No more typing reviews! Try our Samantha, our new voice AI agent.

Cisco Security Cloud Control vs Tufin Orchestration Suite comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Security Cloud Control
Ranking in Firewall Security Management
12th
Average Rating
8.2
Number of Reviews
14
Ranking in other categories
No ranking in other categories
Tufin Orchestration Suite
Ranking in Firewall Security Management
2nd
Average Rating
8.0
Reviews Sentiment
7.2
Number of Reviews
182
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2026, in the Firewall Security Management category, the mindshare of Cisco Security Cloud Control is 3.7%, up from 1.0% compared to the previous year. The mindshare of Tufin Orchestration Suite is 18.2%, down from 22.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewall Security Management Mindshare Distribution
ProductMindshare (%)
Tufin Orchestration Suite18.2%
Cisco Security Cloud Control3.7%
Other78.1%
Firewall Security Management
 

Featured Reviews

FS
Security Engineer at Metrobank
Automation reduces intervention and speeds up threat prevention
Our primary use case for Cisco Defense Orchestrator is the automation of playbooks. We primarily use it for this purpose to streamline processes The most valuable feature is the automation, as it reduces user intervention and allows us to focus on other tasks. Since the system is automated,…
Vulnerability control saves audit costs and reduces expenses for organizations
Tufin Orchestration Suite is not commonly used in Thailand due to a lack of local support, and many customers are switching to AlgoSec or other vendors. The analytics features of Tufin Orchestration Suite are challenging to use and require technical expertise, which is a concern as there is not much knowledge in this field in Thailand. The issue of technical knowledge, especially regarding English language proficiency, is significant for government and some companies, making Tufin Orchestration Suite harder to use.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Once it was up and running, I could see value from it straight away, in the first minute."
"Cisco Defense Orchestrator is a very great solution to centralizing device management and security."
"Its ability to make bulk changes makes it much easier, that's for sure, when I have to upgrade multiple clients."
"For one particular client, we had almost a 20 percent remediation on some of their equipment as a result of all kinds of attacks from the desktop department, and we got them down to a zero percent remediation."
"The most valuable feature is the automation, as it reduces user intervention and allows us to focus on other tasks."
"The ability to see the uptimes on the different VPNs that we have configured for site-to-site."
"We are using this solution for filtering and blocking some websites, as a firewall, and as the main tool for network segmentation and intrusion prevention, blocking malware and malicious activity."
"If our server is blocked, this solution shows us why it is blocked and allows us to update the network routing."
"Tufin Orchestration Suite is a good tool that makes firewall policies faster to implement from a central point, and its support is good."
"Using this solution saves us time and money."
"The solution has helped us to reduce the time it takes to make changes; with Tufin, it takes ten to 15 minutes, whereas before it was 30 minutes or more."
"Technical Support: Excellent, the support and the post sales service is the best I ever had."
"It gives me a unified policy across multiple vendors."
"Before we'd have to manually go down rule bases three-thousand lines long, rule by rule finding the stuff that's missing, so it saves us a lot of time."
"It has helped us to meet our compliance mandates. We have some requirements that we need to provide more visibility on the risk levels of our firewall base and Tufin helped us with that requirement."
"This solution definitely helps to reduce the time it takes to make changes."
 

Cons

"I'd like CDO to be the one-stop-shop where we could do all the configurations easily. It would be nice, for ASA upgrades, if we could do them from a central repository and not have to reach out to Cisco. That would be a definite plus."
"If I make a change locally to the firewall, CDO gives an alarm or an error message and says there's a change in compliance: "The firewall has this configuration but the last time it was compiled it had that configuration." That view of new changes versus the old could be better... I had to log in manually, locally on the firewall, to check which version, which configuration was actually running. I couldn't see it in CDO."
"It would be a better product if it incorporated device control for third-party products easily."
"If I make a change locally to the firewall, CDO gives an alarm or an error message and says there's a change in compliance: "The firewall has this configuration but the last time it was compiled it had that configuration." That view of new changes versus the old could be better."
"It should have more features to manage FirePOWER appliances."
"When logging into the device, we sort of had problems with it staying in sync. If somebody made a change onsite, it wouldn't do an automatic sync. It would have to wait, as you would have to do a manual sync up."
"Cisco Defense Orchestrator can improve by providing more support for third-party security components."
"They need to work on the user interface. It needs to be improved to make it more user-friendly."
"There was some complexity during the initial setup, but otherwise, it was fairly straightforward."
"It seems stable. We've had problems always with the same box, which is our SecureTrack primary. We are probably on our seventh one."
"The change impact analysis doesn't even get close to actually solving our problems. I am not impressed with it."
"We've had stability issues because it's a heavy solution. It takes a long time to get up and running, and when we migrate releases, that's an issue."
"Tufin has come a long way when it comes to visibility. What we would like to see is a little bit more on the discovery level, network discovery, which Tufin does not have today."
"I wish there was a read-only admin option. I don't like that you have to be a full admin just to see the Network Topology Map. That option is great out there if you are a user, multi-domain user, etc. However, that piece is very helpful for us, but I also don't want to be handing out admin access to every single person so they can see that network tab."
"I would like to simplify the reports, and maybe have another view besides the charts. Possibly they could be more graphical."
"They need to offer more support to vendors, such as Cisco, Checkpoint, Fortinet, and Forcepoint."
 

