Tufin Orchestration Suite Primary Use Case

Amroy Lumban Gaol - PeerSpot reviewer
Information Security Engineer at a financial services firm with 10,001+ employees

Our company uses the solution to auto deploy and analyze locks for hundreds of Layer 2 firewalls which are more challenging than Layer 3. 

We write script for manual configurations, create policies, analyze all rules and locks, and then auto deploy.

We currently have 40 engineers and 100 staff who use the solution. 

Maintenance of the solution is easy because we copy the latest configurations. 

View full review »
DS
Network Engineer Lead at a energy/utilities company with 10,001+ employees

Currently, we're an electric utility. We use it for NERC CIP for validating rules into ESPs, which makes it easier for us to pull out the rules and justifications for auditors.

We are using either Tufin 18-2 or 18-3 and testing 19-2.

As a company, we don't have anything in the cloud.

View full review »
MH
Network Security Operations at a insurance company with 10,001+ employees

The primary use case of Tufin is firewall management, firewall reviews, and eventually, to do rule deployment.

It was more to start standardizing our prior work changes. The initial first step is to understand and make sure that whatever change goes in is complying to our policies and standardized. The eventual goal is to get everything automated.

We are using SecureTrack at the moment, but we do have licenses for SecureChange as well.

View full review »
Buyer's Guide
Tufin Orchestration Suite
March 2024
Learn what your peers think about Tufin Orchestration Suite. Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
767,847 professionals have used our research since 2012.
EJ
Manager at PG&E Corporation
  • Firewall audits
  • Firewall rule processing
  • Path analysis
View full review »
PM
Senior Network Engineer at a financial services firm with 10,001+ employees

We use it for rule re-certification and rule review. Twice a week, we use the Tufin report to see what changes or adds were done to the policies. Finally, we also use it for rule automation. We have it integrated with ServiceNow for rule requests.

View full review »
EA
Senior Network Engineer at a pharma/biotech company with 10,001+ employees

We use the SecureTrack component for several things including the maintenance of firewall rules. Examples of this are identifying rules that are no longer in use and identifying shadowed rules that can be consolidated. We also use this solution to look for violation policies, as well as unused rules.

We use this solution in AWS and in our on-prem firewall.

View full review »
RL
Director at Visa Inc.

The primary use cases are firewall support and generating rules.

View full review »
SE
Security Analyst at a retailer with 10,001+ employees

The primary use case is monitoring routers, switches, firewalls, but mostly routers and firewalls.

We are just using SecureTrack, either version 18-2 or 18.3.

View full review »
AB
Manager of Security Engineering at Global Payments inc

Right now, we are just using it for SecureTrack. Next year, we have plans to buy the license for SecureChange as well.

I think we're using version 18, and we are in the process of upgrading it to 19-2

View full review »
VT
Senior Network Engineer at Commercial Bank of Romania

I am using Tufin for audits and for deploying changes. I am working with this solution in the financial industry.

View full review »
BW
Change Manager at a pharma/biotech company with 10,001+ employees

The primary use case is processing change requests.

While our organization has implemented SecureChange and SecureTrack, we are not using either tool rather extensively. Therefore, we are trying to put together a plan for the organization to adopt these tools more firmly.

The idea is to be using SecureChange as the primary portal for entering change requests on both the perimeter and shop floor network firewalls. The way we are approaching this is to do a pilot first among a few sites, then bringing it out to a larger group once we feel more comfortable with how the pilot went.

The pilot will probably last for a couple weeks. After that, we will roll it out in buckets or groups to the rest of the sites. Then, the primary use case will be using tool for change management and SecureChange, while SecureTrack will be used by our security monitoring group who is tracking for threats.

My engagement to date and going forward will be to assist in the planning of the rollout and helping with the rollout. I make sure teams and users who will be using this tool are actually using it, including processes from: 

  • Submitting a firewall change request.
  • Price or rule requests.
  • Opening a port.
  • Firewall maintenance or maintenance processes, e.g., rule cleanup.
View full review »
Dominic Salzmann - PeerSpot reviewer
Senior Manager - Network-& Systems-Management at a computer software company with 201-500 employees

We are just using the solution as a tool for network migration management, primarily on the firewall side and inside, and to ensure we have some central view.

View full review »
WT
CyberSecurity Supervisor at a energy/utilities company with 10,001+ employees

We use this solution for firewall rule management.

