SecureTrack License Components (SKUs)

This topic provides a general overview of the various SecureTrack license components offered by Tufin. For more detailed information, including support and pricing information, contact your Tufin partner or email us at [email protected]

Tufin licenses define the licensed components (SKUs), including the number of devices of each type that can be monitored. When you issue a purchase order to Tufin, you need to specify the SKUs, and when you add to the number of monitored devices of a particular type, or want to extend other functionality, you need to purchase an extended license.

Licenses can be purchased as perpetual licenses or on a subscription basis. Each SecureTrack installation requires a single SecureTrack base component with TF-SECTRK-SVR (perpetual) or TS-SECTRK-SVR (subscription) license. Subscription licenses for physical firewalls can be attached to virtual firewalls. High Availability requires an additional SKU.

SecureTrack for public cloud accounts (AWS, Azure) are only available as an annual subscription license.

Additional SKUs enable management and monitoring of different types and quantities of devices. Each component type requires a specific SecureTrack SKU. It is possible to combine both perpetual and subscription licenses for the different components. There are also various bundle options.

SecureTrack Audit SKUs are available for all supported devices.

Device

License Type

Examples
Check Point, Cisco, Juniper Networks, Fortinet, Palo Alto Networks, and Forcepoint firewalls and firewall clusters - physical and virtual Firewall module /physical cluster/virtual context firewall/virtual cluster license – depends on how the firewall is configured

  • PA-VM: Firewall license

  • Check Point VSX: Virtual context FW license

  • Fortinet cluster with VDOMs: virtual firewall cluster license

Check Point Provider-1 MDS Servers

(Licenses for HA servers need to be purchased separately)

MDS license  
F5 BIG-IP LTMs F5 BIG-IP LTMs license  
Blue Coat Proxy SG Blue Coat Proxy SG license  
Cisco ACI (per ACI leaf) Cisco ACI license  
Cisco Routers, switches, Juniper Networks M/MX routers Router/Switch license

  • Juniper MX router: Router/switch license

  • Cisco Nexus switch: Router/switch license
VMware NSX (per CPU) NSX CPU license  

Azure, AWS (per account)

Public Cloud license