Email Marketing

Email Testing

Employee Advocacy

Enterprise Marketing Management

Marketing Automation

Social Media Advertising

Social Media Management

Survey & Forms Building

Web Analytics

Wholesale Marketplace

Marketing

Job Site Management

Project Management

Waste Management

Professional Services

Customer Relationship Management (CRM)

Social Commerce

Sales

Cloud Access Security Brokers

Secure Access Service Edge (SASE)

User and Entity Behavior Analytics (UEBA)

Security

Camp Management

Digital Forensics

Estate Planning

Vertical-Specific

Find top rated software and services based on in-depth reviews from verified users. 400+ software categories including PaaS, NoSQL, BI, HR, and more.

FireMon

AlgoSec

Skybox Security

Akamai Guardicore Segmentation

Akamai

NetBrain Technologies

Cisco Identity Services Engine (ISE)

Cisco

Cisco TrustSec

Red Hat Ansible Automation Platform

Red Hat

Check Point CloudGuard Posture Management

Check Point Software Technologies

Cisco Meraki MX

### Firewall Management
Users consistently highlight Tufin's firewall management capabilities as a standout feature, praising its ability to automate firewall rules provisioning and auditing compliance. The platform's centralized firewall management and automated policy implementation are commended for streamlining firewall operations and reducing human error gaps. Additionally, users appreciate Tufin's support for various firewall vendors and its capacity to provide a unified view of infrastructure security policies across multiple platforms. Despite some minor vendor compatibility issues reported by a few users, the overall sentiment towards Tufin's firewall management remains positive, with users acknowledging its effectiveness in simplifying firewall policy management in complex network environments.

### Network Security
Reviewers consistently highlight Tufin's network security capabilities as a key strength, emphasizing its ability to provide comprehensive visibility and control over network configurations. Users appreciate the platform's support for multiple vendors and its automation features that streamline security management tasks. Tufin's network segmentation and micro-segmentation functionalities are also commended for enhancing protection against cyber threats. Additionally, the platform's network visibility tools are lauded for aiding in the identification of weak security policies and facilitating efficient troubleshooting in complex network environments.

### Access Control and Permissions
Opinions vary widely regarding Tufin's efficacy in managing access control and permissions. Users appreciate the reduced workload in implementing new firewall access requests and the enhanced visibility into the company's network topology. The ability to bring access requests closer to end-users and provide real-time automation of ACL communication requests is seen as a significant benefit. Additionally, users find Tufin instrumental in troubleshooting scenarios, offering well-tracked changes, automation of ACL application, and valuable audit reports. The tool's integration capabilities with various devices and services like ServiceNow are highlighted as strengths, enabling centralized policy management and compliance reporting. Users also value the ease of automating ACL requests and managing firewalls through Tufin's intuitive interface and topology visualization.

### Policy Management
Users widely praise Tufin's policy management capabilities, highlighting its centralized firewall management and automated policy implementation as key strengths. They appreciate the comprehensive set of tools provided for managing network security policies effectively. While some users mention the need to set up criteria themselves, overall, Tufin's policy management features are seen as beneficial for enhancing security and compliance. The platform's ability to automate policy configuration, generate compliance reports, and streamline policy changes across multiple firewalls is particularly valued by users. Additionally, the integration with various devices and the centralized view of policies contribute to a positive user experience.

### Compliance and Auditing
Users generally praise Tufin Orchestration Suite for its robust compliance and auditing capabilities. The tool is commended for its ability to streamline policy management, automate firewall rules, and generate comprehensive compliance reports. Users highlight how Tufin aids in meeting internal and external audit requirements efficiently. The platform's user-friendly interface and real-time network visibility contribute to its effectiveness in ensuring compliance with industry standards. Additionally, Tufin's automation features are lauded for reducing human error gaps and facilitating smooth audit processes.

### Security Policy Optimization
Users consistently highlight Tufin's security policy optimization as a standout feature, praising its ability to streamline rule management, enhance compliance, and facilitate efficient audits. The platform's optimization capabilities are commended for simplifying policy analysis, automating rule cleanup, and providing a comprehensive view of network configurations. Reviewers emphasize that Tufin excels in optimizing firewall rules, eliminating redundant policies, and maintaining a clean rule base. The tool's effectiveness in identifying and removing unused objects further contributes to its reputation as a top-tier solution for security policy optimization.

### Automation and Efficiency
Users consistently laud Tufin's automation features for firewall rules provisioning, emphasizing the time saved and the ease of managing multiple firewalls simultaneously. The tool's ability to automate policy changes and provide real-time network topology is widely appreciated for streamlining tasks and enhancing operational efficiency. Additionally, users find Tufin's automation capabilities beneficial for conducting audits, identifying weak security policies, and ensuring compliance with regulations.

### Multi-Vendor Integration
Users across various reviews consistently highlight Tufin NSPM's robust capabilities in managing multiple vendor firewalls. The platform's ability to provide a unified view, automate policy analysis, and optimize rulesets across different firewall products from various vendors is widely appreciated. While some users mention minor technical bugs and compatibility issues with certain vendors, the overall sentiment leans towards Tufin NSPM being a reliable and efficient solution for multi-vendor integration in complex network environments.

