FireMon Security Manager vs RedSeal vs Tufin Orchestration Suite comparison

Tufin Orchestration Suite

Read 9 RedSeal reviews

943 Views
47 Comparison Views

100% willing to recommend

Read 184 Tufin Orchestration Suite reviews

6,445 Views
5,994 Comparison Views

91% willing to recommend

FireMon Security Manager

Tufin Orchestration Suite

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between FireMon Security Manager, RedSeal, and Tufin Orchestration Suite based on real PeerSpot user reviews.

Find out what your peers are saying about AlgoSec, Tufin, FireMon and others in Firewall Security Management.

To learn more, read our detailed Firewall Security Management Report (Updated: June 2025).

Firewall Security Management

Download the complete report

Helped 862,077 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Mindshare comparison

Firewall Security Management

Risk-Based Vulnerability Management

Firewall Security Management

Featured Reviews

Ganesh-Khutwad

Senior Network Specialist at Tech Mahindra Limited

Rapid policy insights with robust dashboards and cross-vendor automation

FireMon Security Manager is excellent for real-time compliance management. It allows us to quickly retrieve any policy needed for testing and easily analyze it for loopholes. If a loophole exists, FireMon provides comprehensive details within the policy manager. It alerts us to firewall rule additions or changes that violate compliance policies. It supports various firewall platforms, including Checkpoint, Zscaler, Fortinet, Cisco, and AWS, and provides centralized management for all configured policies through a single console. FireMon Security Manager provides many features, like whether my firewall is compatible with required standards such as NTP and SNMP. Each compliance included in our RFPs is shown in the UI of FireMon. It gives robust and clear dashboards, making it easier to understand risks because the policies have ratings showing usage, and the number of hit attacks. It streamlines our compliance reporting processes by providing comprehensive risk and compliance assessments. It offers a range of features, including verification of firewall compatibility with protocols like NTP and SNMP, and detection of signal charges. FireMon effectively addresses all compliance requirements outlined in our RFPs. For instance, it can determine if firewalls or proxies within a stack are configured in Secure Mode or Active-Active mode. FireMon Security Manager enables us to generate reports on all these aspects, ensuring thorough compliance monitoring and documentation. FireMon Security Manager is robust and can help automate firewall policy changes across large multi-vendor enterprise environments. FireMon Security Manager helps automate firewall policy changes across various environments, including on-premises, cloud, hybrid, SASE, and SD-WAN. It also simplifies cleaning up firewall rules in our environment. The time required to accurately create, approve, and deploy firewall policy rules has been reduced. Tasks that took 30 minutes can now be completed in just five minutes using FireMon. FireMon provides immediate visibility into our policies through a robust and clear dashboard, making it easy to identify errors or misconfigurations based on the policy rating.

Read full review

Sajid Mukhtar

Associate Director Security at a outsourcing company with 10,001+ employees

Provides a graphical overview of our network and is easy to deploy, but needs a user-friendly interface and a feature for compliance audit policy

Sometimes, it required us to refresh the configuration. When we integrated any of the configurations into the device, sometimes, it could not detect the exact picture of that device. So, we had to reset the device to see that if it was giving true-positive results or false-positive results. In some cases, we were not able to get true-positive results. There was some kind of bug in that version. Its interface is not user-friendly and needs to be improved. It takes time to understand the interface and various options. Skybox has quite a user-friendly interface. They could provide a feature for compliance audit policy if it is already not there. A compliance audit policy ensures that all configurations are based on the best practices standards, such as CIS benchmarks standard or other similar standards. It provides visibility about whether your device configuration is based on best practices or not. Usually, such a feature is provided by other solutions such as Meteor or Tenable Nessus.

