AlgoSec Reviews

Check Point platform with over 14 clusters. 

It is very useful for PCI DSS compliance. 

FireFlow has been a winning product, as it helped with documenting all the processes in our rule implementations.

Rule optimization is one of the features that we have used the most, as firewalls were running for a while with no prior process rules created for them and no follow up being done.

• The reporting could be a bit better. 
• FireFlow was a bit tricky to configure with its customized flows. Maybe the latest release will resolve this.

Deployment was fairly easy. There were no issues. 

Everything was done using in-house resources.

The majority of customer use cases are around rule optimisation, workflow management, and risk/compliance. 

Our customers are able to optimise and clean the rule sets on our FW estate and streamline the change management process whilst adhering to compliance, governance, and risk requirements.

• Firewall Analyser due to its initial ability to cleanse and provide efficiencies to legacy estates. 
• FireFlow continues to drive customer efficiencies, allowing an organisation to keep up with the pace of change.  
• We see the value of BusinessFlow for organisations involved in digital transformation projects migrating to public/private/hybrid cloud models.

Further integration with ACI and NSX will be key to our customers' requirements moving forward, as customers adopt new, innovative environments.

Not applicable.

Our customers are receiving quick ROI using the AlgoSec platform when compared to the FTE costs for using legacy manual processes.

Licensing is offered as a subscription and as a perpetual model.

Pricing is easy to grasp.

We looked at Tufin and Skybox. AlgoSec was the only vendor who had the full suite of products which met the customer and business demands. BusinessFlow was (still is) the game changer.

We use it for global firewall rules management to ensure global policies are applied to all regional firewalls, provide auditing and compliance.

• Central firewall management
• Security policy change management
• Firewall auditing
• Compliance
• Firewall policy optimization

AlgoSec FireFlow:

• Eliminates mistakes and optimizes firewall rules.
• Firewall rule compliance with global security policies.
• Eliminates redundant and unused firewall rules.
• Reporting.
  

• It needs better API integration with its third-party firewall management.
• It needs support for its cloud-based solution.

No stability issues.

No scalability issues.

We have had no complaints about their support.

We did not previously use a different solution.

It is somewhat complex to initially setup.

We implemented it in-house.

Not applicable.

Not applicable.

Not applicable.

I work at a multi-vendor firewall environment. AlgoSec is primarily used to see what firewall policies are in place, as well as PCI compliance levels.

AlgoSec has helped us save time by having one central location to view firewall policies, especially when crossing multiple vendors.

The PCI compliance feature has been helpful in preparing for audits. The Firewall Analyzer has been very helpful.

We are still waiting to implement FireFlow, and getting it into place will hopefully speed up our implementation time and help with policy standardization. There have been some difficulties in getting this portion set up in our environment.

No stability issues.

No scalability issues.

Orchestrating a big network environment with 2600 Layer 3 devices for different brands. The environment spans several hundreds locations across all continents.

It gives control and visibility to the end users. It also lowers the burden of the security department.

• Its ability to describe the business, getting firewall rules as a result. 
  
• Creates the possibility for security engineers to obtain visibility on the complete environment.

Needs better integration between modules and also a better troubleshooting methodology. There are still a few improvements to be done in the user interface.

The HA solution is not good.

The HA solution is not good.

They provide good support, but sometimes lack the knowledge on a specific use case. It has improved in the last six months

No previous solution was used.

The initial setup was extremely complex due to our large environment.

As a partner of the vendor, we do the implementation at the customer site.

Use the entire suite for its best benefits.

Tufin was also evaluated.

Firewall Analyzer (AFA) to analyze configs from production firewalls of various types.

AFA has helped us to spot risky rules, overlapping rules and helps prioritize remediation efforts. We have a variety of firewalls and look forward to expanding services such as FireFlow.

In AFA, the ability to trend rule usage and drill into traffic seen hitting that rule is powerful for cleanup of overly permissive rules.

No issues with stability.

No issues with scalability.

Customer service has been helpful and responsive.

Skybox Security. However, Skybox is has less actionable output than Algosec. 

Setup does take some time to customize to your environment.

• ABF application centric
• Risk and compliance
• Zone matrix
• Conditional workflow
• IPT
• Active change 

It improved a lot in our flow database. In the past, application owners did not know their application connectivity. AlgoSec helps with this and our users are able to documents their rules.

ABF: It is application-centric. which helps to track changes in the application from day one.

Compliance: It helps to have a zone matrix and capture risks.

ABF needs to be more integration with AFF/AFA. We needs object level permissions and application level recertifications.

No stability issues.

No scalability issues.

We used a different network security policy management tool, but we felt it would not be able to fulfill our requirements and address our previous gap. We were looking for a place where we could keep our rules and also track ownership of each rule in the application.

The initial setup was straightforward.

We implemented through a vendor team, whose expertise level was high.

We are satisfied with our ROI.

We evaluated all of AlgoSec's competitors and chose AlgoSec as it was the best.

The product could be improved by adding additional tools for troubleshooting, not only for the firewall, but for other devices like switch and dynamic routing display. Also, it would be good if it could retrieve all information regarding Cisco Nexus switches and devices.

It would be interesting if the product could automate the switch configuration and create a dynamic map of the entire network.

In the VMware platform, sometimes the application is frozen and we have to reload the machine.

Not at all.

The technical services personnel are very confident and provide good assistance.

No previous solution was used.

The initial setup process is excellent.

The in-house implementation was good for FireFlow.

To down level firewall care so context owners and operations can be more agile in their day-to-day operations. It improves audibility and security by having instant access to firewall configurations. It has the ability to create architectures improving performance, reducing costs and KPIs. 

AlgoSec makes it quite easy to down level firewall auditing, running, and maintenance. This has given the operations team, audit, and security instant  access to firewall configurations.  

The whole platform is extremely useful. I like the auto-mapping features and configuration overview. We use this for many things, but primarily for quick reactions to security events, audit, project management, and quick operational efficiencies. 

A modernized GUI would be a nice feature upgrade. The GUI looks a little outdated. 

There are a lot of updates for the product which have been good. However, it is a pain to always have to upgrade the product. 

No stability issues.

No scalability issues.

Our experience with the support is fair. 

No.

It is pretty easy to set up and run.

We implemented it in-house. 

It has improved our performance in operations, projects, and security. 

It will reduce your operations costs with improved team performance. 

We evaluated FireMon.

Overall, the product is very good for firewall insights. 

Since approximately 2005, I have used AlgoSec in almost all of the companies that I have worked at. AlgoSec Firewall Analyzer (AFA) continues to be my favorite product, as well as the core of other AlgoSec products. My teams use AFA to validate firewall (FW) changes, see hidden and complex rules, identify dangerous combinations of rules across many enterprise firewall situations, and enable a risk-based approach to firewall rules and associated risk management.

AlgoSec is able to provide a consistent view into all of an organization's firewalls, regardless if the management is done by different companies, e.g., Check Point's, Cisco's, and Palo Alto's firewall policies are presented to the security team in a consistent format. This enables risk management decisions to be made without detailed understanding or experience in various underlying firewall technologies or management systems.

AFA is the best feature. It shows consistent information regardless of the underlying platform. Unused rules, hidden rules, and dangerous combinations of rules are easily found and tracked by using AlgoSec.

• I would like to see continued expansion to other firewall versions, platforms, and vendors. 
• I would also like to see continued work on the roadmap.