View full review »
FF
Information Security Consultant at Deutsche Telekom Security GmbH

Tufin is used for the design proposals process.

View full review »
MN
Works at Daimler AG

Automate the firewall change via SecureChange Workflow

View full review »
AA
Infrastructure Engineer Specialist at a healthcare company with 10,001+ employees

We make use of the SecureChange and SecureTrack modules. In SecureChange, we use the Workflow, and we use the USP to see if there are any rule violations.

View full review »
DH
Senior IT Analyst at Exelon Corporation

We use this solution for firewall compliance reviews.

View full review »
JF
Security Engineering at a financial services firm with 10,001+ employees

We use Tufin to do the review of rules, best practices, changes, and usage. So, it's an outside entity looking in to see what's happening on the rules sides. Then, we can do recertification for our rules, so they can be used again. Tufin puts it together really well, saying what's needed or not, then cleaning things up. We've been a customer for a very long time with them, and we're pretty pleased.

View full review »
JC
IT Coordinator at a financial services firm with 10,001+ employees

We are using Tufin to be security compliant within our organization.

View full review »
TL
Services Engineer at AccessIT Group

We do risk, cleanup, and change.

View full review »
JB
Security Consultant at a insurance company with 10,001+ employees

We primarily use this solution for Change automation. We do not use USP, yet.

View full review »
CH
Works at a media company with 10,001+ employees

We are an IT service provider. We are using it in our company and on the customer side. So, we have internal customers, and we are also a solution provider for external customers.

View full review »
NH
Firewall Architect at a financial services firm with 10,001+ employees

Our primary use case is firewall automation. We use SecureTrack and SecureChange. We have distribution serves, Remote Collectors, but what we primarily use is SecureChange integrated with ServiceNow for users to submit firewall requests. They then go to SecureChange which designs the rules and implements them.

View full review »
AM
Infrastructure Analyst at a manufacturing company with 10,001+ employees

We are using the SecureChange and SecureTrack components of this solution for rule re-certification and change automation. We are still in the implementation phase, but we expect to have this solution in our production environment by October 1st.

View full review »
BS
Service Engineer at G2 Deployment Advisors

We are an integrator, and we implement this solution for our clients. Most of them use USP extensively. It is also commonly used for firewall rule clean up, automation, and change control.

We have a whole range of use cases in different fields. We've got energy companies, banks, and healthcare is a big one. The vast majority of them use both SecureTrack and SecureChange and almost all of their features, rule cleanups, risk avoidance, and change automation.

I, myself, typically lean a little bit heavier to the integration and coding side, and interacting with the APIs. But I also do plenty of installations and initial configurations and also some first-level support and maintenance.

View full review »
RH
Information Security Engineer at a healthcare company with 10,001+ employees

There are five people using this solution in my company. I manage the team that utilizes Tufin. I have had experience with the demos that my team has given me in relation to the auditing of our Palo Alto platform.

I'm a consumer of reports. The reports are clear as long as they're set up correctly. I'm able to see auditing changes, and changes in our firewall platform more clearly than with the native tools. It seems relatively useful. It can also provide guidance on different configurations that we have. 

The solution is on-premise.

View full review »
DL
Executive Director at a financial services firm with 1,001-5,000 employees

Our primary use case is trying to make sure that when firewall rules are requested, they meet our compliance. Tufin has a notion of a universal security policy, where you line up the policies and we use the solution for that. We also use it to track all of the changes. I'm the executive director of the company. 

View full review »
IM
Senior IP Network Defense at a comms service provider with 10,001+ employees

I'm using the Fortinet firewalls, so I need the firewall manager tool to manage those files, together with the FortiManager. The Tufin guys provided a solution for our data center where we have a box server, which was specifically developed for Tufin. It would run the scan on the network, get to the firewall, or go to the router, run the scan and give me the compliance, and then send it to me. Then I get a report from there.

View full review »
JP
Network Security Analyst at a energy/utilities company with 10,001+ employees

The primary use case is role recertification.

We are trying to get into it for compliance, but we are having issues with that.

This solution helps us ensure that security policy is followed across our entire hybrid network.

View full review »
JR
Senior Specialist at Cigna

My company primarily uses this solution for reporting and enforcing policy. My role has to do with developing applications to allow integration with our other tools.

