License Components (SKUs)

You need one license for every firewall unit or cloud VM pack in your network deployment, as outlined in the table below. When you issue the purchase order to Tufin, you will receive a license file containing an SKU for each license purchase. If you add additional firewall units or devices to your network, you can purchase additional licenses as needed.

Each tier includes two SKUs:

 

SecureTrack+

SecureChange+

Enterprise
Per firewall unit TS-SECTRK-PLUS-FW-UNIT TS-SCWF-PLUS-FW-UNIT TS-ENTPRS-FW-UNIT
Per cloud VM TS-SECTRK-PLUS-CLOUD-VM TS-SCWF-PLUS-CLOUD-VM TS-ENTPRS-CLOUD-VM

What is a Firewall Unit?

For the purpose of licensing, a firewall unit is any of the following:

  • Single physical or virtual firewall

  • Single physical or virtual firewall cluster

  • A Cisco ACI leaf

  • Blue Coat ProxySG

  • AWS Firewall

  • 4-pack of VMware-licensed NSX CPUs (counted according to VMware's licensing policy)

  • 5-pack of Meraki networks (regardless of the number of firewalls deployed in each network)

  • 10-pack of physical or virtual F5 BIG-IP LTMs

  • 1000-pack of Zscaler users

  • 20 routers/switches (first 5000 routers/switches at no cost)

  • 20 SecureApp applications (first 500 applications at no cost)

  • 300-pack of Prisma Access users

Examples:

  • Five VMware-licensed NSX CPUs require a total of two firewall units.

  • 80 Zscaler users require a total of one firewall unit.

  • 508 Meraki networks require a total of 102 firewall units.

Devices that manage firewalls do not require a license.

What is a Cloud VM?

For the purpose of licensing, a cloud VM is a single virtual machine (instance) deployed on a public cloud platform, for example an AWS EC2 instance or Azure/GCP virtual machine. Cloud VM licenses are sold in packs of 100.

Example:

  • 320 VMs/instances require a total of 400 cloud VM units.

Tiers and Items Included

Up to 5,000 routers/switches per customer are included without additional cost. Additional packs of 20 routers/switches can be purchased, each pack counting as one firewall unit.

The Enterprise tier includes up to 500 SecureApp applications per customer. Additional packs of 20 application can be purchased, each pack counting as one firewall unit.

If you are transitioning from a Tufin legacy licensing model to a solution tier you may be entitled to a heritage SKU prior to purchasing one of Tufin's solutions. For more information, contact Tufin Sales Support.

For details of Tufin's solution tiers, see Solution Tiers.

For more information on solutions and pricing, contact your Tufin partner or email [email protected].