Cisco Security Cloud Control vs. Tufin Orchestration Suite

Use case would be if you wanted most of the functionality of the FMC on prem but had no datacenter, cloud presence in AWS, or a cloud presence in Azure for an FMCv. You gain an always up FMC to manage the firewalls due to resiliency of the cloud FMC. You get almost all the functionality of an FMC on prem.

Incentivized

If there is any organization who is having more then 10-15 firewalls and from different vendors, Tufin Orchestration Suite can be best suited there as it can manage all the firewalls from one single pane of glass and push the policy, and get the Standard based compliance reports for the rules created on the firewalls.

Incentivized

• Upgrade OS
• Manage changes at scale
• Group like configurations
• Clone configs for other firewalls
• Migrate from on prem to cloud

Incentivized

• If you set your zones correctly Tufin will create your network topology map.
• You can find which object or rule you want easily for all firewalls in the network.
• Tufin provides more features for Checkpoint.

Incentivized

• Better templates like pushing config. when a particular firewall checks in with CDO.
• Compliance checking for configurations would be great. For example: make sure http is shut and https is open.

Incentivized

• Tufin SecureChange needs to be more agnostic, easy to integrate with Service NOW
• JSON payload identification for Tufin SecureChange while integrating it with SNOW
• customization should be made more easy, like custom dashboarding
• Tufin Orchestration Suite Professional services experience could be also improved overall - Taking more ownership
• API calls to 3rd party tools should be more flexible

Incentivized

I give this score because I believe that Cisco Defense Orchestrator helps our company to be resilient, this is because this software is also focused on offering security resilience at the enterprise level, that is, through its features such as high visibility, acceleration of threat detection and response, simple management, and end-to-end protection. By having it, it is more feasible to avoid disasters or risks in the devices that are handled daily and of course avoid data loss and, given this, be able to recover quickly if something happens.

I believe that Cisco Defense Orchestrator is available when needed, this solution has allowed the security team to have better productivity thanks to the fact that their workflow is less intense because they can carry out their tasks with the help of this software, in addition to the presence If there is an error, they can be overcome quickly because their support team is efficient.

Cisco Defense Orchestrator is a software that is easy to implement, although knowledge is required for it, but if you do not have it, going to its valuable support team is very helpful. If done knowingly, this process can take less than two hours. Having a simple implementation is a valuable feature because it saves time and expense.

McAfee ePolicy Orchestrator is a simple, flexible, and easy-to-implement configuration solution, however, with Cisco Defense Orchestrator there is an implementation in the cloud and the ease of managing all devices from a single console regardless of location, in addition to its analysis of security policies security help us to know if the ones that are being used are fulfilling their function or if changes are required to make infrastructure more secure, that is why we chose this Cisco software.

1) Fairly okay overall but definitely needs improvement overall Vs the other products available in the market like Palo Alto XSOAR 2) Cost wise okay at the beginning but when client demands add-ons/ more features/customization tailored to their needs, Tufin Orchestration Suite recommends RFE / custom costs/development costs 3) USP feature is cool to use overall Vs FireMon 4) Tufin ProServ needs to buckle-up/Support compared to other competitors in the market

Incentivized

• Much faster management.
• Can access firewall without having to go on site if the VPN tunnel is down.

Incentivized

• Tufin has helped increase firewall migration time letting us build new policies instead of migrating garbage in
• Tufin helps to identify who changed what when so if a change impacts access Tufin can help find what change was made from a single location
• Tufin has a great reporting feature - except for Palo Alto right now - that helps to review and audit policy, flagging overly permissive and shadow or partially shadow policies.

Incentivized