Read full review

MithatBulut

Network Security Engineer at TD SYNNEX

New employees can quickly grasp the various IPs, devices, and the network's logical and physical

Tufin is primarily used to orchestrate and manage network traffic and firewall devices. It is specifically useful for implementing firewall policies and handling requests from clients that require policy updates or changes Tufin simplifies understanding network topology. New employees can quickly…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It gives us the ability to go to one place to look for potential firewall rules that are inappropriate, or which don't meet compliance. Instead of manually searching hundreds of firewalls for a policy, we can go to this one location and find the rules which are now out of compliance."

"I like the Security Manager console where we can see any changes that have been made or pull the results of an assessment and control the policies that we implement."

"The most valuable feature is the reporting capability because everything that we do is a result of our being able to query a report, based on our environment and our PCI compliance efforts."

"The firewall assessment feature is great."

"Policy test, access path analysis, and change reports."

"The Security Manager part of FireMon... gives me an eye on everything that's out there, everything that I cannot see. Because I'm not a network admin, I cannot go to a firewall itself, but at least I have FireMon so that I can go in and view everything that I want to view. And I can eliminate whatever I see that is wrong,"

"When it comes to real-time compliance management, it is very good because it is able to compare changes in the configuration as well as giving us a timestamp. It also sends email alerts to our environment so we know if someone has made a change on the network. It gives us the whole picture of that change. Whether it is a configuration change or just a small comment, it gives us the before and after snapshot."

"The most valuable features are Policy Optimizer and Firewall Manager for different brands of firewall."

More FireMon Security Manager pros

"This is the only solution in the world that gives you a digital resilience score."

"RedSeal has different modules, such as the Analyzer module, which can be leveraged."

"The most valuable features are network mapping and configuration."

"RedSeal integrates the network and gives us a visual or graphical overview of our network. If an organization is geographically dispersed, for instance, with one office in Canada and one office in the Philippines, the whole network, including all devices, is integrated into RedSeal, and you can see from where the traffic is going in and out."

"It has helped us to meet our compliance mandates. We have some requirements that we need to provide more visibility on the risk levels of our firewall base and Tufin helped us with that requirement."

"Tufin simplifies understanding network topology."

"Its ability to detect changes within our firewall."

"Tufin is quite stable and typically does not require much troubleshooting."

"The reports that this solution provides are very useful."

"Tufin has made handling firewall rule request tickets more centralized and easier to manage."

"I like the fact that Tufin was able to integrate with our firewalls, which include Palo Alto and FortiGate."

"The product is good at auditing the changes that we make in our environment."

More Tufin Orchestration Suite pros

Cons

"I don't like that it comes with bugs, constant issues, and limited functionality."

"The support response time has room for improvement."

"The cost of the solution is pretty expensive. It would be ideal if they could work on their pricing."

"Its reporting can be improved. I am the only one who works a lot with it, and I am having problems in terms of reporting. In the case of Palo Alto, I'm okay with it, but with some of the Cisco devices, such as routers, when I provide the reports to other teams for review, they always say that the hit count is incorrect. So, I was struggling for a long time to work with them. When working with other teams, they have a lot of questions about reporting, such as how it reports, and we are still struggling with that."

"We have had some stability issues that are affecting operations. We rely heavily on this solution and if it isn't working then we have to create rules manually."

"FireMon could be made more user-friendly when it comes to creating filters or conducting traffic analysis."

"The AWS integration is still not mature for us to use. It is just not ready for our use case for AWS connectivity. Therefore, it does not provide us with a single pane of glass for our cloud environments, because we can't manage our cloud environment with the tool."

"Our firewalls have multiple paths through them and FireMon falls short a little bit because it's not Palo Alto-centric. I don't think FireMon has kept up with where Palo Alto is at. They started out being Check Point-centric for years and they've never really fully embraced the nuances others, like Palo Alto or Fortinet, have. They don't handle a lot of the capabilities and attributes that Palo Alto does yet. They're working on it. They're getting there."

More FireMon Security Manager cons

"There is room for improvement in integrating the OT security part and the private 5G security part in RedSeal."

