AlgoSec Horizon Alternatives

Overall experience has been positive, particularly in terms of visibility, segmentation capabilities, and lateral movement prevention. From a security operation perspective, the platform provides deep and granular visibility over network communication and workloads, enabling our security and IT departments to better understand application behavior, detect anormalies, misconfigurations and perform threat hunting. Micro-segmentation approach has proven valuable in strengthening our security posture by reducing the risk of lateral movement, which is a key requirement in modern defense strategies. We are also very happy of the support we receive from Akamai professional services which is always highly responsive and provide strong support under quick delays. Many challenges have been overcome throughout our experience and many more are yet to come.

I have worked with Illumio for a little over two years now. My experience with their support and sales team has been very good. Their support staff has always seemed to have a good depth of knowledge and provided thorough answers to my questions and typically quick resolution to any problem I have had.

Overall, we ha a good experience with Tufin. There are still some areas that require improvement (Such as Gui enhancements and certain functions), but in general, the platform is very helpful, especially when compliance is involved. Tufin allows us to gain better visibility into our network and understand what is happening based on our configurations, suck risky ports and usage.

VMware's vDefend firewall is the best to protect each network segment when we implement micro-segmentation to protect each workload from potential attacks, especially in east-west traffic. vDefend gives great visibility into the kinds of traffic that traverses through each of the micro-segments. Every VM is protected thru zero trust enablement. I have deployed vDefend in my tenure at a commercial datacenter as well as in a captive datacenter to ensure highest degree of protection of the workloads.

Overall, our journey with Microsoft Azure over the past five years has been very positive. What has worked really well for us is is how naturally Azure handles multi environment deployment. We operate across a mixed hybrid footprint, and the interoperability between our on-prem infrastructure and cloud resources feels genuinely smooth compared to other platforms.

New platform is much easier to use. It streamlines a lot of our workflows and allows us to respond to issues quicker and have better insight into our infrastructure.

Zero Networks is one of the Firm's most critical security controls and plays a significant role in our Zero Trust architecture. In addition to consistently providing exceptional technical support, the platform enhances our security posture by enforcing host-based micro-segmentation, effectively preventing unauthorized lateral movement. Beyond segmentation, Zero Networks provides granular controls over service account usage by monitoring and restricting authentication activity. The platform also delivers powerful RPC firewall capabilities that inspect and control Microsoft RPC communications, reducing the attack surface associated with administrative protocols and limiting opportunities for remote execution and unauthorized system management. From an operational perspective, the solution was straightforward to deploy and required minimal infrastructure changes. Its learning mode automatically baselined legitimate network communications, authentication flows, and administrative activity, enabling us to rapidly build security policies with a high degree of accuracy while minimizing business disruption. This capability significantly accelerated implementation, reduced administrative overhead, and allowed us to achieve meaningful security improvements in a relatively short timeframe while maintaining user productivity and application availability.

Cisco ACI was selected as our primary DC fabric for several reasons. Initially as an alternative to standard CLI type DC deployments and ultimately for its large scale deployment ability via a centralized architecture. This allows us to expand our overall services with a minimal amount of effort.