AlgoSec

and
Skybox Security Suite
Buyer's Guide and Reviews
July 2019
AlgoSec and Skybox Security Suite

Get a custom version of this report...personalized for you!

Thanks for downloading this IT Central Station report.

Note that this is a generic report based on reviews and opinions from the entire IT
Central Station community. We offer a customized report personalized for you based on:

• Your industry
• Company size
• Which solutions you're already considering

It includes recommendations for you based on what other people like you are researching and
using.

It takes 2-3 minutes to get the report using our shortlist builder wizard. We recommend it!

Get your personalized report here.

2
AlgoSec and Skybox Security Suite

Contents

Overview 4

Top Review by Topic of AlgoSec and Skybox Security Suite 5-7

Vendor Directory 8

Top Firewall Security Management Vendors, Weighted 9-10

Top 5 Solutions by Ranking Factor 11

About This Report and IT Central Station 12

© 2019 IT Central Station

To read more reviews please visit https://www.itcentralstation.com/products/comparisons/algosec_vs_skybox-security-suite?tid=pdf_comp_29595-30321

3
AlgoSec and Skybox Security Suite

Overview
SOLUTION AlgoSec Skybox Security Suite

OVERVIEW AlgoSec simplifies, automates and orchestrates
security policy management to enable enterprise
organizations and service providers to manage
security at the speed of business. Over 1,500 of
the world’s leading organizations, including 20 of
the Fortune 50, rely on AlgoSec to optimize their
network security policy throughout its lifecycle, to
accelerate application delivery while ensuring
security and compliance. AlgoSec is committed to
the success of each and every customer, and
provides the...
The Skybox Security Suite platform combines
firewall and network device data with vulnerability
and threat intelligence, prioritizing security issues
in the context of your unique environment.
Powerful attack vector analytics reduce response
times and risks, bringing firewall, vulnerability and
threat management processes for complex
networks under control.
Firewall Assurance brings all firewalls into one
normalized view, continuously monitoring policy
compliance, optimizing firewall...

SAMPLE NASDAQ, Oracle, T-Mobile, Chevron, AT&T, BP, ADP, Blue Cross Blue Shield, BT, USAID, Delta
CUSTOMERS
Intel, Skype, Microsoft, Volkswagen Dental, EDF Energy, EMC, HSBC, Johnson &
Johnson

TOP Tufin vs. AlgoSec AlgoSec vs. Skybox Security Suite

COMPARISONS Compared 56% of the time Compared 27% of the time

FireMon vs. AlgoSec Tufin vs. Skybox Security Suite

Compared 23% of the time Compared 26% of the time

Skybox Security Suite vs. AlgoSec RedSeal vs. Skybox Security Suite
Compared 14% of the time Compared 16% of the time

TOP INDUSTRIES, Government ... 8%

BASED ON Manufacturing Company ... 8%
REVIEWERS*
Energy/Utilities Company ... 12%
Financial Services Firm ... 35%
TOP INDUSTRIES, Energy/Utilities Company ... 8% Marketing Services Firm ... 7%
BASED ON Manufacturing Company ... 13% Manufacturing Company ... 11%
COMPANIES
READING REVIEWS* Comms Service Provider ... 16% Financial Services Firm ... 20%
Financial Services Firm ... 32% Comms Service Provider ... 27%
COMPANY SIZE, 1-200 Employees ... 7% 201-1000 Employees ... 13%
BASED ON 201-1000 Employees ... 14% 1-200 Employees ... 44%
REVIEWERS*
1001+ Employees ... 79% 1001+ Employees ... 44%
COMPANY SIZE, 1-200 Employees ... 4%
BASED ON 201-1000 Employees ... 41%
COMPANIES
READING REVIEWS* 1001+ Employees ... 55%

* Data is based on the aggregate profiles of IT Central Station Users researching this solution.