"The dashboard should be improved to make correlating data easier to do."

"Sometimes, it required us to refresh the configuration. When we integrated any of the configurations into the device, sometimes, it could not detect the exact picture of that device. So, we had to reset the device to see that if it was giving true-positive results or false-positive results. In some cases, we were not able to get true-positive results. There was some kind of bug in that version. Its interface is not user-friendly and needs to be improved. It takes time to understand the interface and various options. Skybox has quite a user-friendly interface. They could provide a feature for compliance audit policy if it is already not there. A compliance audit policy ensures that all configurations are based on the best practices standards, such as CIS benchmarks standard or other similar standards. It provides visibility about whether your device configuration is based on best practices or not. Usually, such a feature is provided by other solutions such as Meteor or Tenable Nessus."

"One of the areas of concern is the GUI. It is important to our customers that the GUI looks beautiful. It's a Java Client, so you have a Java dependency."

"I would like an improved reporting module which can be flexible (custom reports) and allow us to generate our own reports, because the data is already there."

"Tufin has come a long way when it comes to visibility. What we would like to see is a little bit more on the discovery level, network discovery, which Tufin does not have today."

"There was some complexity during the initial setup"

"I would like to simplify the reports, and maybe have another view besides the charts. Possibly they could be more graphical."

"I would rate their reports as a four out of ten. I don't like the way that they are shown. It is too hard to export and send them to our clients."

"The integration with different products needs to be improved."

"We would like Tufin to have interoperability with Juniper products, along with official support."

"It would be great to add a link to Visio to create shapes directly from Tufin, as it has the configuration."

More Tufin Orchestration Suite cons

Pricing and Cost Advice

"Relative to what it offers, the price is fair."

"Pricing model seems fair."

"We don't license all of the devices in our network, so it does not provide us with a comprehensive visibility of all devices in a hybrid network at this time."

"It's a good value. From a licensing standpoint... it's very simple to understand, and gives us a good bang for the buck."

"Pricing is reasonable."

"Its pricing is good. Compared to others, it is not so expensive."

"The pricing is very good, very straightforward. It also came in cheaper than AlgoSec and Tufin."

"The pricing was very good during our initial year, but they increased it this year a little bit. The price is okay. It is not cheap, but it is still average."

More FireMon Security Manager pricing and cost advice

"The pricing is based on the number of endpoints and devices, and we have seen it range from mid-five figures to low six figures."

"The licensing costs are a significant amount of money."

"Pricing played a big part here... The customer had evaluated other products but, due to price as well as support, they chose Tufin."

"The solution has helped reduce the time it takes us to make changes. It helps make overall integrated changes immediately. It allows us to cut down at least a few hours in the week in regards to changes and monitoring."

"There is no issue with the pricing because we used a VM. That kept the cost low, as compared to an appliance."

"Price could always be better, but there are always consequences."

"The licensing costs are around $250,000 to $300,000."

"The pricing is reasonable."

"I'm saving 20 man-hours a week, so I am seeing some ROI."

More Tufin Orchestration Suite pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewall Security Management solutions are best for your needs.

See recommendations

862,077 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

15%

Manufacturing Company

10%

Healthcare Company

Government

22%

Computer Software Company

Energy/Utilities Company

Retailer

Financial Services Firm

17%

Computer Software Company

14%

Manufacturing Company

10%

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about FireMon?

I like the Security Manager console where we can see any changes that have been made or pull the results of an assess...

What is your experience regarding pricing and costs for FireMon?

Comparatively, FireMon has a very good price and is below the general competition in cost. I have not seen any additi...

What needs improvement with FireMon?

For one company I work with, I use Fortinet, and FireMon is not able to understand the zones that Fortinet uses. Part...

What is your experience regarding pricing and costs for RedSeal?

The pricing of RedSeal is competitive.

What needs improvement with RedSeal?

There is room for improvement in integrating the OT security part and the private 5G security part in RedSeal.

