The most valuable features of Prevasio include:
1. Optimizations: Customers find the optimizations provided by Prevasio very useful, especially for improving firewall rules and gaining visibility into the risks associated with firewall change requests. It helps clients, particularly banks, ensure compliance with regulations like PCI.
2. Automation: Prevasio's automation capabilities, such as creating multiple rules and handling large volumes of traffic, are highly regarded. Automation helps reduce human error, saves time, and allows for faster implementation of firewall rules.
3. Integration: The seamless integration of Prevasio with other security solutions, such as Check Point, Fortinet, and Palo Alto, is praised. This integration enhances security and simplifies the job of security engineers.
4. Centralized management: Prevasio provides a centralized management system for policies and devices, making it easier to monitor, clean up, and optimize firewall policies. It minimizes the risk of human error and misconfiguration.
5. Compatibility: Prevasio is compatible with a wide range of devices and firewalls, including Cisco, Palo Alto, and Juniper. This compatibility makes integration relatively easy.
6. Additional modules: Users find the Firewall Analyzer module helpful for identifying vulnerable rules and services. The AppViz module, specifically its project option and server migration feature, is valued for simplifying migrations when transitioning from on-premises to the cloud.
- "The optimizations are the most useful aspect because most customers have a very unmanaged network with a lot of rules. We use a lot of the optimizations in our reports for improving firewall rules."
- "The most unique feature is the ability to help fix any gaps or mismatches in the configuration of the firewall."
- "The most valuable feature is the automation that can be accomplished by using scripts. If we didn't have AlgoSec, I would have to do everything manually."
Improvements needed for Prevasio include:
1. Lack of integration with Oracle on the cloud and network devices in Layer 2.
2. Absence of a logout option in the console, making it necessary to close the entire web page to log off.
3. Occasional errors and stuck FireFlow when sending multiple requests at once.
4. Numerous bugs in the new version (H32).
5. Limited flexibility in risk profiles, with only three standard zones provided and the inability to customize zones or rearrange risk rules.
6. Lack of integration with Cisco SD-WAN, despite the need to manage a high number of zone-based firewalls across multiple retail stores.
7. Absence of a performance dashboard to assess the impact of adding a load distribution node on process optimization and latency.
- "Integration with Oracle on the cloud is not supported.I would also like to see integrations with network devices in Layer 2."
- "AlgoSec cannot be integrated with solutions that require two-step or multi-factor authentication. Embedding multi-factor authentication capability into the solution would be a valuable feature."
- "When we send multiple requests across at once, sometimes it causes errors and FireFlow gets stuck. In cases like this, we have to go back in and fix it."
