

Tufin Orchestration Suite and FireMon Security Manager compete in the network security management category. Based on feature analysis, Tufin has an upper hand in automation and compliance features while FireMon excels in firewall traffic analysis and overall policy management.
Features: Tufin Orchestration Suite offers automation capabilities for firewall rule changes and compliance checks. Its SecureTrack and SecureChange modules stand out for detailed policy documentation and network topology analysis. FireMon Security Manager provides excellent firewall rule traffic analysis, helps identify shadowed rules, and offers holistic security policy management with a clear graphical view of network paths.
Room for Improvement: Tufin could improve third-party integration and modernize its user interface. FireMon can enhance network map customization and expand support for more firewall vendors, along with improving its reporting functionality.
Ease of Deployment and Customer Service: Tufin is primarily deployed on-premises and receives positive feedback for its responsive technical support. FireMon, also mainly on-premises, is reliable but complex, requiring expertise for effective use. Both systems offer strong customer support.
Pricing and ROI: Tufin's pricing is considered high, but the automation features justify the cost by enhancing operational efficiency. FireMon offers competitive pricing with transparent fees, providing good value for network visibility and policy management. Both solutions deliver significant ROI.
It significantly reduced the time spent on manual firewall policy review and audit preparation.
The Orchestration Suite saves time when implementing rules.
An eight signifies they are doing a good job.
The technical support is good, but sometimes it takes some time.
In recent years, they have stopped providing specialized engineering support.
The support team is effective; they connect to the network quickly and help resolve any issues that arise.
The team is eager to help in fixing issues.
It offers extensive scalability options, providing more flexibility than other vendors.
Even with the increased workload, the platform remained stable and consistent, which is critical in large, regulated environments.
If it can see and interpret everything correctly, it would do exactly what I want, and it would be very helpful.
If we have many devices added or if the firewall complexity is huge, we might experience some lag in processing.
Simplifying some workflows and dashboards would help teams get value more quickly, especially in large environments.
FireMon can see everything much better and provides me with a fuller report when using Meraki as a firewall system.
It would be beneficial if they expanded to other devices like switches, routers, and other security devices, perhaps including proxies.
The analytics features of Tufin Orchestration Suite are challenging to use and require technical expertise, which is a concern as there is not much knowledge in this field in Thailand.
Issues can arise in larger enterprises, particularly concerning policy-based forwarding and NAT traffic.
The design needs improvement, particularly in recognizing target devices and target files.
Compared to others, it is not so expensive.
Our experience with FireMon Security Manager's pricing and licensing is that it is on the higher side, but justified for a large, regulated environment.
Comparatively, FireMon has a very good price and is below the general competition in cost.
FireMon and Skybox are considered more cost-effective.
The pricing of Orchestration Suite is high, which is a point for improvement.
Tufin and AlgoSec are at the same level in terms of pricing.
FireMon Security Manager has had a very positive impact on our organization by reducing manual effort and improving overall security posture.
By eliminating loopholes between policies, it simplifies review and analysis, while also automating policy changes and supporting multiple vendors.
It has helped me bring all the firewalls into better alignment with the compliance requirements in my environment.
AlgoSec adds more value with its vulnerability control, which benefits organizations by reducing expenses associated with audits.
New employees can quickly grasp the various IPs, devices, and the network's logical and physical layout within a short period.
It offers automation capabilities that are very helpful, especially for network security orchestration and applying policies.
| Product | Market Share (%) |
|---|---|
| Tufin Orchestration Suite | 21.9% |
| FireMon Security Manager | 17.4% |
| Other | 60.7% |

| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 9 |
| Large Enterprise | 44 |
| Company Size | Count |
|---|---|
| Small Business | 29 |
| Midsize Enterprise | 13 |
| Large Enterprise | 152 |
The increasing complexity of networks, driven by the constant influx of new devices, applications, and cloud services, presents a daunting challenge for managing firewall policies and rules. A typical enterprise environment has millions of rules, and just one simple misconfiguration can lead to devastating consequences like compliance violations, outages, and data breaches.
FireMon’s Security Manager is a purpose-built network security policy management (NSPM) platform that automates the management of firewall and cloud security policies to eliminate policy-related risk, accurately and quickly change rules, and meet internal and external compliance requirements.
Tufin enables organizations to automate their security policy visibility, risk management, provisioning and compliance across their multi-vendor, hybrid environment. Customers gain visibility and control across their network, ensure continuous compliance with security standards and embed security enforcement into workflows and development pipelines.
We monitor all Firewall Security Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.