Great tool that simplifies pushing changes to your firewalls. Works across a great number of different devices. It offers up some good customizability in form of limiting user access, creating workflows to suit different needs in SecureChange and also gives you a way to define a zone-based policy in which you can decide what to auto permit and what you want to halt in the queue for further investigation before pushing the changes to your firewalls, or if you wish to you can also deny these requests. It doesn't matter if you are deploying Tufin to and existing environment or a brand new one, you set the pace for how much you want to automate. Initially you can use it just to see keep track of your firewalls and any ticket you add can be manually handled outside of Tufin, and when you are ready to turn on the power you can allow automated approvals as you go along. It is also very straight forward to keep up to date. And should anything go wrong during an upgrade you can easily roll back or get good help from the excellent support at Tufin.

Recommendation about firewall rules based on the traffic monitoring and its very easy to use, no need to be expert to using this tool.

Tufin(NSPM) is a valuable product for the organization especially if it's a large organization and involves daily implementation of multiple ACL requests and managing multiple vendors Firewalls. Even though the new platform Aurora is quite new and would involve lot of efforts to integrate with you environment but still the assist from Tufin Support will not keep you hanging, they are working together with you along all steps to setup and maintain the architecture. My experience has been more on platform side but have learnt alot about the features offered and is a great tool to add in the organization.