AlgoSec Horizon Private Offering only

AlgoSec is used for firewall change requests, utilizing FireFlow and the application wizard to onboard applications. FireFlow is used extensively throughout the organization. Using AlgoSec for firewall change requests and onboarding applications has significantly improved daily workflow. Previously, if a user had a connectivity requirement within the bank, they would raise it manually via email, requiring the operation team to record the information and deploy the policy on the firewall. After implementing AlgoSec FireFlow, users now have an interface to provide basic information and submit requests, allowing the operation team to handle deployments more efficiently with the help of ActiveChange. This process flow eases both users and firewall engineers while expediting the deployment process for the bank.

AppViz was recently adopted and represents another level from FireFlow because it provides more insights to both the application perspective and the firewall team perspective. Currently, many rules lack ownership clarity, but since using AppViz, awareness has increased regarding firewall requests coming from specific applications and the reasons for each rule's existence. This enables application owners to see all their firewall rules in one place, which is especially useful when replacing staff in case an application owner moves departments or organizations.

AppViz is valuable due to its ease of use for application owners, enabling them to see existing policies. If they need to test new connectivity, they can do so without contacting the firewall team; they can test connectivity themselves and raise requests only if blocked. Previously, they would contact the firewall team for permission, consuming both their time and the operation team's time. With AppViz, the process is much easier.

The best features AlgoSec offers include AppViz, which is still in its early stage but provides better visibility and insight.

AppViz needs to add more capabilities, specifically for object flow modification because it is still in the early stage for this feature, and any improvements in object modification would be beneficial. AppViz should include more features and flexibility in terms of objects. For complex deployments within the network infrastructure, considerable custom configurations are required. If AlgoSec anticipates these needs with more use cases, it would be advantageous.

Currently, reporting features are lacking, and more insight would be desired in reports.

AlgoSec has been used for more than eight years in the bank, and all products within AlgoSec are utilized.

AlgoSec is stable with multiple instances running smoothly without frequent downtimes, making it stable and reliable.

AlgoSec's scalability is impressive. Since everything is VM-based, if utilization increases, the hardware can simply be enhanced as needed. It works well in terms of scalability.

Customer support is generally better, though there are complex cases that understandably take time, especially if fixes need to be tested on their end. Bug fixes require time to complete.

No other technologies were used before switching to AlgoSec.

The process of calculating ROI is underway with the help of ART, but it is certain that the time savings in deployment is significant.

The reason for selecting a rating of eight is because AlgoSec is easier to use and has a lot of depth in certain aspects. The deployment is easier than with competing technologies, and the support is generally very good in resolving tickets, though there are cases that take longer due to the need for fixes. I would advise others considering using AlgoSec to note that it features multiple suites, covering various technologies, and it is easy to use. I would rate this product an 8 out of 10.

My main use case for AlgoSec is managing firewall rules, specifically on-premises firewall rules, where users input their requirements in AppViz and we implement the rule using the FireFlow change.

A specific example of how I use AlgoSec for firewall rules in my workflow involves application owners having access to their application in AppViz. They can only raise a FireFlow request from there. So they edit the AppViz application and then they submit their change. This change goes to a firewall flow request, which we implement end to end. We have automated tools using the API from AlgoSec in the planning phase and on the approval phase.

The best feature that AlgoSec offers, by far, is AppViz. This is the thing that AlgoSec offers, and it is unique in the market, and in my point of view, their strongest selling point.

What makes the AppViz feature stand out for me is its capability to provide a quick overview of our application landscape, which helps in my daily tasks because it is used not only by us but also by the architects to review the architecture and connections of all our applications.

AlgoSec has positively impacted my organization by significantly increasing the speed of implementation for firewall requests. We implement them in less than 24 hours on average, and simultaneously, we have gained a clear overview of our applications in banking, including their connections, the reasons for those connections, and the users involved.

AlgoSec can be improved by putting AppViz more at the center. Specifically, I suggest customizing AppViz more, including features such as input validation that is not available in AppViz but is in FireFlow, or the ability to copy the AppViz object to the policy. Thus, AppViz should be at the center of their operations, not just as an endpoint in the implementation logic.

One area that AlgoSec could do better is in the pricing. For example, mobile providers have different plans, but their plans are not based on a per-license model, and they usually offer an unlimited option. Therefore, I would expect AlgoSec to have a maximum payment cap per client while allowing unrestricted use of its resources.

I have been using AlgoSec for three and a half years.

AlgoSec is not stable.

The stability issues I have experienced with AlgoSec include slow object deletion, where finding usage could take hours, causing the system to freeze, particularly when handling queries related to many applications. We attempted to resolve these issues with AlgoSec support, and while some problems were fixed with a new patch, we still struggle with system sizing questions.

