Azure Firewall Manager vs Skybox Security Suite comparison

Azure Firewall Manager vs. Skybox Security Suite

Download the complete report

Helped 902,588 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Azure Firewall Manager

Ranking in Firewall Security Management

10th

Average Rating

8.6

Reviews Sentiment

5.4

Number of Reviews

Ranking in other categories

Microsoft Security Suite (25th)

Skybox Security Suite

Ranking in Firewall Security Management

8th

Average Rating

7.6

Reviews Sentiment

6.2

Number of Reviews

Ranking in other categories

Vulnerability Management (50th)

Mindshare comparison

As of June 2026, in the Firewall Security Management category, the mindshare of Azure Firewall Manager is 3.2%, up from 1.7% compared to the previous year. The mindshare of Skybox Security Suite is 7.6%, down from 10.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewall Security Management Mindshare Distribution
Product	Mindshare (%)
Skybox Security Suite	7.6%
Azure Firewall Manager	3.2%
Other	89.2%

Firewall Security Management

Featured Reviews

Sikkander Batcha

DevOps Engineer at CloudIQ

Has managed traffic effectively but lacks visibility and advanced control features

Azure Firewall is typically behind other vendor firewalls because we don't see what kind of traffic is traveling through it. That is one drawback. The main drawback is that we need log support from Azure Firewall, which can be quite costly. There is no login feature in Azure Firewall because only the IAM feature is available in the Azure site; we manage it only through the Azure portal, not through any other portal. Other vendors, such as Palo Alto, provide GUI or CLI interfaces to manage their firewalls, whereas we only manage Azure Firewall through the Azure portal. In the future, I would like to see additional features in Azure Firewall Manager to make it more competitive, such as technologies like App-ID and User-ID that Palo Alto has. Azure Firewall currently only allows traffic based on layer four and sometimes layer seven, so they need to improve in those areas compared to other vendors.

Read full review

AnoopBhat

Security Architect at a tech vendor with 5,001-10,000 employees

Firewall policy management has improved access control but still needs simpler setup and upgrades

The features that I appreciated the most in Skybox Security Suite were not comparable with Tufin, as Tufin was far ahead in terms of the technology and the user interface. The effectiveness of the vulnerability management in Skybox Security Suite is an area I have not used that much. The firewall management feature has streamlined rule configuration and compliance in Skybox Security Suite and has evolved over time, but Tufin is far better. In terms of comparison between both tools, only the licensing part of Skybox had an edge. We were not renewing the licenses of Skybox every year, but in the case of other tools, we would have to renew if we wanted to use those tools. The disadvantages and weaknesses of Skybox Security Suite include the interface, complexity with setup, and upgrading. There are some smaller issues as well that would take more time to discuss, but there are ways around them. We use this tool to implement a new policy on the firewall by going to Skybox, creating a flow there, and then using an approval mechanism in place. There are two different levels of approvals which we have to go through, and once both approvers approve the request, we are ready to implement it. A specific challenge is that if we have to create a new object group and place ten different objects in that and use that object group in two different rules, we have to create the object group in the first rule and add the ten new objects. Then if we have to create another rule, we do not get an option to recall or reuse that same group which we created in the previous rule. We have to create a new object group again and then add the objects into it again. If we had created an object group once, we should have gotten an option to recall that or call that object group in the new rule, and that should have made the process easier.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We are utilizing Azure Entra ID for group labeling, so Active Directory, or now it is Entra ID, securing our application for everyone who accesses it, and Azure Firewall Manager is definitely securing our projects and all its features are fine."

"The best feature of Azure Firewall Manager is that it is easy to maintain and configure."

"The most valuable feature of Azure Firewall Manager is the testing and configuration."

"I would definitely recommend the solution to my clients, especially if one is using Azure Cloud."

"The tool's support is good."

"It has helped us in multiple ways; for example, we don't require different spaces to manage it, we can do a lot of automation integrations into the code, we could integrate it into the DevOps pipeline, and it has helped us with our time-to-market for a very specific product when we are actually deploying or upgrading."

"The solution is very easy to set up."

"Azure Firewall Manager centralizes network security management with a hub and spoke architecture."

More Azure Firewall Manager pros

"The product's pricing is excellent value."

"Understanding the real exposure from vulnerabilities and associated assets can reduce the time and investment needed to mitigate risks."

"I would recommend others to try Skybox Security Suite before purchasing it because it replaces a couple of solutions from different vendors."

"Security review is the most important feature, because it offers a single pane of glass to analyze multiple firewalls."

"The performance could be good because we chose it at the time, but it is too complex for us to appreciate its performance because we lack the necessary skills."

"The initial setup process was easy."

"The revalidation and policy recertifications are most valuable, and they are easy to understand in the GUI."

"Network path analysis is the most valuable feature."

More Skybox Security Suite pros

Cons

"Azure charges for many aspects including scaling, automated scaling deployment, and traffic management, which leads to higher costs."

