Site Usage Calculations

The site usage data collected by TOS, from customers who use the tiered licensing model, enables Tufin to know how many devices, cloud entities and SecureApp applications are being monitored. The data that is collected is categorized according to type (firewall, router, cloud virtual machine, SecureApp application). Disabled devices are not included in the usage calculations.

The devices and applications monitored by TOS can be viewed in SecureTrack and SecureApp respectively.

Devices: In the Manage Devices and Device Viewer pages.
Secure App Applications: In the Applications page.

If you do not want a device or SecureApp application to be counted in the site usage calculations, you can disable the device or decommission the application.

The calculations Tufin uses for creating site usage reports are subject to change as they are based on Tufin's price list.

Each device type or SecureApp application has a category and count contribution, which calculates license consumption quantities according to the ratios defined in License Components (SKUs). In DR setups, only the devices on the 'active’ cluster are counted. Devices on the standby cluster are ignored.

The table below summarizes the category and count contribution for the more common device types. The Firewall, Router, and SecureApp Application categories are counted as Firewall Unit license components for license calculation purposes. The Cloud Virtual Machine category is counted as Cloud Virtual Machine Units.

Site usage reports provided through the Tufin Customer Portal provide information on license consumption category per device/VM/App. You can use these reports to calculate license consumption quantities.

Device Type	Category	Count Contribution
Single physical or virtual firewall, or physical or virtual firewall cluster	Firewall	1
Cloud firewall (AWS/Azure)	Firewall	1
NSX Firewall	Firewall	1 license consumed per 4 CPUs
ACI	Firewall	1 license consumed per 1 ACI Leaf
Switch, router	Router	1
Cloud virtual machine (AWS VPC, GCP VPC, Azure VNet)	Cloud Virtual Machine	Number of billable VMs for this device
SecureApp active application	SecureApp Application	1
Disabled device, management device	None	0

For more information on:

License consumption, see License Components.
Data collected by TOS, see Site Usage Data
Tiered license usage monitoring, see Site Usage Monitoring