© 2019 IT Central Station

To read more reviews please visit https://www.itcentralstation.com/products/comparisons/algosec_vs_skybox-security-suite?tid=pdf_comp_29595-30321

4
AlgoSec and Skybox Security Suite
Top Reviews by Topic
SOLUTION AlgoSec
VALUABLE
FEATURES josemendes
The feature we find the most valuable is the
Firewall Analyzer. This helps us know which
devices are between the source and destination
on the flows that we need to open for the
business. The audit tools are also very important
to us because we can easily have everything that
needs to be presented to the security auditors.
We are in the process of implementing FireFlow in
our daily operation, which will make our lives even
easier. The idea is to search the Firewall Analyzer
for the equipment bet... [Full Review]
Riyas Mohammed
The features that we have found to be most
valuable are: * Risk Analyzing: Has helped to
identify the risks in security network devices in a
very short time, which increases and improves
security overall. * Policy optimization and IPT: Has
helped to identify the garbage rules and improve
the device performance. Also, has assisted in
removing any rules causing IPT failure. *
Compliance: Helps prepare for the audit in a short
time, and assists with continuous compliance. *
Active push: It is capab... [Full Review]
TiagoCerqueira
The most valuable feature for us is AlgoSec's
ability to analyze rules for risks and for
performance while allowing the user to submit a
change request immediately based on that
assessment. Additionally, the fact that it integrates
seamlessly with Ansible, as well as providing an
API for the users to extend based on their own
needs, is a great plus for us. [Full Review]
© 2019 IT Central Station
To read more reviews please visit https://www.itcentralstation.com/products/comparisons/algosec_vs_skybox-security-suite?tid=pdf_comp_29595-30321
Skybox Security Suite
Randy Watkins
The Vulnerability Management module is among
the ones we talk about the most and the one that
customers are biting off on quite a bit. Skybox, in
general, has quite a few features that are
particularly useful to large clients, but their
scalability is unparalleled in the space. They have
massive scalability, thousands of devices that they
can pull from, hundreds of thousands of IP
addresses for the vulnerability results and casting;
that in itself is very unique. The way they do
vulnerabilities,... [Full Review]
Sharath K
For us, it's more important for our firewalls, to
maintain the configuration compliance, to look at
duplication of rules; clean up functionalities on the
firewall and compliance of the firewall. That's
where it's most important. We're still looking at
making use of this tool for other purposes, but it's
still a work in progress at this moment. We are
using Network Assurance, primarily for our
devices like routers and switches. Change
Manager is still a work in progress for us. While we
have that... [Full Review]
Informat54af
The most valuable feature is the compliance,
whether it's access compliance or the
configuration compliance, to make sure that all of
our devices are configured as they're supposed to
be, to limit access as much possible, to follow
least-access guidelines. [Full Review]
5
AlgoSec and Skybox Security Suite
Top Reviews by Topic
SOLUTION AlgoSec
IMPROVEMENTS
TO MY josemendes
ORGANIZATION
Since we deployed AlgoSec, we have been able
to assign more of our time to what really matters. It
now takes less than half of the time it took before
we had this tool to deploy the flows requested by
the business. In the past this was a very painful job
- analyze which pieces of equipment are between
the source and the destination machines and also
check which ones need modifications to the
firewall rules or router access lists. Now we just
put the source and destination into the AlgoSec
Firewa... [Full Review]
Riyas Mohammed
* AlgoSec helps to analyze the risk, optimize the
rules and policies, and improve performance in
network security devices such as firewalls. * It
helps to perform the network security changes
four times faster than the normal change request
process. * It assists in provisioning the application
rapidly, which increases the organization's
revenue. * The ASMS (AlgoSec Security
Management Solution) is fully focused on business
security and automation. It ensures business
security and agility. [Full Review]
TiagoCerqueira
With AlgoSec, we are now able to automate
several time-consuming tasks. We are currently in
a rule base performance improvement process
and AlgoSec is an invaluable tool to accomplish
this. Furthermore, we are starting rule creation
automation, which will also provide some relief on
our workload. [Full Review]
© 2019 IT Central Station
To read more reviews please visit https://www.itcentralstation.com/products/comparisons/algosec_vs_skybox-security-suite?tid=pdf_comp_29595-30321