"We could do only one-way NAT-ing, where the traffic comes from outside to internal, to Azure, which is fine. However, when we actually do NAT-ed traffic to hit the firewall, that way is not working."

"The solution can improve the integration with open-source tools."

"For Azure Firewall Manager, the learning curve for new people is a bit challenging, but the integration should be more straightforward for configuring a centralized system."

"There should be a simple one-click deployment for a firewall, rather than a set of setup instructions that include steps such as the DNS configuration, et cetera."

"The cost is a significant concern because we are in a region where the dollar is not our default currency, and converting to dollars makes it very expensive."

"The price is okay. This said, the solution is certainly expensive in comparison with other cloud services."

"The tool's security features need to improve. It needs also to include a monitoring system for logs. It is also complicated to find a query on the Azure firewall."

More Azure Firewall Manager cons

"The price could be cheaper."

"I've had issues with licensing where, when they were expiring and I asked for the updated licenses, I would the wrong ones. I think their process needs to be straightened out a little bit - I don't know if they fixed it already, it has been awhile. It wasn't as straightforward as it could have been."

"Due to the cost of the solution, I've decided to switch products."

"Change Manager can be improved. If they can improve Change Manager so that whatever we want to do on a firewall, we are able to do it through Change Manager, it will be helpful for us. Whenever we are doing a change, it only does them at an L3 and L4 level, but all the firewalls are at the application layer. So, whatever needs to be done on the firewall, we aren't able to get it done through Change Manager. Currently, this functionality is not there because of which we are sometimes losing customers. I can create a role on Layer 3, Layer 4, but when it comes to the application layer, such as configuring and defining URLs or other things at the application level, it can't be done through Change Manager. Customers demand that they should be able to do everything through Change Manager. They don't want to do it through some other mechanism to accomplish their complete change management policy. They don't want to use a firewall manager because sometimes, they don't have any manager. They ask if they can use our solution so that a manager is not required. If Change Manager can do all the management automatically without involving any other manager, it will be great. They can also provide better integration with other managers so that everything can be done through a central point."

"If anything could be improved it would be staying on top of the collector scripts, but I understand that's a very tough challenge."

"The company made bad business decisions impacting many clients and their own staff. Reporting could have been improved, and feature requests often were not implemented."

"There is room for improvement in device policy provisioning. However, modifications and the deletion of existing policies are currently unavailable or under enhancement."

"It's expensive."

More Skybox Security Suite cons

Pricing and Cost Advice

"The price of the solution is reasonable but it is reasonable for the features."

"The solution is certainly expensive in comparison with other cloud services."

"When compared with other companies, the license is more costly."

"It's expensive."

"Pricing is on the higher side. In terms of licensing, you should buy the complete suite rather than buying only the Change Manager. I think Change Manager with Vulnerability Control is something that would be interesting to look at."

"Skybox Security Suite has indeed helped us reduce costs. The prices of AlgoSec and Skybox Security Suite are approximately 50 percent different. The tool may require special vendor support from abroad, resulting in slightly higher costs. Its pricing is in the middle."

"Skybox comes with extra licenses and has a change management license. The licenses are expensive, but they come with extra value."

"The pricing has increased exorbitantly in the last few years, so now it is questionable. Now, it makes me want to review other products."

"The product's pricing is excellent value. In terms of licensing, make sure you understand your network components, all your hops through your network, thoroughly, before you decide on the total cost. If you want to do point-to-point flow analysis and such, you need to have the configuration of all the devices in between point A and point B. A lot of people don't realize all their network components until they start using this product."

"With licensing, the number of network nodes becomes very expensive to the point where you have to rationalize if the tools are warranted anymore."

More Skybox Security Suite pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewall Security Management solutions are best for your needs.

See recommendations

902,588 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Construction Company

11%

Computer Software Company

Manufacturing Company

Financial Services Firm

17%

Manufacturing Company

11%

Computer Software Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	2
Large Enterprise	2

By reviewers
Company Size	Count
Small Business	21
Midsize Enterprise	4
Large Enterprise	21

Questions from the Community

What is your experience regarding pricing and costs for Azure Firewall Manager?

The pricing for Azure Firewall Manager is expensive. In our project, we have used both Palo Alto Firewall and Azure Firewall. Azure charges for many aspects including scaling, automated scaling dep...

What needs improvement with Azure Firewall Manager?

What is your primary use case for Azure Firewall Manager?

My customers are using Azure Firewall Manager, so I'm learning from both documentation and practical knowledge. I usually recommend Azure Firewall Manager for projects such as an animal hospital pr...

What is your experience regarding pricing and costs for Skybox Security Suite?

From a commercial perspective, AlgoSec is more expensive compared to Skybox Security Suite. Skybox Security Suite is cost-effective.

What needs improvement with Skybox Security Suite?