### Change Management
Users generally praise Tufin Orchestration Suite's change management capabilities. They appreciate the ease of adding functions to the change process, tracking revisions, and automating changes to free up resources. The tool's ability to log approved and unapproved changes within firewalls, identify recent changes quickly, and provide a structured workflow for firewall change requests is well-received. Users find value in the centralized management of policy changes, compliance support, and the ability to track changes across the environment. Additionally, the tool's visibility into ongoing changes, configuration modifications, and network segmentation is highlighted as beneficial for audit and troubleshooting purposes. Despite some users mentioning the need for end-to-end automation of network security changes, the overall sentiment leans towards positive experiences with Tufin Orchestration Suite's change management functionalities.

### Security and Risk Analysis
Users consistently highlight Tufin's security and risk analysis as a standout feature, praising its ability to identify weak security policies and reduce risks effectively. The platform's risk matrix and audit functionalities are commended for providing valuable insights into potential vulnerabilities and aiding in compliance efforts. Additionally, users appreciate Tufin's support in aligning with digital transformation initiatives and enhancing overall security posture.

### Network Topology and Visualization
User opinions on Tufin's network topology and visualization capabilities vary widely. While some users praise the ease of providing real-time network topology and the practicality of the APG function for setting policies, others find the topology challenging to handle in large and varied networks like Airbus'. The interactive topology map feature is highlighted as very useful for troubleshooting downtime issues, but some users express difficulty in merging customer needs with Tufin's roadmap. Despite mixed reviews, the consensus seems to be that Tufin's network topology and visualization tools offer valuable insights for network administrators and security personnel.

### Reporting and Insights
Users across various reviews express a range of opinions regarding Tufin NSPM's reporting and insights features. While some users appreciate the clear visibility and audit reports that help in identifying network gaps and troubleshooting scenarios, others highlight concerns about the limitations in creating customized reports and delays in implementing improvements. The ability of Tufin NSPM to provide real-time network topology and aid in generating audit reports efficiently is acknowledged as a strong point by many users. However, there are also mentions of areas that require enhancement, such as the analysis and audit sections. Despite mixed feedback, the consensus seems to be that Tufin NSPM's reporting and insights capabilities play a significant role in network security management.

Users have highlighted several recommendations for Tufin based on their experiences. The three most common recommendations are as follows: 

1. Users advise exploring other products in the market, such as PALO ALTO XSOAR and FireMon, to consider alternative solutions that may better meet specific needs or offer additional features. 

2. When choosing Tufin ProServ, it is important to ensure they deliver on their promises and take ownership of tasks, planning, and implementation. 

3. There is a need for improvement in Tufin Support in terms of flexibility and promptness. Users express a desire for more responsive and adaptable support services. 

These recommendations provide valuable insights from users about their experiences with Tufin, offering suggestions for exploring alternative options, ensuring accountability from Tufin ProServ, and enhancing customer support services.

Intuitive and Easy to Navigate: Many users have praised Tufin's user interface, stating that it is intuitive and easy to navigate. This makes tasks easier for them as they can quickly find the features they need without any confusion.

Wide Range of Firewall Support: The fact that Tufin supports a wide range of firewalls and network devices has been highly beneficial for users. They appreciate the flexibility and convenience of being able to manage different brand network devices in a single platform.

Helpful Compliance Guides and Suggestions: Users have found Tufin's compliance guides and suggestions extremely helpful in resolving conflicts and ensuring system check. These resources provide valuable insights into best practices, allowing users to maintain a compliant infrastructure.

1. Manual setup and policy management: Several users have found that Tufin requires a significant amount of manual setup for tracking and policy management, which can be time-consuming. This has been mentioned by multiple reviewers who expressed frustration with the amount of manual work involved.

2. Limited support for other brands: Some users have mentioned that Tufin does not support a wide range of other brands, which poses challenges in managing diverse network environments. They believe it would be better if Tufin had broader compatibility with different firewall vendors.

3. Complex licensing system: The complexity of Tufin's licensing system has been brought up by several users, who feel that it could be more flexible and streamlined, especially for smaller customers. This feedback suggests that simplifying the licensing process would improve the overall user experience.

Israeli company Tufin offers a firewall security management offering via the Tufin Orchestration Suite, including SecureApp for managing network connectivity, SecureChange network change automation, and SecureTrack multi-vendor and next-generation firewall management.

Tufin Orchestration Suite

Firewall security management software model and analyze network infrastructure and orchestrate security device policies.

Firewall Security Management

Likelihood to Recommend

Policy planning and rule management

Automated Policy Orchestration

Device Discovery

Policy Compliance Auditing

Attack Path Simulation Testing

Anomalous Event or Behavior Deviation

Vulnerability Scans

Firewall Rule Cleanup

Tufin

Tufin Orchestration Suite and VMware NSX

This recorded demonstration includes Tufin Orchestration Suite’s support for VMware NSX. Integrated functional areas including topology and path mapping, access change submission, access change design, risk assessment, change implementation, and change validation both in Tufin Orchestration Suite and VMware vSphere.

