Tufin Orchestration Suite and Skybox Security Suite are leaders in the network security management category. Tufin holds an advantage in automating security policy management, while Skybox excels in vulnerability analysis and risk management.
Features: Tufin Orchestration Suite provides advanced automation for rule analysis, offers compliance checking, and enhances firewall policy management. It efficiently integrates with Cisco ACI and supports various firewalls, offering enhanced visibility. Skybox Security Suite provides comprehensive vulnerability management and network assurance insights, highlighting risks across environments, and helps prioritize vulnerabilities effectively.
Room for Improvement: Tufin could enhance user-friendliness, simplify its licensing model, and improve integration with Layer 2 devices. Expanded automation features are also needed. Skybox should simplify its licensing, enhance integration with other security solutions, and improve its web interface for better usability.
Ease of Deployment and Customer Service: Tufin and Skybox support on-premises and hybrid cloud deployment, with Tufin providing additional private and public cloud options. Tufin is noted for its support in complex environments, but initial support levels could be stronger. Skybox is praised for its customer service, although there are varied opinions on its responsiveness, suggesting improvement is needed.
Pricing and ROI: Tufin Orchestration Suite is perceived as costly but justifies the expense with its time-saving automation features, leading to clear ROI through reduced manual processes. Skybox Security Suite offers good value with a complex pricing model, delivering ROI via improved security posture and efficiency.
The Orchestration Suite saves time when implementing rules.
A significant issue was contacting support after hours on the weekends.
In recent years, they have stopped providing specialized engineering support.
The support team is effective; they connect to the network quickly and help resolve any issues that arise.
The team is eager to help in fixing issues.
One issue I faced with scalability was the transition from Skybox Security Suite's 6500 platform to the 7500 series due to licensing costs becoming prohibitive.
Only the licensing part of Skybox had an edge. We were not renewing the licenses of Skybox every year, but in the case of other tools, we would have to renew if we wanted to use those tools.
Reporting could have been improved, and feature requests often were not implemented.
It would be better if something more attractive or similar useful information found in AlgoSec was available.
The analytics features of Tufin Orchestration Suite are challenging to use and require technical expertise, which is a concern as there is not much knowledge in this field in Thailand.
Issues can arise in larger enterprises, particularly concerning policy-based forwarding and NAT traffic.
The design needs improvement, particularly in recognizing target devices and target files.
The pricing became prohibitive when transitioning between the 6500 and 7500 series models.
From a commercial perspective, AlgoSec is more expensive compared to Skybox Security Suite.
FireMon and Skybox are considered more cost-effective.
The pricing of Orchestration Suite is high, which is a point for improvement.
Tufin and AlgoSec are at the same level in terms of pricing.
The tool successfully helped in preventing vulnerabilities and breaches.
Skybox Security Suite's network modeling and path analysis is a good feature when we need to check regarding the connectivity.
The most helpful feature is the firewall analyzer.
AlgoSec adds more value with its vulnerability control, which benefits organizations by reducing expenses associated with audits.
New employees can quickly grasp the various IPs, devices, and the network's logical and physical layout within a short period.
It offers automation capabilities that are very helpful, especially for network security orchestration and applying policies.
| Product | Market Share (%) |
|---|---|
| Tufin Orchestration Suite | 21.9% |
| Skybox Security Suite | 8.8% |
| Other | 69.3% |
| Company Size | Count |
|---|---|
| Small Business | 21 |
| Midsize Enterprise | 4 |
| Large Enterprise | 21 |
| Company Size | Count |
|---|---|
| Small Business | 29 |
| Midsize Enterprise | 13 |
| Large Enterprise | 152 |
Skybox Security Suite provides comprehensive tools for network and firewall compliance, vulnerability management, and change management, with a focus on risk reduction and network optimization.
Skybox Security Suite supports over 130 vendors with massive scalability and seamless integration, notably with Nessus and Qualys. Its features include network path analysis and offline attack simulation, which enhance management effectiveness. Despite its robust offering, improvements are needed in its UI, web interface, reporting detail, and customization. Automation, orchestration, and device policy provisioning require better support, and integration with tools like Rapid7 could be improved. Enhancements in firewall configuration checks, cloud connectivity, pricing, and marketing awareness are also called for, alongside a transition from Java GUI to a consistent web-based system.
What Are Key Features of Skybox Security Suite?Skybox Security Suite is commonly used in industries requiring strict compliance like finance and healthcare. Firms employ it for firewall audits, enhancing network visibility, and managing configurations against standards such as PCI, ensuring security and policy compliance across expansive networks.
Tufin enables organizations to automate their security policy visibility, risk management, provisioning and compliance across their multi-vendor, hybrid environment. Customers gain visibility and control across their network, ensure continuous compliance with security standards and embed security enforcement into workflows and development pipelines.
We monitor all Firewall Security Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