What is your primary use case for Skybox Security Suite?

Skybox Security Suite is primarily used for allowing access on firewalls and getting the access to allow some connectivity on the firewall.

Azure Firewall vs Azure Firewall Manager

Comparisons

Compared 16% of the time

FortiGate Cloud-Native Firewall (FortiGate CNF) vs Azure Firewall Manager

Compared 14% of the time

Microsoft Defender for Cloud vs Azure Firewall Manager

Compared 11% of the time

AlgoSec vs Azure Firewall Manager

Compared 11% of the time

Palo Alto Networks Panorama vs Azure Firewall Manager

Compared 10% of the time

More Azure Firewall Manager Competitors

Tufin Orchestration Suite vs Skybox Security Suite

Compared 13% of the time

AlgoSec vs Skybox Security Suite

Compared 12% of the time

FireMon Security Manager vs Skybox Security Suite

Compared 10% of the time

Qualys VMDR vs Skybox Security Suite

Compared 6% of the time

Palo Alto Networks Panorama vs Skybox Security Suite

Compared 5% of the time

More Skybox Security Suite Competitors

Product Reports

Azure Firewall Manager

Download Azure Firewall Manager product report

Skybox Security Suite

Download Skybox Security Suite product report

Overview

Azure Firewall Manager offers easy configuration, centralized management, and automatic scalability. Its integration with Azure Entra ID provides secure access, while Power BI facilitates centralized monitoring, contributing to its cloud-native benefits and reliable network management.

Azure Firewall Manager is recognized for its efficient security policy management and the ability to configure and test firewall settings across multiple locations. Its integration with Azure Kubernetes supports cloud environment security and the seamless migration of on-premise components to the cloud. With its hub-and-spoke architecture, users can detect threats and orchestrate policies more effectively, although integration with open-source tools and technical support responsiveness could be enhanced. Improvements in NAT capabilities and an AI-driven phishing prevention system would enhance its offering.

What are Azure Firewall Manager's key features?

Easy Configuration: Simplifies firewall setup without additional plugins.
Centralized Security Management: Streamlines policy management across locations.
Automatic Scalability: Adjusts resources to meet changing demands seamlessly.
Integration with Azure Entra ID: Provides secure user access control.
Hub and Spoke Architecture: Enables efficient threat detection and policy orchestration.

What benefits and ROI should users evaluate?

Cloud-Native Benefits: Offers stability and seamless integration with cloud environments.
Fair Pricing: Competitive cost structure, despite currency conversion challenges.
Simplified Monitoring: Uses Power BI for comprehensive security insights.
Enhanced Security: Protects against phishing and ransomware threats.

Azure Firewall Manager is widely implemented in industries like finance to secure applications and manage B2B interactions. This tool supports endpoint security, traffic management, and seamless orchestrations within cloud environments, ensuring robust protection against various threats.

Microsoft

Skybox Security Suite provides network path analysis, firewall assurance, change management, and vulnerability control. It supports diverse security operations with automation and threat insights through a comprehensive dashboard, offering scalability in large networks and integration with various vendors.

Skybox Security Suite excels in network visualization, firewall rule management, compliance checks, and vulnerability management. It enables cybersecurity teams to audit firewall configurations, ensure compliance with standards like NIST, and identify security gaps. It simplifies security operations for complex network environments with effective integration and optimization features. Despite its high pricing, the suite's automation capabilities, data extraction ease, and extensive threat insights are critical for network infrastructure optimization. Areas for improvement include a web interface, enhanced reporting and automation, broader vendor support, and improved customer support and integration with tools and devices.

What are the key features of Skybox Security Suite?

Network Path Analysis: Provides insights into potential vulnerabilities and security gaps.
Firewall Assurance: Ensures firewall configurations meet compliance standards.
Change Management: Streamlines change requests and improves infrastructure optimization.
Vulnerability Control: Monitors and manages vulnerabilities effectively.
Scalability: Efficiently supports large networks, enhancing security operations.

What benefits should users expect from Skybox Security Suite?

Automation: Reduces manual tasks and enhances efficiency across security operations.
Threat Insights: Offers comprehensive dashboard for better threat management and decision-making.
Integration: Seamlessly works with multiple vendors, simplifying complex network environments.
Risk Reduction: Provides actionable recommendations to minimize security vulnerabilities.

Skybox Security Suite is utilized across industries for its robust network visualization, compliance, and vulnerability management capabilities. Financial services focus on auditing and firewall management to meet stringent regulatory standards. Healthcare relies on it for vulnerability monitoring and patient data protection. Energy sectors benefit from its change management and threat insight features to secure large and diverse infrastructures.

Tufin

Sample Customers

Information Not Available

ADP, Blue Cross Blue Shield, BT, USAID, Delta Dental, EDF Energy, EMC, HSBC, Johnson & Johnson

Azure Firewall Manager vs. Skybox Security Suite