Tufin is the first network security policy management provider to support change provisioning for VMware NSX. The Tufin Orchestration Suite makes network security policy management across the network and hybrid cloud easy.

Firewall Security Management Software supports monitoring and configuration of firewalls from a central dashboard

Monitor the effectiveness of network security infrastructure

Automatically brings together all security controls in one place, automates changes and collapses risks

Ability to automatically find all devices connected to the network

Automatic identification of gaps in compliance, remediation, and generation of  compliance reports for auditors

Simulation of potential attack paths to expose network exposure

Ability to pinpoint unusual events or trends

Network scans to pinpoint vulnerable locations for remediation

Ability to detect and cleanup rules that are either partially or completely unused, expired or shadowed

Cisco Adaptive Security Appliance (ASA) Software

Check Point 12000 Appliances

Palo Alto Networks Advanced URL Filtering

Cisco Secure Firewall Management Center

Cisco ASA 5500-X with FirePOWER Services

Shift Supervisor

Tufin Orchestration Suite 2021-06-12 07:42:29

Checkpoint Halo

Palo Alto Networks Cortex XSOAR

Splunk Application Performance Monitoring (APM) on observability cloud

Tufin Orchestration Suite 2021-08-20 12:35:12

Palo Alto Networks Prisma Access

RedSeal

Check Point Quantum Smart-1 Security Management

FrontStream Panorama

Security Architect

Tufin 2018-03-01 09:16:13

McAfee Total Protection (discontinued)

Imperva Data Security

Trellix Endpoint Security ENS

Trellix Intrusion Prevention System

Keysight Application and Threat Intelligence

Arbor DDoS

Keysight Bypass Switches

Tufin 2018-02-15 01:04:33

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

User friendly

Easy to integrate

Support team

Professional services

Api calls

Ticketing systems

3rd party

Web ui

3rd party tools

Not user friendly

Policy management

Network topology

Configuration change

Change tracking

Detailed reports

Home

Firewall Security Management Software

We were having Firewall solutions from different vendors and whenever we needed to change any policy/ rules, it seemed a humongous task until we got the Tufin Orchestration Suite. With Tufin solution, we are able to push the policies according to our need on all the relevant firewalls in one go to allow/block the traffic.

Firewall management
Compliance reports
Unused rules and optimization
Policy Automation

Cost is too high
Documentation not available easily
Customer Support

Single Platform to manage all firewalls
Industry based standard compliance reports like HIPAA, ISO, GDPR
Firewall Rules Clean-up
Customization is bit limited
Troubleshooting is difficult with limited commands
CLI not user friendly

Cisco Secure Firewall Management Center (formerly Firepower Management Center)

Check Point 12000 Appliances, Palo Alto Networks URL Filtering PAN-DB, Cisco ASA 5500-X with FirePOWER Services

We use Tufin Orchestration Suite products for various clients and for US EST biggie Insurance company. We implement/proposed it to the client to solve the problem of Firewall Audit / Firewall rule reviews, recertifying FW rules, identifying UNUSED rules with no hits. It helps our clients in managing FW rulesets / and keeping security posture of the ruleset intact. We also integrated it with Service NOW / ITSM solution

Firewall Policy Management
Workflows and its integration with Firewall change process
Capturing LAST_HITS data for FW rules

Tufin SecureChange needs to be more agnostic, easy to integrate with Service NOW
JSON payload identification for Tufin SecureChange while integrating it with SNOW
customization should be made more easy, like custom dashboarding
Tufin Orchestration Suite Professional services experience could be also improved overall - Taking more ownership
API calls to 3rd party tools should be more flexible

35,000 USD/Grand extra client had to pay for add-on licensing (HA)
Good FW policy management feature overall ( LAST_HITS)
Tufin Orchestration Suite again asking for OS upgrade to TOS Aurora

FireMon, AlgoSec and Palo Alto Networks Cortex XSOAR (formerly Demisto)

Cisco ASA, Checkpoint Halo, Splunk Application Performance Monitoring (APM), FireMon

Tufin is used to help with config audit and review of security policies/ACLs for multiple firewalls. We are working to implement the secure change feature.

Security Policy/ACL overview showing hit count and shadow policies
Configuration change tracking by user
Detailed reports on the firewall configuration

Palo Alto Networks Integration
Better/more user friendly api for integration with ticketing systems
Web UI structure is not user-friendly

Tufin has helped increase firewall migration time letting us build new policies instead of migrating garbage in
Tufin helps to identify who changed what when so if a change impacts access Tufin can help find what change was made from a single location
Tufin has a great reporting feature - except for Palo Alto right now - that helps to review and audit policy, flagging overly permissive and shadow or partially shadow policies.

Tufin Orchestration Suite

Overview

What is Tufin Orchestration Suite?