Akamai Guardicore Segmentation vs. Tufin Orchestration Suite

This is the best possible solution for enterprise-level organizations where server counts will be in the thousands. To manage these and understand the communication can be very cumbersome without this tool. Ease of creation map zone and application-wise can be relaxing to OS teams and support teams as well. There is no limit to labeling schema of servers and it gives the freedom to do so.

Incentivized

If there is any organization who is having more then 10-15 firewalls and from different vendors, Tufin Orchestration Suite can be best suited there as it can manage all the firewalls from one single pane of glass and push the policy, and get the Standard based compliance reports for the rules created on the firewalls.

Incentivized

• Network traffic flow within environment of organization.
• Creating maps for visibility and drill down is a key feature.
• Labelling of servers can be done via running script.
• Alerts can be sensitized for the traffic not seen.

Incentivized

• If you set your zones correctly Tufin will create your network topology map.
• You can find which object or rule you want easily for all firewalls in the network.
• Tufin provides more features for Checkpoint.

Incentivized

• Limited support to legacy infrastructure.
• Integration with third party is a bit tedious.
• Awaiting support for Kubernetes in the next version.

Incentivized

• Tufin SecureChange needs to be more agnostic, easy to integrate with Service NOW
• JSON payload identification for Tufin SecureChange while integrating it with SNOW
• customization should be made more easy, like custom dashboarding
• Tufin Orchestration Suite Professional services experience could be also improved overall - Taking more ownership
• API calls to 3rd party tools should be more flexible

Incentivized

The solution is deployed throughout the organization. Teams are working and integrating it with the help desk tool wherever required. Helps in identifying the network traffic flows in lateral movement and east and west as well. Allows policies by default and later fine-tuning to be done to narrow it and enforce blocking action. Exporting reports from the tool is easy and can be observed for any issues.

Incentivized

Support has been available 24*7. It also depends on criticality but support is available. Also, the right expertise from the team helps in identifying the issue quickly and this helps in less production downtime if required. The ticket is resolved with RCA.

Incentivized

1) No limit to labeling schema. 2) Ease of creating maps with respect to zone, environment, subnets, etc. 3) Ease of creating policies and publishing the same. 4) Deception 5) Integration with monitoring tool (grafana) 6) Changes in the agent can be considered if there are legacy systems, time-consuming but can be achieved with the right information.

Incentivized

1) Fairly okay overall but definitely needs improvement overall Vs the other products available in the market like Palo Alto XSOAR 2) Cost wise okay at the beginning but when client demands add-ons/ more features/customization tailored to their needs, Tufin Orchestration Suite recommends RFE / custom costs/development costs 3) USP feature is cool to use overall Vs FireMon 4) Tufin ProServ needs to buckle-up/Support compared to other competitors in the market

Incentivized

• Blocking unwarranted traffic can really boost security of organization.
• Alerts can be triggered to SIEM servers and help in timely action.
• Need to be very careful before configuring and publishing block policies in the production environment.

Incentivized

• Tufin has helped increase firewall migration time letting us build new policies instead of migrating garbage in
• Tufin helps to identify who changed what when so if a change impacts access Tufin can help find what change was made from a single location
• Tufin has a great reporting feature - except for Palo Alto right now - that helps to review and audit policy, flagging overly permissive and shadow or partially shadow policies.

Incentivized