The customer support experience varies depending on the representative. I have raised many tickets over the last few years and have been extremely pleased with some support engineers while being less satisfied with others.

I would rate customer support a six on a scale from one to ten.

I did not previously use a different solution before AlgoSec.

Before choosing AlgoSec, we evaluated other options, including FireMon and Tufin, and we conduct evaluations on cycles.

One area that AlgoSec could do better is in the pricing. For example, mobile providers have different plans, but their plans are not based on a per-license model, and they usually offer an unlimited option. Therefore, I would expect AlgoSec to have a maximum payment cap per client while allowing unrestricted use of its resources.

My advice for others looking into using AlgoSec is to avoid trying to combine other methods for making changes to firewalls simultaneously. Instead, they should use AppViz, trust it, and set it up while managing everything through that platform. I would rate this solution an eight overall.

My main use case for AlgoSec is for firewall management, auditing, and managing firewalls. A quick specific example of how I have used AlgoSec for firewall management and auditing is when we had multiple firewalls that we wanted to get a unified view, and there we used AlgoSec. That was the main reason for what we used.

The best feature AlgoSec offers is the ability to create a unified view for auditing. What I find most helpful about the unified view is that it saves time and simplifies audits because it reduces false positives and brings a smoother auditing process.

I would add that the reporting is also very advanced, and regarding automation, I was not very involved in that part, but I heard that it is also a very mature feature from AlgoSec.

AlgoSec has impacted my organization positively as it has brought noticeable improvements, including having multiple firewalls and vendors while getting a unified view, automated processes, and very good reporting.

AlgoSec could be improved by extending their products for security because they are very focused at the moment. They could have broader product lists, which would be a good idea.

Regarding needed improvements, we did not have any issues with integration as it was very smooth and not very complex. However, for usability, I suggest a better UI, as compared to Palo Alto, which I find is more friendly and attractive compared to AlgoSec.

I work in my current field for around one year.

AlgoSec is stable, which is why it was suggested, and I have no experience with other products.

AlgoSec's scalability is absolutely good.

I have not needed to reach out to customer support, as we did not contact them.

I have not seen a return on investment, and I cannot share any relevant metrics such as fewer employees needed or money saved.

I was not involved in the process of pricing, setup cost, and licensing. Our manager was dealing with the licenses while we focused on the technical side.

I did not previously use a different solution. I think for this matter, AlgoSec is the best product in the market that can unify all firewalls for auditing.

On a scale of one to ten, I would rate AlgoSec between eight and nine. I chose the number eight because I believe that the functionality is very good. While the functionality is very good, as I mentioned, the UI can be improved, and the products can be more varied. AlgoSec could explore more topics such as Zero Trust or other security standards.

AlgoSec's AI capabilities is something that I did not work with, to be honest. I have not used AlgoSec's AI capabilities regarding accuracy and reliability of output, so I cannot provide any insight there.

I do not have any improvements needed for AlgoSec that I have not already mentioned. It was just my personal experience. My advice to others looking into using AlgoSec is that if they want to have a unified view, it is a very good product. They can have a proof of concept, test it, and see the benefits. This is how I would suggest others go with AlgoSec. I would rate AlgoSec a score of eight out of ten.

My main use of AlgoSec in my organization is for firewall security policy management and automation.

A concrete example of how I use automation with this tool in my daily work is that the FireFlow module is a real time saver. What used to take us hours for impact analyses, rule change or implementation requests, and verification is now automated in a few minutes, all without introducing human error.

I would like to add that we have incredible end-to-end visibility, and in fact, the network mapping is surgically precise. AlgoSec allows us to visualize traffic flow across our entire on-premises, hybrid cloud, and multicloud infrastructure in a single, intuitive interface.

In my opinion, the best features that AlgoSec offers include continuous compliance, as AlgoSec checks our firewall rules in real time against regulations, such as ISO 27001, PCI DSS, or NIST, and against our internal policy. Audit reports are generated with one click, and our auditors absolutely love that.

Regarding continuous compliance and audit report generation, this has simplified our audits and the management of regulatory controls in our organization because we don't use several applications; we only use AlgoSec.

I would also like to add that there is multi-vendor compatibility that we manage. We can manage our Palo Alto, Check Point, or Fortinet devices at the same time, and as a result, AlgoSec integrates perfectly with our entire ecosystem without any friction.

In my opinion, AlgoSec could be improved in the future, as we had some small issues with it at the level of overload. There was a lot of overhead, and we increased the disk space. Afterward, I think it was more the development part on our internal side than the tool itself, but the tool was really good; it was complete, and I had nothing to add.

I have been using this solution for a year and a half.

In my opinion, AlgoSec is stable in my current environment.

I find AlgoSec's customer support generally positive based on user feedback in my experience so far.

