AWS Firewall Manager vs Tufin Orchestration Suite comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

AWS Firewall Manager
Ranking in Firewall Security Management
8th
Average Rating
7.8
Number of Reviews
6
Ranking in other categories
No ranking in other categories
Tufin Orchestration Suite
Ranking in Firewall Security Management
2nd
Average Rating
8.0
Number of Reviews
180
Ranking in other categories
Container Security (22nd)
 

Mindshare comparison

As of June 2024, in the Firewall Security Management category, the mindshare of AWS Firewall Manager is 5.0%, down from 6.9% compared to the previous year. The mindshare of Tufin Orchestration Suite is 19.4%, up from 19.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewall Security Management
Unique Categories:
No other categories found
Container Security
0.6%
 

Featured Reviews

SS
Sep 28, 2023
Streamlining security and enhanced file transfer control
We primarily use it for the file transfer aspect of our operations. We establish connections with vendor sites, specifically their file transfer servers, and engage in a substantial volume of file transfers to and from these sites. Vendors also utilize various applications to connect with our…
VT
Jan 18, 2023
Simple setup, overall better network visibility, and scales well
The solution is scalable. You can onboard a lot of devices from different vendors. It only depends on the hardware resourcing and licensing. You have to purchase enough licenses. We use Tufin a lot. I'm an administrator of the application, and we have people who open requests in Tufin. We use an internal ticket system to record these requests. We don't have an integration with an ITSM system yet, but we plan to do so with ServiceNow in the future. Until then, users will have to use Tufin to open their own requests. I've had two experiences with technical support and I find them to be too slow. I can't really say if they are good or not, as it seems to depend on the individual company and the engineers they employ.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Once this solution is set up, we hardly have to touch it."
"Also, the strength of the community is invaluable."
"It has centralized cloud firewall management rules. It provides compliance in tracking and reporting."
"AWS Firewall Manager isn't a separate solution when you create the virtual private cloud (VPC), so you can control the traffic through that security group."
"The interface is intuitive and it is easy for the users."
"The most valuable feature is the centrally managed rule. I also like the central orchestration."
"The most valuable feature is the compliance check and the recommendations that it makes."
"We are able to stay compliant with many of the regulations."
"It gives our firewall administrators visibility into the total infrastructure."
"The time that we require to makes changes has been reduced from weeks to days."
"The reports that this solution provides are very useful."
"We are using the visibility with notifications on every firewall change and what those changes were. We have visibility to see who is making the changes, and when."
"All the basic functions work well."
"This solution has helped us meet our compliance mandates. Everything is all auditable. Every change is tracked down to the person and time."
 

Cons

"They could consider organizing and enhancing documentation in a more structured and chronological manner"
"This solution is suitable for a small-scale enterprise and may not scale up to a very high volume of traffic or a large number of servers."
"It needs to be more employee-friendly, and the security management could be more efficient."
"I would like to see AWS add some UTM features to the firewall. It would also be great if AWS Firewall had native IPS/IDS. They have the separate IPS/IDS, GuardDuty."
"Enabling and configuring the logging is not that straightforward."
"The system should be more customizable."
"It would be better if they modernized the web GUI. The web interface GUI is simple and not complicated, but it's also too old."
"I would like to see the setup of the Unified Security Policy simplified."
"The topology needs improvement. If I click on the network tab, I can go get a cup of coffee, come back, and my topology is still not painted. Maybe, it's just because we have so many devices, but looking at the topology, it is too slow. The problem is that when I click on the network tab, I do not want to see the topology. I want to click on the "Next" button, so I can put in the source and destination, so I can see the path. However, I still have to sit there and wait for the topology to load, and it's frustrating. I'll click on topology and try to click that "Next" button in time to where I can get around it. But, typically, you have to wait for that topology to paint. When it paints it, it's just a bunch of black smudges because there is just so much there. It can't paint it to where you see something. I can always zoom out, or something like that, but it's really worthless."
"At least in our environment, the dynamic learning of the topology needs improvement."
"I wish there was a read-only admin option. I don't like that you have to be a full admin just to see the Network Topology Map. That option is great out there if you are a user, multi-domain user, etc. However, that piece is very helpful for us, but I also don't want to be handing out admin access to every single person so they can see that network tab."
"The GUI needs more visibility in terms of licensing because it is hard to tell which products and licensed and which are not."
"I would also like to see them do more cloud integration within the Tufin Orchestration Suite, not within a SaaS solution."
"They are sort of at the pilot stage on some of their products. I saw the Orca and Iris products yesterday. My initial impression of these products were that they were good products, but I felt like some of their features overlapped with SecureTrack and SecureChange, which they are already doing. So, I just wondered what direction they're going in? I understand that they are cloud products, but are these security products going to overlap each other's features at some point? This is my initial concern."
 

Pricing and Cost Advice

"The AWS Firewall Manager is a little on the costly side."
"The licensing is on a pay-as-you-go basis and we are billed monthly."
"From what I've heard from my colleagues, it appears that the pricing is competitive, which influenced our decision to choose this option."
"It is a cost-efficient product."
"The additional piece, which we are buying and doesn't include our other solution, is close to 300,000."
"The price of Tufin could be lower."
"Tufin makes things a little easier. It lessens the amount of manual work which we have to do. It has a lot of benefits in terms of revenues, profits, employee costs, and operational costs. We have already seen return on investment."
"Our licensing fees are approximately $100,000 USD yearly."
"If you don't buy their premium support, their technical support is not great and you can only call during daytime hours. So, we ended up purchasing their premium support."
"Tufin reduced the time it takes to solve a problem, which reduces the time of the outage."
"The solution has helped us to reduce the time it takes to make changes. With Tufin, it takes ten to 15 minutes. Before, it was 30 minutes or more."
"Licensing is available in both perpetual and subscription models, and it appears to be good for our scalable environments."
report
Use our free recommendation engine to learn which Firewall Security Management solutions are best for your needs.
787,779 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
19%
Financial Services Firm
14%
Manufacturing Company
9%
Government
6%
Financial Services Firm
18%
Computer Software Company
18%
Manufacturing Company
8%
Retailer
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about AWS Firewall Manager?
It has centralized cloud firewall management rules. It provides compliance in tracking and reporting.
What is your experience regarding pricing and costs for AWS Firewall Manager?
They provide cost governance plans. We can choose a plan to suit our business requirements. It is a cost-efficient product.
What needs improvement with AWS Firewall Manager?
AWS Firewall Manager could provide more automation. It needs to be more employee-friendly, and the security management could be more efficient.
What do you like most about Tufin?
The most valuable feature of Tufin is security auditing. We are able to check the rules and compliance of the company, for example, what is allowed or not. We are able to check the rules over diffe...
What is your experience regarding pricing and costs for Tufin?
Tuffin is expensive, and we have to explain to our customers the benefit for them to purchase. If we explain the benefits in the correct way they do not mind the price. We typically do costing for ...
What needs improvement with Tufin?
The reporting function could improve in Tufin. For our clients with companies that have strong compliance, reporting privacy data is mostly a problem. In the IT department, private data needs a fun...
 

Also Known As

No data available
Tufin SecureCloud
 

Overview

 

Sample Customers

Expedia, Intuit, Royal Dutch Shell, Brooks Brothers
3M, AT&T, Blue Cross Blue Shield, BNP Parabas, ConocoPhillips, Deutsche Bank, GE, IBM, Pfizer, United States Postal Service 
Find out what your peers are saying about AWS Firewall Manager vs. Tufin Orchestration Suite and other solutions. Updated: May 2024.
787,779 professionals have used our research since 2012.