Pricing and Cost Advice

"It is about a $100 per year for an ASA 5506 firewall, and from there it keeps going up if you have a bigger box. For example, the 5516 is $200 to $300 per year."
"If you compare to what is available on the market, they are in the same range with respect to pricing."
"After our free trial was done we got a subscription for three years and it was under $3,000 or so. It's part of the EA we already paid for, so I don't know what it would be if it was a la carte."
"It is covered under the CIsco Enterprise License Agreement (ELA). So, it is licensed and ours."
"I work with a lot of clients, and the price or value of the Cisco Defense Orchestrator can vary from one client to another. If you have a lot of Cisco solutions, the price of the Cisco Defense Orchestrator is justified. Whereas if you have some security components from other vendors, such as Check Point or Palo Alto. This solution would be a pretty expensive proposition considering that they don't integrate with them well."
"It's around £500 per unit for a three-year license."
"Our engineers are spending less time on manual processes: 20 to 30 hour plus."
"For us it's around $40,000 or so."
"It is expensive, but as compared to other players, it's more or less okay. Their pricing is not very transparent. This is my biggest point regarding Tufin. I've never seen a price list or something like that. It's always individual, and in many cases, it's very confusing to know what is the base and what is the price."
"Price could always be better, but there are always consequences."
"The licensing costs are a significant amount of money."
"The price of Tufin could be lower."
"I had a bad experience with the financial department, and the price is too high. The software does work and does the job. The solution is worth the money. If I had a different partner to implement the solution, it would have been worth the price."
"Pricing played a big part here... The customer had evaluated other products but, due to price as well as support, they chose Tufin."
report
Use our free recommendation engine to learn which Firewall Security Management solutions are best for your needs.
893,244 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
11%
Computer Software Company
10%
Outsourcing Company
8%
Financial Services Firm
7%
Financial Services Firm
16%
Manufacturing Company
11%
Computer Software Company
8%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise3
Large Enterprise5
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise13
Large Enterprise152
 

Questions from the Community

What needs improvement with Cisco Defense Orchestrator?
Cisco Defense Orchestrator should be made more user-friendly overall. Currently, to use it effectively, one must be specific with the rule set that needs to be set up. Additionally, I suggest impro...
What is your primary use case for Cisco Defense Orchestrator?
Our primary use case for Cisco Defense Orchestrator is the automation of playbooks. We primarily use it for this purpose to streamline processes.
What advice do you have for others considering Cisco Defense Orchestrator?
Those who want to use Cisco Defense Orchestrator should build their own use case and see if it fits their environment. The most significant benefit for us is the response time because it automates ...
What needs improvement with Tufin SecureCloud?
Tufin Orchestration Suite ( /products/tufin-orchestration-suite-reviews ) is not commonly used in Thailand due to a lack of local support, and many customers are switching to AlgoSec or other vendo...
What is your primary use case for Tufin SecureCloud?
I have primarily used Skybox and AlgoSec ( /products/algosec-reviews ). I have also interacted with FireMon for compiling. However, I am not currently working with ACA, and I don't have any project...
What advice do you have for others considering Tufin SecureCloud?
There is potential for improvement in explaining the analytics in the dashboard for Tufin Orchestration Suite. Tufin Orchestration Suite does provide good monitoring; however, interpreting the grap...
 

Also Known As

Cisco Defense Orchestrator, CDO
Tufin SecureCloud
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Insurance Company of British Columbia, Shawmut
3M, AT&T, Blue Cross Blue Shield, BNP Parabas, ConocoPhillips, Deutsche Bank, GE, IBM, Pfizer, United States Postal Service 
Find out what your peers are saying about Cisco Security Cloud Control vs. Tufin Orchestration Suite and other solutions. Updated: April 2026.
893,244 professionals have used our research since 2012.