View full review »
JF
Managing Director at Midpoint Technology

We are a reseller and solution provider. We have this product running in our lab, and what differentiates us is that we are able to take our client's use cases and execute them in our environment. 

View full review »
AO
Application Developer at CyberAge

We deployed the solution based on the preferences and needs of our clients. The solution was deployed on cloud and on-premises. However, it was primarily deployed on cloud.

View full review »
MZ
DSI France retail banking networks at a financial services firm with 10,001+ employees

We use the solution on-premises.

View full review »
AE
Network manager at Ekol Lojistik AS

We're using this solution mainly to get some audit reports regarding the policy installations on our firewalls. We aren't using any changes or other features, and we're not installing policies automatically. We're just using it to collect some log data like who installed something and what they did.

View full review »
IM
Senior IP Network Defense at a comms service provider with 10,001+ employees

We are a solution provider and this is one of the products that we implement for our clients. We also use it ourselves.

We have this solution installed in our data center, where we have a box specifically for Tufin. It scans our network, looks at the firewalls and the routers, assesses compliance and sends me a report.

View full review »
MU
Network Security Engineer at Customer Worldpay

Primarily, it is being used as a type of security auditing control on our firewalls. We are in the middle of a new project acquiring dedicated new hardware while building out SecureTrack and SecureChange. After this initial project, and building out all that infrastructure is done, then there will be a project to kick off some of the automation and orchestration type stuff to try and improve some of those processes for the IT group.

The goal is to use it to revalidate, clean up, and optimize firewall policies, but we are not there yet.

The company has had the product in place for a while. 

I am giving up the web proxy stuff, so I can become the SME on the Tufin.

View full review »
BB
Network Engineer at a healthcare company with 10,001+ employees

We use it with SecureTrack, mainly for auditing purposes. We also use SecureChange for workflows on temporary firewalls.

View full review »
MM
Regional OSH at Pos Malaysia Bhd

Our primary use case was firewall policy management. We did a PoC with Tufin.

View full review »
TN
CyberSecurity Architecture Manager at a computer software company with 10,001+ employees

We were primarily using the solution in order to grade the firewall rules.

View full review »
CM
Consultant at Critical Design Analytics

We implement Tufin for other customers and help set it up. 

I'm not the end user. I just set it up for the end user.

We are using the latest version from 2018.

View full review »
VV
Head of IT Security at Banco Privado

The primary use case is for compliance with PCI regulation for local and country regulations.

We are using the latest version of the product.

View full review »
JS
Senior Network Security Engineer at a retailer with 10,001+ employees

The primary use case is firewall analysis.

We use SecureTrack, which is great.

View full review »
JY
Security Compliance at Caterpillar Inc.

We use SecureChange for change management, and the SecureTrack component for reporting and the summary.

View full review »
SF
Specialist in Network Security Operations Support at a financial services firm with 10,001+ employees

We are using Tufin to generate reports on unused rules and for compliance reporting.

View full review »
reviewer1185804 - PeerSpot reviewer
Works at a insurance company with 10,001+ employees

We use SecureTrack for troubleshooting, APG (Automatic Policy Generator), implementation of new requests, change monitoring, rule and object usage reports.

This solution provides an unified display of rules across vendors.

We use this solution e.g. for cleanup and processing of shadowed rules.

View full review »
TL
Information Technology Graduate at a computer software company with 10,001+ employees

Some of our customers has Tufin, and we manage it. We're also planning to have our own Tufin that we're going to use as a leveraged service for all of our customers.

View full review »
MB
Manager at Italtel

We primarily use this solution for integration, and we deploy the solution on-premises and on cloud.

View full review »
GK
Network Engineer at a healthcare company with 10,001+ employees

Our goal is to move towards a completely automated system within our organization. We also want to integrate different business units, see what our vision is from an automation standpoint. In addition, we want to get complete visibility across all the different platforms that we have.

View full review »
MJ
Lead Engineer at a insurance company with 1,001-5,000 employees

We are using SecureTrack and SecureChange to make policy changes.

View full review »
TI
Network Operations Engineer at a computer software company with 10,001+ employees

We have a lot of ASA firewalls. We primarily use the product in order to lay down the rules and try to find out if there are any duplicate rules that need to be cleaned up, et cetera. It is mostly tasks like that.

View full review »
reviewer1185783 - PeerSpot reviewer
Works with 10,001+ employees

We are using Tufin to manage our multi-vendor firewall environment.

