Logo
Get A Demo
Tufin offers three subscription options. The following details the functionality delivered in each solution tier and how subscriptions are priced.
  SecureTrack+ SecureChange+   Enterprise  
Security Policy Management
Centralized Security Policy Visibility      
Network Segmentation, Compliance & Audit      
Device Configuration Compliance & Audit      
Security Policy Cleanup      
Security Policy Optimization      
Change Tracking      
Vulnerability Exposure Prioritization      
Network Visibility, Access & Connectivity Troubleshooting
Network Mapping & Visualization Basic Visualization    
Network Path Analysis and Troubleshooting Topology Add-on    
Security Policy Change Automation
Network Access Management      
Automated Path Identification & Target Selection      
Automated Change Design      
Automated Proactive Risk Assessment      
Automated Change Request Verification      
ITSM-Led Change Process      
Rule Lifecycle Management      
Automated Change Provisioning Provisioning Add-on Provisioning Add-on  
Application-Centric Policy Management   SecureApp Add-on  
HA & Support
Solution Resiliency – High Availability / Disaster Recovery HA Add-on HA Add-on  
Support* Standard Support** Standard Support** Premium 24/7
Additional Modules
Self-Service Assistance TufinMate Add-on* TufinMate Add-on TufinMate Add-on
Network Discovery TOS Discovery Add-on* TOS Discovery Add-on TOS Discovery Add-on

 

* Topology Add-on required

** Support Add-on required to reach Premium support


Definitions:

1. A Firewall Unit is any of the following: Single physical or virtual firewall, a physical or virtual firewall cluster, a Cisco ACI leaf, 4-pack of NSX CPUs, 7 1000-pack of Zscaler users, 300-pack of Prisma Access users, Blue Coat ProxySG, 10-pack of F5 BIG-IP LTM (physical or virtual) or 5-pack of Cisco Meraki networks (locations)

  • Azure firewalls are considered a Firewall Unit

  • Virtual Context firewalls refer to virtual firewall instances running inside a physical firewall (e.g. Check Point VSX, Palo Alto Networks Virtual Systems, Fortinet VDOMs, etc.)

  • Virtual Cloud firewalls refer to firewall instances running on virtual infrastructure (e.g. Check Point CloudGuard, Palo Alto Networks VMSeries, Fortinet Fortigate-VM, etc.)

2. Routers/switches over the 5000 included in the package tier: customers can buy packages of 20 routers/switches, which equal 1 Firewall Unit

3. Apps over the 500 included in the package tier: customers can buy packages of 20 apps, which equal 1 Firewall Unit

4. Cloud VM is any compute instance running in a public cloud environment on AWS, Azure, or Google Cloud (Azure and GCP VM, AWS EC2)

  • Cloud VMs can be puchased in blocks of 100. Prices listed on the price list are per VM
English
Close