1. Home
  2. Firewall Security Management Software
  3. Tufin Orchestration Suite Reviews
  4. User Review of Tufin Orchestration Suite
Tufin for Enterprise and Firewall Migration Success
March 01, 2018

Tufin for Enterprise and Firewall Migration Success

Alex Waitkus, CISSP-ISSAP, OSCP | TrustRadius Reviewer
Score 7 out of 10
Vetted Review
Verified User

Overall Satisfaction with Tufin

Tufin is used to help with config audit and review of security policies/ACLs for multiple firewalls. We are working to implement the secure change feature.
  • Security Policy/ACL overview showing hit count and shadow policies
  • Configuration change tracking by user
  • Detailed reports on the firewall configuration
  • Palo Alto Networks Integration
  • Better/more user friendly api for integration with ticketing systems
  • Web UI structure is not user-friendly
  • Tufin has helped increase firewall migration time letting us build new policies instead of migrating garbage in
  • Tufin helps to identify who changed what when so if a change impacts access Tufin can help find what change was made from a single location
  • Tufin has a great reporting feature - except for Palo Alto right now - that helps to review and audit policy, flagging overly permissive and shadow or partially shadow policies.
Tufin and AlgoSec both provide a lot of the same features. I would say the choice of the two depend on your overall objective and use case. Both tools have features to accomplish different things. For firewall policy review, they are about the same in my opinion. We are currently evaluating RedSeal and don't have enough data to compare. RedSeal may lack some of the change features but appears to give the same level of reporting functionality.
Tufin is great for reviewing firewall policy and changes, it makes tracking access down and auditing policy a breeze. We are replacing firewalls and Tufin has been a great help to review/audit/create new policies. We are finding that Tufin is lacking for use with Palo Alto. You can either work through Panorama and lose a lot of reporting or the firewall and lose the security policy. Tufin has stated they are working on this but it is the biggest issue we are facing.