We are using the Secure Change workflow to request, asses, and implement Firewall requests. Secure Track is used from our Security and Audit department for regular policy reviews.

View full review »
DY
Associate Director Program Management at a pharma/biotech company with 10,001+ employees

The primary use case is locking down the firewalls to Zero Trust and automating the risk assessments.

View full review »
BB
Network Engineer at a energy/utilities company with 10,001+ employees

We are using it mostly for reporting, as well as NERC CIP compliance for rule documentation. The primary use case is for doing rule cleanup, knocking down overly permissive rules, and cleaning up old unused rules. Basically, we are using the reporting functionality out of SecureTrack.

View full review »
JJ
InfoSec Consultant at a insurance company with 10,001+ employees

Our primary use case for this solution is firewall automation for rule requests.

View full review »
SS
Automation Engineer at Cox Communications

We use this solution for workflow intake and policy cleanup. It is also used for firewall policy requests.

View full review »
FG
IT Manager at a financial services firm with 10,001+ employees

Our primary use case for this solution is risk visibility.

View full review »
it_user884007 - PeerSpot reviewer
Network Architect at a transportation company with 10,001+ employees

We deployed a proof of concept. We added most of our firewall base to Tufin, although not all. We checked and tested Check Point, Palo Alto, Juniper, Cisco routers, Juniper routers, and F5 load balancers. Mostly we grabbed one instance of each of our technology devices, added it to Tufin, and tried different things. We tried SecureTrack and some basic SecureChange to try to automate our firewall partitions, the firewall "tickets." We presented a form to users to enter the source, destination, service, etc. This was our PoC.

Right now, we're in the process of purchasing Tufin.

View full review »
SK
Senior Network Engineer at a financial services firm with 1,001-5,000 employees

Tufin is the product which we do our compliance under. That's one of the requirements. We also do change control tracking: who does what and the impact. 

The users have reports for best practices and clean up.

The primary use case going forward will be automation, changing the internal process by trying to eliminate human errors.

View full review »
JS
Security Engineer at a manufacturing company with 10,001+ employees

Firewall automation and orchestration.

View full review »
TH
Team Lead of Border Protection at a manufacturing company with 1,001-5,000 employees

We use SecureTrack and SecureChange to manage all of our firewalls. 

We use the latest version.

View full review »
ET
Business Director at a tech services company with 201-500 employees

For us, it's more about managing the policies and having an overview of all the policies that are available, that we currently implement, and bringing them to a central console so that we can have an overview of what's going on. We deploy Tufin for one of our customers, it's not for ourselves.

View full review »
SB
Cyber Security Engineer at a healthcare company with 10,001+ employees

Our primary use case is firewall management and policy management.

View full review »
JD
Network Security at a transportation company with 10,001+ employees

We are using SecureChange to start orchestrating a lot of our changes. Our users can then request changes instead of having to go directly to us. We are trying to automate some of those pieces.

View full review »
FG
IT Manager at a financial services firm with 10,001+ employees

Our primary use case if for risk compliance. 

View full review »
CM
Manager at a manufacturing company with 10,001+ employees

Our primary use case is for automation and orchestration.

View full review »
JR
Security Engineer at Allegiant Air

We use Tufin for two purposes: 

  1. To track all changes on our network equipment, our Cisco gear, F5s, and Check Point. 
  2. We use SecureChange. So, we submit any firewall change through SecureChange, then we use that for the approval process. We are trying to have it end-to-end, where it provisions the device, but we're not there yet. 
View full review »
ST
Network Security at a tech services company with 5,001-10,000 employees

The primary case is to get more compliance and security with good performance. We use Tufin to use some Check Point products. The product is for the way we manage our security, performance, and boxes.

View full review »
CG
Security Engineer at BCBSMA

Our primary use case for this solution is for audit and firewall rule base management. 

View full review »
QL
Senior Information Security Architect at First Citizens Bank

We use it to manage our policies, consolidate them, and if we see anything missing, we can use it to track that, as well.

Right now, we're mainly on-premise. S,o the cloud piece is not being used right now. However, in the future, we will use it. I think it will help tremendously to get a good picture across the board.

View full review »
AW
Principal Consultant at a consultancy with 1-10 employees

The solution is predominantly used for managing firewall changes, policy changes, and understanding those aspects.

