Try our new research platform with insights from 80,000+ expert users

Palo Alto Networks Panorama vs Skybox Security Suite vs Tufin Orchestration Suite comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of July 2025, in the Firewall Security Management category, the mindshare of Palo Alto Networks Panorama is 7.1%, down from 10.6% compared to the previous year. The mindshare of Skybox Security Suite is 10.3%, down from 10.9% compared to the previous year. The mindshare of Tufin Orchestration Suite is 22.5%, up from 20.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewall Security Management
 

Featured Reviews

Waleed Aboda - PeerSpot reviewer
Centralized monitoring enhances control while seeking greater flexibility and rapid response
I am still working for Lotus. We work with Palo Alto three series, Panorama, and Firewall Banu, specifically Firewall three series and five series I find this solution valuable for full monitoring, centralized control for reporting, and centralized management. These features are instrumental in…
NenadMijatovic - PeerSpot reviewer
Efficient in vulnerability management, stable and easy to use
Vulnerability management is the most valuable feature because it lets you focus on the most critical vulnerabilities. That's the important thing. Here in Serbia, there are not so many companies that have too many firewalls inside one company. So, they usually don't buy this model for Firewall Assurance unless there is some compliance. So you can prove that your firewalls are compliant. So, that model is not so important here in Serbia. It's for bigger companies. So, they usually buy network assurance to build the model of the network and vulnerability management to focus on the most important vulnerabilities. Moreover, Skybox can collect data for many vendors. From the endpoint protection vendors to the network equipment vendors to other security vendors. So, it supports more than one hundred vendors to collect data from them.
MithatBulut - PeerSpot reviewer
New employees can quickly grasp the various IPs, devices, and the network's logical and physical
Tufin is primarily used to orchestrate and manage network traffic and firewall devices. It is specifically useful for implementing firewall policies and handling requests from clients that require policy updates or changes Tufin simplifies understanding network topology. New employees can quickly…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Compared to all of the other firewall vendors, Palo Alto is very secure."
"The most valuable feature of Palo Alto Networks Panorama is its innovation and impressive capacity to handle network traffic efficiently."
"In Panorama, installing the policy, and pushing the policy, it's quite seamless."
"It provides a quicker response time to vulnerabilities and more visibility into traffic flows."
"The solution doesn't need a proxy for the Prisma Access Firewall."
"It has made our ROIs easier, but consolidating the correlation of data into one single point, which is pretty great."
"One of the key advantages of Palo Alto Networks Panorama is its unified platform that is quite similar to the firewall interface, making it easier for tech consultants to manage."
"What's most valuable in Palo Alto Networks Panorama is that it allows us to see the status on the network side, particularly on the endpoint, because we also use it for the internal network."
"The most valuable features of Skybox Security Suite are all the modules that are provided, such as vulnerability assessments and network, and firewall assessments."
"The way that it's built with three-tier architecture, it makes it very horizontally scalable, so I can have multiple fallbacks. If one machine does fall offline, there are four other machines that are doing the exact same job to pick it up"
"It's very supportive and very user-friendly."
"Overall, the tool has helped us reduce risks. If any step is missing, it's easier for my team or engineers to identify it. The tool provides accurate recommendations based on the data. Its integration is easy, and I have integrated it with Fortinet firewalls."
"Security review is the most important feature, because it offers a single pane of glass to analyze multiple firewalls."
"Skybox allows organizations to reprioritize the vulnerability they attempt to patch and mitigate, based on the contextual awareness of the network."
"The solution's most valuable and unique assets are the vulnerability management and change management solutions because they identify mistakes in the network before implementation which reduces risks."
"The most impressive feature is optimization and clean-up."
"The stability is bulletproof."
"We use Tufin to clean up our firewall policies because it is so fast. A report about compliance and the clean-up process used to take about one month up before. With Tufin, it takes only one day."
"The most valuable feature are role and objects usage for individual objects and app usage."
"I like the policy topology map, which allows us to visualize the picture of the security policy of the whole organization."
"We were hit by the NotPetya attack. Therefore, our whole company and all its sites were down for several months. So, you don't have an attack like that and not need something like Tufin. Other companies can prevent these attacks, or at least slow them down, by having this type of a tool. We will never go back."
"We have a better view of our compliance status."
"Tufin is the only multi-vendor firewall tool that is available, and it helps to bring everything together and report on what all of the rules are."
"Our engineers save quite a bit of time that was previously spent on manual processes."
 