What is your primary use case for RedSeal?

The primary use cases for RedSeal are lifecycle management, vulnerabilities, and change management. Customers might l...

What needs improvement with Tufin SecureCloud?

Tufin Orchestration Suite ( /products/tufin-orchestration-suite-reviews ) is not commonly used in Thailand due to a l...

What is your primary use case for Tufin SecureCloud?

I have primarily used Skybox and AlgoSec ( /products/algosec-reviews ). I have also interacted with FireMon for compi...

What advice do you have for others considering Tufin SecureCloud?

There is potential for improvement in explaining the analytics in the dashboard for Tufin Orchestration Suite. Tufin ...

AlgoSec vs FireMon Security Manager

Comparisons

Compared 38% of the time

Skybox Security Suite vs FireMon Security Manager

Compared 8% of the time

Palo Alto Networks Panorama vs FireMon Security Manager

Compared 4% of the time

ManageEngine Firewall Analyzer vs FireMon Security Manager

Compared 3% of the time

More FireMon Security Manager Competitors

AlgoSec vs RedSeal

Compared 17% of the time

Ekahau AI Pro vs RedSeal

Compared 17% of the time

Skybox Security Suite vs RedSeal

Compared 16% of the time

iBwave Unity vs RedSeal

Compared 12% of the time

Cisco Identity Services Engine (ISE) vs RedSeal

Compared 5% of the time

More RedSeal Competitors

AlgoSec vs Tufin Orchestration Suite

Compared 36% of the time

Skybox Security Suite vs Tufin Orchestration Suite

Compared 16% of the time

Palo Alto Networks Panorama vs Tufin Orchestration Suite

Compared 4% of the time

ManageEngine Firewall Analyzer vs Tufin Orchestration Suite

Compared 3% of the time

Cisco Security Cloud Control vs Tufin Orchestration Suite

Compared 1% of the time

More Tufin Orchestration Suite Competitors

Product Reports

Download FireMon Security Manager product report

FireMon Security Manager

July 2025

Download RedSeal product report

Tufin Orchestration Suite

Download Tufin Orchestration Suite product report

Also Known As

No data available

Tufin SecureCloud

Overview

The increasing complexity of networks, driven by the constant influx of new devices, applications, and cloud services, presents a daunting challenge for managing firewall policies and rules. A typical enterprise environment has millions of rules, and just one simple misconfiguration can lead to devastating consequences like compliance violations, outages, and data breaches.

FireMon’s Security Manager is a purpose-built network security policy management (NSPM) platform that automates the management of firewall and cloud security policies to eliminate policy-related risk, accurately and quickly change rules, and meet internal and external compliance requirements.

Reduce Risk Manage risk with real-time visibility and control
Manage Change Avoid misconfigurations, accelerate business, and improve security
Enforce and Maintain Compliance Avoid violations, avoid risk, and avoid fines

FireMon

RedSeal’s network modeling and risk scoring platform builds an accurate, up-to-date model of an organization’s entire, as-built network to visualize access paths, prioritize what to fix, so you can target existing cybersecurity resources to protect your most valuable assets. With RedSeal’s Digital Resilience Score, decision makers can see the security status and benchmark progress toward digital resilience.

Tufin enables organizations to automate their security policy visibility, risk management, provisioning and compliance across their multi-vendor, hybrid environment. Customers gain visibility and control across their network, ensure continuous compliance with security standards and embed security enforcement into workflows and development pipelines.

Tufin

Sample Customers

Convey, MGM Resorts International, Southwest Airlines, Alkami, Costco, Aetna, IBM, Verizon, Wells Fargo

United States Postal Service, Pacific Gas and Electric Co., Interval International

3M, AT&T, Blue Cross Blue Shield, BNP Parabas, ConocoPhillips, Deutsche Bank, GE, IBM, Pfizer, United States Postal Service

Firewall Security Management