Tufin Security Suite
Strengths: Full-featured policy and risk management tool.
Weaknesses: None that we found.
Verdict: Very strong offering with all the bells and whistles that is well worth your inspection, so we give it our Recommended rating this year.
Back again this year is one of last year's favorites. The Tufin Security Suite is back with some of the same solid features that made it an excellent product last year, but it also has some new features that again continue to separate it from the pack. Tufin Security Suite is made up of two major components: The first is SecureTrack, which can scan and access firewalls, routers and switches to make sure they meet compliance and security policy. The second is SecureChange, which automates policy change across the enterprise network environment.
We found this product to be easy to both set up and configure. The initial setup process consists of connecting the appliance to the network and, using a web browser, navigating to the default address assigned to the appliance. Once there, we were prompted to run a short setup wizard, which not only assists in setting up the basic network information, such as IP address, but also allows for license input and other basic configurations to get the appliance up and running. After the wizard is complete, all further administration and management is done using the web-based management console. Overall, we found this console to be easy to navigate with an intuitive look and feel, and we instantly felt comfortable moving around and configuring the appliance for the environment. Something new this year was the addition of a dashboard to the console, which provides a nice overview with a good amount of useful at-a-glance information.
Now on to functionality. As said earlier, there are two components of the suite that work in tandem to make this product a comprehensive policy and risk management tool. SecureTrack offers administrators the ability to interface directly with routers, switches and firewalls throughout the network and manage changes to rules and policy optimization and run built-in compliance reports against the infrastructure for auditing purposes. SecureChange comes in to add to the overall flexibility and comprehensiveness of the suite. Using SecureChange, administrators can run changes through a customizable workflow to ensure a change is not unnecessary, could cause vulnerabilities in the infrastructure or is out of regulatory compliance. After the change has passed through the workflow and is proven to be acceptable, it can be automatically pushed out to certain devices through an automated provisioning process.
Documentation consisted of the usual wares of a short quick-start and a full user guide. The quick-start guide offers a detailed explanation of the initial setup process, including full screen shots and step-by-step instructions for going through the setup wizard. We found all documentation to be well-organized and easy to follow.
Tufin offers no-cost email- and phone-based technical support to customers during business hours. Customers also can purchase additional aid through a contract, which gives access to 24/7 full technical support. Tufin also offers professional services for on-site installation at an extra cost.At a cost of $25,000, we find this product to be an excellent value for the money. The Tufin Security Suite offers a comprehensive set of features and functionality that cross paths of both policy and risk management.