Cons

"Integration between Panorama and the Edge Firewall has a lot of issues, like different configuration assets, configuration object templates, lack of flexibility, and not a good browser."
"The initial setup can be complex."
"When creating remote access for users, it would be beneficial to be able to base the object on on-premises or the cloud."
"The setup cost is too high."
"They need to do less bug-related releases and create versions that are stable for at least six months at a time. I don't find this issue in other solutions like Cisco, Check Point, FortiGate, or others. Those just provide a patch if there is a bug and we don't have to worry about downtime."
"From a storage perspective, I would like to see an improvement where logs can be compressed to make some space available."
"Panorama needs to work on its configuration issues."
"From a storage perspective, I would like to see an improvement where logs can be compressed to make some space available."
"The solution was quite technical. It would be easier to manage if the solution was more specific about aspects of the solution and provided more advisory around how to use it effectively. It would help users a lot if they were more clear about everything."
"The only place where Skybox has room for improvement, and they're working on releasing this, it's just a slow-go, is the UI. The user interface has historically been via a locally installed thick client. They are moving to a web-based console and it's slowly coming out."
"There is room for improvement in the technical support."
"The cloud site could be better. They should provide some use cases to help users."
"There are multiple dashboards but no custom dashboard. It would be good to include a custom dashboard so that we can actually choose which field and what kinds of things we want to look at."
"Skybox Security Suite can improve the change management module. It is the one part of the tool that is used with the firewall devices and you have a change management module that is used to record changes of all firewalls in the company. It's not compatible with all brands, this is where they can improve the solution."
"The primary room for improvement would be to enable a web interface, which is not something which is there in the product. This is supposed to have come a year, a year and a half ago, but still has failed to come out. It still needs a client application to be installed on a workstation to be able to access that server and then run these reports. So I cannot extend that access to anybody. It has to be one administrator all the time. So unlike a web interface, where you can give multiple users simultaneous access and generate the various reports, that isn't a possibility at the moment."
"I've had issues with licensing where, when they were expiring and I asked for the updated licenses, I would the wrong ones. I think their process needs to be straightened out a little bit - I don't know if they fixed it already, it has been awhile. It wasn't as straightforward as it could have been."
"We would like to see more in terms of integration with other application types within the context, such as next-generation firewalls or next-generation threat devices that are out there."
"I would like to see them get rid of the REST APIs and use something more modern."
"We had a discussion in the Customer Advisory Board yesterday around use of SecureChange. We would like to have an opportunity for an engineer to choose if you want to make or take the policy which has been suggested by the designer functionality, making it more human readable or less human readable (more or less granular). This would be huge for the customers who are using SecureChange. They said this was one of their issues with it, especially for anything that was going into a regulator's or auditor's hands. The more human readable, the better that it would be, and this would definitely be applicable to our industry. It sounds like they are working on this issue, or they took the feedback, but that would be a big one for us in being able to make the jump to SecureChange."
"I would like to see improved role-based access."
"Customizing it can be a little tricky, but that depends on your use cases."
"I would really like to see a new UI for SecureChange. SecureTrack 2.0 has quite an improvement in the UI and it flows more smoothly. The current SecureTrack and SecureChange are a little blocky, and sometimes loading a tab or a page is required to refresh information. Whereas in SecureTrack 2.0, they're starting to improve on that."
"Our project is running on Riverbed for SDN. I don't know if Tufin can integrate with Riverbed. Other than that, I have no issues with this product."
"While Tufin is suitable for small businesses, issues can arise in larger enterprises, particularly concerning policy-based forwarding and NAT traffic."
 

