Check Point CloudGuard Posture Management vs. Tufin Orchestration Suite

Dome9 can be used to have visibility into cloud assets and security policies across all the virtual networks, regions, and accounts on AWS, Azure and GCP. It also provides continuous enforcement of regulatory compliance standards and security best practices, with the ability to auto-remediate misconfigurations. So Dome9 is well suited for companies using cloud providers that want to take control of their resources.

Incentivized

If there is any organization who is having more then 10-15 firewalls and from different vendors, Tufin Orchestration Suite can be best suited there as it can manage all the firewalls from one single pane of glass and push the policy, and get the Standard based compliance reports for the rules created on the firewalls.

Incentivized

• Minimal false positives if configured properly.
• End to end visibility in real-time.
• Multi platform monitoring.

Incentivized

• If you set your zones correctly Tufin will create your network topology map.
• You can find which object or rule you want easily for all firewalls in the network.
• Tufin provides more features for Checkpoint.

Incentivized

• Needs to add features for an on-premise cloud.
• Cost is a little high.

Incentivized

• Tufin SecureChange needs to be more agnostic, easy to integrate with Service NOW
• JSON payload identification for Tufin SecureChange while integrating it with SNOW
• customization should be made more easy, like custom dashboarding
• Tufin Orchestration Suite Professional services experience could be also improved overall - Taking more ownership
• API calls to 3rd party tools should be more flexible

Incentivized

Is easy to use, and the standad configuration is well prepared.

Incentivized

Checkpoint support is great. They provide great SLAs and they comply with service times accordingly.

Incentivized

First and foremost reason of our client selecting CheckPoint CloudGuard Posture Management / Dome9 was because they already had CheckPoint Firewalls which are in active use e.g. R75.40 and R82.x products. Customization Vs these other Vendors is another great asset Reporting is one more standout feature, + Multi-cloud capabilities Centralized dashboarding is smooth to navigate as compared to other Vendors Syslog handling is much better as compared to some other vendors , Memory and space issues if planned well are less

Incentivized

1) Fairly okay overall but definitely needs improvement overall Vs the other products available in the market like Palo Alto XSOAR 2) Cost wise okay at the beginning but when client demands add-ons/ more features/customization tailored to their needs, Tufin Orchestration Suite recommends RFE / custom costs/development costs 3) USP feature is cool to use overall Vs FireMon 4) Tufin ProServ needs to buckle-up/Support compared to other competitors in the market

Incentivized

• Having one single pane of glass dashboard helps cut downtime for one tech to assess the overall health of the cloud.
• The cost was a little high, and the setup time was longer than expected to leverage the functionality we paid for fully.
• Overall a good product so far

Incentivized

• Tufin has helped increase firewall migration time letting us build new policies instead of migrating garbage in
• Tufin helps to identify who changed what when so if a change impacts access Tufin can help find what change was made from a single location
• Tufin has a great reporting feature - except for Palo Alto right now - that helps to review and audit policy, flagging overly permissive and shadow or partially shadow policies.

Incentivized