Most people use it for the basics, even though they could use it for a lot more.

View full review »
HS
Security Analyst at Equifax Inc.

We use this solution for auditing our security and system access entries, then alerting us to problems.

View full review »
CL
Senior Adviser Cyber Security at a comms service provider with 10,001+ employees

We use it for advanced reporting and root analysis. In some cases for clients, we use it for root deployment. 

View full review »
JS
Network Infrastructure Engineer at Ropes & Gray

We use this solution for Firewall audit, compliance, and some automation.

View full review »
BB
Networking Engineer at a comms service provider with 1,001-5,000 employees

The primary use case is tickets.

View full review »
BN
Network Security at a insurance company with 1,001-5,000 employees

The primary use case is for firewall auditing. We use it for audit monitoring, login changes, and firewall changes. We are looking at automation, but not yet.

View full review »
reviewer1188195 - PeerSpot reviewer
Works

We use this solution for recertifying connections, application-based automation, and compliance with regulations.

View full review »
HM
Network/Security Engineer at a leisure / travel company with 51-200 employees

We are doing firewall automation through Tufin.

View full review »
JN
Security Engineer at a government with 10,001+ employees

We primarily use SecureTrack for viewing and tracking changes to policies.

View full review »
OJ
Consultant at Sirius Computer Solutions

It's mainly for the automation of policies.

View full review »
NK
Firewall Administrator Security Engineer at a comms service provider with 1,001-5,000 employees

The primary use case is data flow analysis.

View full review »
SB
Senior Consulting Manager at a tech services company with 10,001+ employees

Our primary use case is configuration management and change management.

View full review »
VK
Owner at Concepts Solutions Informatiques

Firewall policy management over all firewalls from one single point. We browse policies, objects, and their usage. The report gives us an image of where risks are.

View full review »
VM
CTO at Uridium Technologies

Our primary use case for this solution varies on the customer's needs. However, we primarily use it to augment the safe firewall and consolidate various firewall vendors.

View full review »
Akhilesh Mishra - PeerSpot reviewer
Technical Lead at M.Tech

Our customers use Tufin to manage multiple firewall access rules through a single console. We have done on-prem, public, and private deployments of this solution.

View full review »
DM
Professional Services Engineer at a tech services company

Our primary use case for this solution is firewall remediation.

I didn't get very far with it because I didn't used Tufin in production, only during the evaluation phase.

View full review »
PD
IT Security Professional at a pharma/biotech company with 10,001+ employees

The primary use case is firewall management, consolidation, and optimization.

View full review »
CD
Security Engineer at a insurance company with 201-500 employees

The primary use case is automation.

We are using the latest version.

View full review »
SM
Security Analyst at a government with 1,001-5,000 employees

Our primary use case is firewall monitoring, rule changes, and logging.

View full review »
PC
Consultant at RIPEN

Our primary use case is the policy request automation workflow.

View full review »
ST
Information Security Engineer at a tech company with 1,001-5,000 employees

Our primary use case is for change audit.

View full review »
MS
Presales Network & Security Engineer at a tech services company with 51-200 employees

The primary use case of this solution is for monitoring, automation, policy orchestration, and security.

View full review »
IS
Security Operations Engineer at a security firm with 201-500 employees

Our primary use case is fo the security of our medical facility. We have a lot of holes in the firewall and we wanted to see the details. For example, we see a lot of traffic between the different zones that we needed to reduce. So we use the solution to eliminate this traffic. It also allows us to have a lot of optimization rules for a good switching policy in the firewall. 

It can quantify and reduce a lot of risks.

View full review »
PC
Owner at SiS International Limited

We use Tufin for firewall management, firewall compliance monitoring, and unified policy implementation.

View full review »
it_user907089 - PeerSpot reviewer
Network Engineer at a tech services company with 11-50 employees

We use it for compliance, and the performance is good.

View full review »
it_user907089 - PeerSpot reviewer
Network Engineer at a tech services company with 11-50 employees

We were looking for a solution to provide firewall rule management that would enable us to choose which firewall rules to keep and which to eliminate.

View full review »
RP
Chief Information Security Officer at a computer software company with 201-500 employees

We do firewall reviews on a quarterly basis.

View full review »
Buyer's Guide
Tufin Orchestration Suite
March 2024
Learn what your peers think about Tufin Orchestration Suite. Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
767,847 professionals have used our research since 2012.