Skybox Security Suite
Randy Watkins
Specifically, in the Vulnerability Management
piece, vulnerability management products are very
noisy and they provide this arbitrary score called
the CVSS that rates the criticality of the
vulnerability. How bad would it be if somebody
were to exploit this vulnerability? That doesn't
matter if I have something on the network that
prevents that vulnerability from being exploited.
What Skybox does is to allow organizations,
including three of my largest customers, to
reprioritize the vulnerabilit... [Full Review]
Sharath K
It's given us more visibility in terms of what are the
kinds of configurations that are on these devices,
and how many of these are stale rules. So it's
helped greatly in terms of cleaning up of rules, for
sure. And it has definitely given a more secure
way of backing up the configuration on these
devices. [Full Review]
Informat54af
What we have done is found a lot of
misconfigured stuff on firewalls. Our company,
Verisk, is a company that buys other companies.
We have 70 or so companies at last count and
most of them are founder-based companies we
bought. They had little to no idea of how to
actually secure a firewall correctly. Using Skybox,
when we bring them on we take a look at how
their firewalls are configured and then make
recommendations as far as what they need to do
to tighten it up. That is the main function we'... [Full
Review]
6
AlgoSec and Skybox Security Suite
Top Reviews by Topic
SOLUTION AlgoSec
ROOM FOR
IMPROVEMENT josemendes
One important area for improvement is the
support for Dell switches, which we have a lot of in
our company network. At a minimum, we would
like to get information about the routing table to
complete the work diagram. We have been told
that AlgoSec is working on this, and we expect to
have support for those devices soon. We would
like to see more features in the GUI so that we
don't have to work with the API as extensively. For
example, a feature to schedule pushes to the
Firewalls at a pre-defin... [Full Review]
Riyas Mohammed
This product could be improved in several ways,
including: * More device support - such as
barracuda devices * An automated rollback
process and options in active push. when we do a
active push Algosec takes a policy backup for
recovery purpose. if we did any change using
active push from Algosec and if the customer
wanted to rollback the particular configuration,
better if Algosec able provide automated rollback
process through AFF rather creating a manual a
ticket. * Software-defined WAN integ... [Full
Review]
TiagoCerqueira
The product is severely lacking in vendor support.
They claim to support some devices, but when
you dig deeper, it is only basic support, with
enterprise-grade features for those devices being
unsupported. This is a big deal for us, as several
sections of our network are not fully supported
which, in turn, does not allow us to fully automate
rule creation. Moreover, we cannot perform end to
end connectivity checks. One such feature is the
lack of VRRP support on devices other than Cisco
or Junip... [Full Review]
© 2019 IT Central Station
To read more reviews please visit https://www.itcentralstation.com/products/comparisons/algosec_vs_skybox-security-suite?tid=pdf_comp_29595-30321
Skybox Security Suite
Randy Watkins
The only place where Skybox has room for
improvement, and they're working on releasing
this, it's just a slow-go, is the UI. The user interface
has historically been via a locally installed thick
client. They are moving to a web-based console
and it's slowly coming out. It looks really good
right now. I've seen the previews. I've seen what's
going GA. Really, it's just building in that feature
parody, to take all the features that are currently in
the thick client and move them into to the thin ...
[Full Review]
Sharath K
The primary room for improvement would be to
enable a web interface, which is not something
which is there in the product. This is supposed to
have come a year, a year and a half ago, but still
has failed to come out. It still needs a client
application to be installed on a workstation to be
able to access that server and then run these
reports. So I cannot extend that access to
anybody. It has to be one administrator all the
time. So unlike a web interface, where you can
give multiple users sim... [Full Review]
Informat54af
Reporting. A lot of the reports, out of the box, are
limited to a certain number of either configuration
violations or access rule violations. So when you
first set up a new firewall to be monitored by
Skybox, you don't get a real full report. You have
to really tweak it to get everything. In our
business, our company buys a lot of other
companies and a lot of them manage themselves.
Unfortunately, for Firewall Assurance in particular,
if you need a group of people to be able to
manage their fir... [Full Review]
7
AlgoSec and Skybox Security Suite