I have never used another solution before for network security management before using AlgoSec.

I have seen a return on investment with AlgoSec in that our network and security teams spend sixty to seventy percent less time on manual tasks for managing flow openings and documenting rules.

Before choosing AlgoSec, I did not evaluate other solutions because when I arrived at the company, they already had it.

AlgoSec has had a positive impact on my organization in that we no longer have to connect directly to the firewalls one by one. We can directly have AlgoSec manage the entire firewall group, so it is perfect.

I can explain in more detail that this frictionless integration has improved productivity and collaboration within my team. I would say that there is perfect alignment between security and the business. With the application-oriented view AppChange, we no longer speak only in IP addresses and ports, but in business applications, which has significantly improved collaboration between our security infrastructure teams and the developers.

My advice to other professionals who are considering using AlgoSec is to clean up your rule bases beforehand. AlgoSec is excellent for cleaning up your firewalls. You can deploy solutions step-by-step, and there is visibility provided by AlgoSec. Then, there is automation, and there are business applications rather than IP addresses. I rate this solution a ten out of ten.

My main use case for AlgoSec is the policy management for plus 10,000 firewalls and security equipment in multi-vendor situations. Since my customers have legacy security equipment, it is necessary to apply policy to all security equipment in general, and this also extends to identity access management. I have migrated from Tufin to AlgoSec and from AlgoSec to Tufin based on my customer's requirements.

In my experience, the best features that AlgoSec offers include policy management, which is very open to multi-vendor situations, especially for firewalls and companies that have legacy firewalls. This functionality allows us to reduce the attack surface while applying policies globally and homogeneously across our IT and ITS infrastructures. As a CISO and also managing the network and security operations center, it has proven very helpful, especially in an MSSP situation where I deal with multiple clients across finance, defense, and medical sectors. I find myself very comfortable with AlgoSec to apply security and network application delivery.

AlgoSec positively impacts my organization by commanding higher margins. Given that I am an MSSP serving multiple clients, having one tool for all my customers is fantastic.

Currently, from my experience with AlgoSec, I believe it needs improvements, particularly with custom or open-source software integration. Some of my customers cannot purchase commercial software due to strict opposition for security reasons. For instance, I had a customer who required an entirely BSD-based firewall, which necessitated coding to facilitate integration with AlgoSec. Furthermore, AlgoSec could excel by helping us as MSSPs integrate with CTI teams. Being involved with cyber threat intelligence would allow us to be proactive, applying data-driven policies rather than just implementing policies for the sake of compliance. I also collaborate with OT and IT departments, and it is important to note that OT systems have long lifespans, sometimes dating back 20 years. I have encountered situations where policies had to be applied manually since certain legacy systems date back to the 1970s and 1980s and remain unchanged.

From what I have heard, the solutions I have built around AlgoSec continue to work well.

AlgoSec's scalability appears to be pretty good for a multinational company and fares well.

Regarding customer support, I have not had to engage with it directly, so I cannot provide an assessment. However, I can state that the integration support I received was very kind.

Before choosing AlgoSec, I did not switch from another solution. Before selecting AlgoSec, my evaluations were limited as there were no other options considered since it was mostly the de facto decision due to budgetary considerations.

I have seen a return on investment with AlgoSec, including money saved, time saved, and more efficient operations. However, specific metrics cannot be disclosed due to a non-disclosure agreement.

I have used AlgoSec on and off, and I have used Tufin, the competitor of AlgoSec, with AlgoSec intertwined both.

I find that AlgoSec's holistic approach allows me to present at the C-suite level without needing to dive too deep into technical details, advocating for budget justification on a business process level. Furthermore, BOT automation has significantly bolstered my business-driven approach and security policy management across the whole spectrum of our security equipment overview. Overall, even as a managed MSSP, I can effectively manage multiple clients and create policies that can be applied to all or specific customers within my MSSP. I appreciate the fact that it is business-driven.

Regarding those higher margins, I have seen a growth from 45 percent to 70 percent in security policy management while providing network security policy management services. I work closely with the customer to build a policy tailored to their needs, which alleviates the necessity for one-on-one interactions. I can apply security policy templates that are already functional, thus not requiring me to rewrite security policies repeatedly. This reusability leads to gains in productivity, making processes much more agile and compliant.

In my experience, the best features that AlgoSec offers include policy management, which is very open to multi-vendor situations, especially for firewalls and companies that have legacy firewalls. This functionality allows us to reduce the attack surface while applying policies globally and homogeneously across our IT and ITS infrastructures. As a CISO and also managing the network and security operations center, it has proven very helpful, especially in an MSSP situation where I deal with multiple clients across finance, defense, and medical sectors. I find myself very comfortable with AlgoSec to apply security and network application delivery. I give this review a rating of 8.