Tufin Security Suite R 13-1
Strengths: Full-scale network infrastructure change and policy management.
Weaknesses: None that we found.
Verdict: Pricey, but absolutely worth it for its powerful functionality and excellent performance. This one is our Recommended product for policy management tools.
Tufin Security Suite is back again this year and, just as in years past, it has some great new features onboard. The Tufin Security Suite is comprised of the company's two previous products, SecureTrack and SecureChange, and its newest offering, SecureApp. These all work together to streamline firewall, router and network infrastructure policy so that all rules are in order and compliant to the organization's needs - without being redundant or limiting. This product is available as both a physical or virtual appliance and can integrate directly into any network environment due to the large breadth of supported products.
While this tool is quite powerful, it also requires quite a bit of configuration to do its job at the highest level. The initial setup of the appliance is done by simply connecting it to the network and accessing the web-based management console to launch the initial setup wizard. At the completion of the wizard, the appliance has all the network and initial configuration settings necessary to be up and running in the network. All further configuration and management is done via the web-based management console. This single console houses the various pieces of the suite, and it is easy jumping between the applications. We found the console to be easy and intuitive to navigate and to have an organized layout.
The high point of this product is the way that all the various parts of the suite are quite powerful by themselves, as well as together. The first component really is SecureTrack, which allows for full auditing and management of firewalls and routers throughout the entire network infrastructure. Using SecureTrack, administrators can easily find and eliminate non-compliant, broken or duplicate rules quickly and easily. SecureChange takes the audit one step further by providing change management and change workflows, as well as change provisioning throughout the enterprise as needed. The latest addition, SecureApp, goes one step beyond that to automate application access and provisioning. This allows app designers and administrators to be able to ensure that an application gets the required access to the network it needs without sacrificing security.
Documentation includes a quick-start guide, as well as user guides for each of the three applications. The quick-start focuses on getting the appliance up and running in the network and the user guides provide all the necessary configuration information for the product features and functions. We found all documentation to be well-organized and to include clear instructions and screen shots.
Tufin offers no-cost support to customers during business hours. Customers requiring 24/7 support can purchase premium assistance at an additional recurring cost. Customers can also access an online portal, which includes many resources, such as a knowledge base and product documentation downloads.
At a price of $45,000 for up to 10 managed applications, this product comes with quite the price tag. However, we rate it a solid value for the money based on its many advanced features and how well these are integrated. The Tufin Security Suite offers a robust feature set that can help streamline network infrastructure policy, along with allowing for new applications to be easily added without any worry that security is being compromised. - MS