Vendor Directory
AlgoSec AlgoSec Palo Alto Networks Palo Alto Networks Panorama

Cisco Cisco Defense Orchestrator Skybox Security Skybox Security Suite

FireMon FireMon Tufin Tufin

ManageEngine ManageEngine Firewall Analyzer

8
AlgoSec and Skybox Security Suite

Top Firewall Security Management Vendors, Weighted

Over professionals have used IT Central Station research. Here are the top vendors based on product reviews, ratings, and comparisons.
All reviews and ratings are from real users, validated by our triple authentication process.

Chart Key

Views Comparisons Reviews Words/Review Average Rating

Number of views Number of times compared Total number of reviews on Average words per review Average rating based on
to another product IT Central Station on IT Central Station reviews

Bar length
The total ranking of a product (i.e. bar length) is based on a weighted aggregate ranking of that product's Views (weighting factor = 17.5%),
Comparisons (17.5%), Reviews (17.5%), Followers (17.5%), and Average Rating (30%). Reviews and ratings by resellers are excluded from the
rankings. For each ranking factor, the score (i.e. bar segment length) is calculated as a product of the weighting factor and its position for that
ranking factor. For example, if a product has 80% of the number of reviews compared to the product with the most reviews in its category, then
the product's bar length for reviews would be 17.5% (weighting factor) * 80%.

1 AlgoSec

30,718 views 10,158 comparisons 60 reviews 312 words/review 9.2 average rating

2 Tufin

46,637 views 10,461 comparisons 30 reviews 558 words/review 7.7 average rating

3 FireMon

18,894 views 6,538 comparisons 8 reviews 1,015 words/review 8.3 average rating

4 Skybox Security Suite

12,332 views 5,730 comparisons 8 reviews 646 words/review 8.1 average rating

5 Palo Alto Networks Panorama

2,239 views 964 comparisons 2 reviews 546 words/review 9.0 average rating

© 2019 IT Central Station

To read more reviews please visit https://www.itcentralstation.com/products/comparisons/algosec_vs_skybox-security-suite?tid=pdf_comp_29595-30321

9
AlgoSec and Skybox Security Suite

6 ManageEngine Firewall Analyzer

1,581 views 741 comparisons 2 reviews 285 words/review 8.5 average rating

7 Cisco Defense Orchestrator

188 views 35 comparisons 0 reviews 0 words/review

© 2019 IT Central Station

To read more reviews please visit https://www.itcentralstation.com/products/comparisons/algosec_vs_skybox-security-suite?tid=pdf_comp_29595-30321

10
AlgoSec and Skybox Security Suite

Top 5 Solutions by Ranking Factor

Views

SOLUTION VIEWS

1 Tufin 46,637

2 AlgoSec 30,718

3 FireMon 18,894

4 Skybox Security Suite 12,332

5 Palo Alto Networks Panorama 2,239

Reviews

SOLUTION REVIEWS

1 AlgoSec 60

2 Tufin 30

3 FireMon 8

4 Skybox Security Suite 8

5 ManageEngine Firewall Analyzer 2

Words/Review

SOLUTION WORDS/REV
IEW

1 FireMon 1,015

2 Skybox Security Suite 646

3 Tufin 558

4 Palo Alto Networks Panorama 546

5 AlgoSec 312

© 2019 IT Central Station

To read more reviews please visit https://www.itcentralstation.com/products/comparisons/algosec_vs_skybox-security-suite?tid=pdf_comp_29595-30321

11
AlgoSec and Skybox Security Suite

About this report

This report is comprised of a list of enterprise level vendors. We have also included several real user reviews posted on ITCentralStation.com.
The reviewers of these products have been validated as real users based on their LinkedIn profiles to ensure that they provide reliable opinions
and not those of product vendors.

About IT Central Station

The Internet has completely changed the way we make buying decisions. We now use ratings and review sites to see what other real users think
before we buy electronics, book a hotel, visit a doctor or choose a restaurant. But in the world of enterprise technology, most of the information
online and in your inbox comes from vendors but what you really want is objective information from other users.

We created IT Central Station to provide technology professionals like you with a community platform to share information about enterprise
software, applications, hardware and services.

We commit to offering user-contributed information that is valuable, objective and relevant. We protect your privacy by providing an environment
where you can post anonymously and freely express your views. As a result, the community becomes a valuable resource, ensuring you get
access to the right information and connect to the right people, whenever you need it.

IT Central Station helps tech professionals by providing:

• A list of enterprise level vendors

• A sample of real user reviews from tech professionals
• Specific information to help you choose the best vendor for your needs

Use IT Central Station to:

• Read and post reviews of vendors and products

• Request or share information about functionality, quality, and pricing
• Contact real users with relevant product experience
• Get immediate answers to questions
• Validate vendor claims
• Exchange tips for getting the best deals with vendors

IT Central Station
244 5th Avenue, Suite R-230 • New York, NY 10001
www.ITCentralStation.com
reports@ITCentralStation.com
+1 646.328.1944

© 2019 IT Central Station

To read more reviews please visit https://www.itcentralstation.com/products/comparisons/algosec_vs_skybox-security-suite?tid=pdf_comp_29595-30321

12