Try our new research platform with insights from 80,000+ expert users

AWS Firewall Manager vs Tufin Orchestration Suite comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 4, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

AWS Firewall Manager
Ranking in Firewall Security Management
9th
Average Rating
7.8
Reviews Sentiment
7.6
Number of Reviews
8
Ranking in other categories
No ranking in other categories
Tufin Orchestration Suite
Ranking in Firewall Security Management
2nd
Average Rating
8.0
Reviews Sentiment
7.3
Number of Reviews
183
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2025, in the Firewall Security Management category, the mindshare of AWS Firewall Manager is 4.4%, down from 6.8% compared to the previous year. The mindshare of Tufin Orchestration Suite is 22.0%, up from 20.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewall Security Management
 

Featured Reviews

Trivikram Rajendreaprabhu - PeerSpot reviewer
Provides detailed analytics and valuable auto-scaling functionality
Our primary use case involves managing cloud infrastructure and automating deployment processes. The environment comprises a hybrid cloud setup integrating both on-premises and cloud-based resources The solution has notably increased our operational efficiency and reduced the need for manual…
MithatBulut - PeerSpot reviewer
New employees can quickly grasp the various IPs, devices, and the network's logical and physical
Tufin is primarily used to orchestrate and manage network traffic and firewall devices. It is specifically useful for implementing firewall policies and handling requests from clients that require policy updates or changes Tufin simplifies understanding network topology. New employees can quickly…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The interface is intuitive and it is easy for the users."
"Also, the strength of the community is invaluable."
"The most valuable feature is the centrally managed rule. I also like the central orchestration."
"AWS Firewall Manager isn't a separate solution when you create the virtual private cloud (VPC), so you can control the traffic through that security group."
"It has centralized cloud firewall management rules. It provides compliance in tracking and reporting."
"Once this solution is set up, we hardly have to touch it."
"The product is highly reliable."
"The most valuable feature is scaling, which allows you to deploy one configuration and scan and deploy it across the network. The automated policy application feature also streamlines security operations."
"This solution has helped us to meet our compliance mandates. We implemented the Unified Security Policy (USP). This helped enforce what compliance requirements that we had. We have mitigated and remediated issues that have been brought forth due to that USP showing us issues."
"Tufin assists us in maintaining a robust view of our internal network topology."
"The solution is quite scalable."
"It provides very good reports. It can easily integrate with multiple firewalls, such as Cisco, Juniper, Palo Alto, and Checkpoint. We can push a policy from Tufin to a firewall, which is a very good feature. We can monitor all access rules and the operating system of a firewall."
"The initial setup was straightforward."
"This solution provides a more organized manner for us to track towards compliance for our PCI audits."
"It offers automation capabilities that are very helpful, especially for network security orchestration and applying policies."
"The product streamlines our change management process."
 

Cons

"This solution is suitable for a small-scale enterprise and may not scale up to a very high volume of traffic or a large number of servers."
"They could consider organizing and enhancing documentation in a more structured and chronological manner"
"The system should be more customizable."
"AWS Firewall Manager should be open to manage other third-party appliances as well."
"Enabling and configuring the logging is not that straightforward."
"The product could benefit from improvements in the user interface and integration capabilities."
"I would like to see AWS add some UTM features to the firewall. It would also be great if AWS Firewall had native IPS/IDS. They have the separate IPS/IDS, GuardDuty."
"It needs to be more employee-friendly, and the security management could be more efficient."
"We want to have the ability for a ticket requester to add somebody, or to give somebody view rights to their ticket."
"I would like more enforcement. Right now. it's a lot of alerting. You see it in Tufin, but you have to go to Check Point or whatever device to make the actual action."
"The interface is like a 1990s kind of thing. It's a little ugly. There are many things that you cannot tweak, little things like the column width and how you display the information. You end up exporting everything to an Excel file and doing your work there."
"Tufin has come a long way when it comes to visibility. What we would like to see is a little bit more on the discovery level, network discovery, which Tufin does not have today."
"Their pricing can be better. It is not very transparent."
"When it comes to web services, in my experience, Tomcat has always gone down; after a certain amount of load it breaks down and we have to get things restored again."
"While Tufin is suitable for small businesses, issues can arise in larger enterprises, particularly concerning policy-based forwarding and NAT traffic."
"Our initial setup was complex from two dimensions, because we were deploying it globally and had to have a centralized view, but a distributed approach. We had it in Asia and North America, causing a slightly complicated approach."
 

Pricing and Cost Advice

"From what I've heard from my colleagues, it appears that the pricing is competitive, which influenced our decision to choose this option."
"The AWS Firewall Manager is a little on the costly side."
"It is a cost-efficient product."
"The licensing is on a pay-as-you-go basis and we are billed monthly."
"Pricing is quite high. We did compare it with AlgoSec but the pricing is not much different between the two."
"We've seen a decrease of about 50 percent in the overall time it takes to complete a firewall change."
"I'm saving 20 man-hours a week, so I am seeing some ROI."
"Tufin makes things a little easier. It lessens the amount of manual work which we have to do. It has a lot of benefits in terms of revenues, profits, employee costs, and operational costs. We have already seen return on investment."
"It's not that expensive, except for Security Groups. For us, just the Security Groups were about half of the total price. The total was about €500,000 a year, of which €200,000 was for Security Groups."
"The price is on the cheaper side."
"I had a bad experience with the financial department, and the price is too high. The software does work and does the job. The solution is worth the money. If I had a different partner to implement the solution, it would have been worth the price."
"Tufin and AlgoSec were pretty much in the competitive price range, but this one provided us better integration into the Check Point environment."
report
Use our free recommendation engine to learn which Firewall Security Management solutions are best for your needs.
845,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
19%
Financial Services Firm
14%
Manufacturing Company
9%
Hospitality Company
6%
Financial Services Firm
19%
Computer Software Company
15%
Manufacturing Company
10%
Retailer
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about AWS Firewall Manager?
It has centralized cloud firewall management rules. It provides compliance in tracking and reporting.
What is your experience regarding pricing and costs for AWS Firewall Manager?
On a scale of one to ten, I would rate the pricing for AWS Firewall Manager as seven, where one is cheap and ten is expensive.
What needs improvement with AWS Firewall Manager?
AWS Firewall Manager should be open to manage other third-party appliances as well.
What do you like most about Tufin SecureCloud?
The most valuable feature of Tufin is security auditing. We are able to check the rules and compliance of the company, for example, what is allowed or not. We are able to check the rules over diffe...
What needs improvement with Tufin SecureCloud?
The design needs improvement, particularly in recognizing target devices and target files. Additionally, there's a need for an improved network map.
What is your primary use case for Tufin SecureCloud?
My primary use case involves applying firewall policies faster from a central point. Additionally, I would like to use it to generate reports, but this hasn't occurred yet.
 

Also Known As

No data available
Tufin SecureCloud
 

Overview

 

Sample Customers

Expedia, Intuit, Royal Dutch Shell, Brooks Brothers
3M, AT&T, Blue Cross Blue Shield, BNP Parabas, ConocoPhillips, Deutsche Bank, GE, IBM, Pfizer, United States Postal Service 
Find out what your peers are saying about AWS Firewall Manager vs. Tufin Orchestration Suite and other solutions. Updated: March 2025.
845,406 professionals have used our research since 2012.