Pricing and Cost Advice

"There is a license required to use this solution and it is paid annually."
"You can buy the hardware only and each box is not even $10,000. It's only $8,000 for the unit itself. However, then you are charged a three-year license at $81,000."
"If I were to rate the pricing of Palo on a scale of one to five, with one being really high and five being a good, reasonable price, I would rate Palo as a three."
"The solution is relatively cheap; I rate it four out of five for affordability."
"The price of Palo Alto Networks Panorama is high. There is a pay-per-use model."
"The price of Panorama is expensive."
"Initially, Palo Alto looks expensive, but if you dig deeper then you will find that it is very comparable, or even cheaper than other solutions."
"Palo Alto is costly compared to Fortinet and Sophos."
"The product's pricing is excellent value. In terms of licensing, make sure you understand your network components, all your hops through your network, thoroughly, before you decide on the total cost. If you want to do point-to-point flow analysis and such, you need to have the configuration of all the devices in between point A and point B. A lot of people don't realize all their network components until they start using this product."
"Skybox comes with extra licenses and has a change management license. The licenses are expensive, but they come with extra value."
"The licensing fee is paid yearly and is approximately $100,000."
"When compared with other companies, the license is more costly."
"The price of the Skybox Security Suite can be expensive."
"The solution is based on a subscription model for annual licenses."
"It's expensive."
"Fully understand the total cost of ownership. They have gone to a new model where you have to replace the hardware every X amount of years at a very substantial cost and fully understand your intended number of nodes. To operate a firewall, you have to pay two licenses, a firewall node and a network node. If you are a reasonable-sized organization, this gets expensive very quickly."
"The price is on the cheaper side."
"Our engineers are spending less time on manual processes: 20 to 30 hour plus."
"Its price is reasonable, but it could be lower. It has been cost-effective for us. We have a contract for three years."
"It's quite an expensive solution."
"We are seeing ROI in terms of having SecureApp."
"I just wrote a purchase order for it. It is a $150,000 a year."
"This solution helps us reduce the time it takes us to make changes. We're probably saving time by 25%."
"Our evaluation showed that Tufin's features were on par with AlgoSec, but Tufin was the better financial choice."
report
Use our free recommendation engine to learn which Firewall Security Management solutions are best for your needs.
862,289 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
13%
Manufacturing Company
11%
Comms Service Provider
10%
Financial Services Firm
18%
Computer Software Company
17%
Manufacturing Company
10%
Energy/Utilities Company
6%
Financial Services Firm
17%
Computer Software Company
14%
Manufacturing Company
10%
Retailer
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Palo Alto Networks Panorama?
The most valuable aspect of Palo Alto Networks Panorama for me is the centralized management of multiple firewalls.
What is your experience regarding pricing and costs for Palo Alto Networks Panorama?
Palo Alto Networks Panorama is expensive but provides good value for money. For the higher end, the cost is justified...
What needs improvement with Palo Alto Networks Panorama?
From the reporting side, naming the reports properly so that they can be easily identified would be an improvement. O...
What do you like most about Skybox Security Suite?
Overall, the tool has helped us reduce risks. If any step is missing, it's easier for my team or engineers to identif...
What is your experience regarding pricing and costs for Skybox Security Suite?
From a commercial perspective, AlgoSec is more expensive compared to Skybox Security Suite. Skybox Security Suite is ...
What needs improvement with Skybox Security Suite?
The dashboard's UI is not interesting; it is quite normal. It would be better if something more attractive or similar...
What needs improvement with Tufin SecureCloud?
Tufin Orchestration Suite ( /products/tufin-orchestration-suite-reviews ) is not commonly used in Thailand due to a l...
What is your primary use case for Tufin SecureCloud?
I have primarily used Skybox and AlgoSec ( /products/algosec-reviews ). I have also interacted with FireMon for compi...
What advice do you have for others considering Tufin SecureCloud?
There is potential for improvement in explaining the analytics in the dashboard for Tufin Orchestration Suite. Tufin ...
 

Also Known As

No data available
No data available
Tufin SecureCloud
 

Overview

 

Sample Customers

University of Arkansas, JBG SMITH, Temple University, Telkom Indonesia
ADP, Blue Cross Blue Shield, BT, USAID, Delta Dental, EDF Energy, EMC, HSBC, Johnson & Johnson
3M, AT&T, Blue Cross Blue Shield, BNP Parabas, ConocoPhillips, Deutsche Bank, GE, IBM, Pfizer, United States Postal Service 
Find out what your peers are saying about AlgoSec, Tufin, FireMon and others in Firewall Security Management. Updated: June 2025.
862,289 professionals have used our research since 2012.