What is our primary use case?
Our primary use case is fo the security of our medical facility. We have a lot of holes in the firewall and we wanted to see the details. For example, we see a lot of traffic between the different zones that we needed to reduce. So we use the solution to eliminate this traffic. It also allows us to have a lot of optimization rules for a good switching policy in the firewall.
It can quantify and reduce a lot of risks.
What is most valuable?
I like the deployment and management of this solution. I don't have much experience in that kind of security solution, but I have three years of experience in similar solutions, like AlgoSec. I do some scripts to optimize the solution, such as configuring the API.
Additionally, when we export the report, you can see a lot of logs of all the equipment in the company and we can identify some of the machines or some log station in the network. Also, the user can create some requests to implement the flow and push the rules in the firewall. You can analyze the log and the traffic, you can have a lot of API's, and do some reporting.
What needs improvement?
In the next release I would like to see better migration in the Cloud because that will allow more visibility in the network.
For how long have I used the solution?
I have been working with Tufin Orca for one year.
This solution was already deployed and we just manage it.
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
This solution is scalable.
How are customer service and technical support?
I have tons of contact with support. If you have some problems or issues you can contact support and manage the problem together. I did that with a lot of competitors, like Palo Alto on our network. If we have an issue in production, my production team will try to solve it or you can contact support to manage the issue.
I am satisfied with the support.
How was the initial setup?
The initial setup is not complex. It's easy for me because I have some experience and training on it. Now I can do a whole production on the application.
What about the implementation team?
We used an integrator for implementation because I have a colleague who has a lot more experience than me and we worked together to manage that solution.
What other advice do I have?
I would recommend this solution. I think it's a good solution to have. It is good to know what this solution does in the network. You can have a lot of training on it and see a lot of questions from different users in the company.
On a scale of one to ten, I would rate it an eight.
Which deployment model are you using for this solution?