| Features | Forward | Skybox Tufin |
| Firewall Rule Visibility Analyze firewall rules across hybrid multi-vendor environments |
 |
|
| Firewall Rule Diff Analyze running history of firewall rules to see what has changed overtime |
|
 |
| Firewall State Visibility Analyze firewall state files to see how firewall will behave in the flow of a packet throughout the network |
|
|
| Config Compliance automated alerts catch any drift, ensuring your network stays compliant and on policy—always for both firewalls and traditional networking equipment |
|
 |
| Exposure Analysis Analyze every path a vulnerable or exposed host has through the environment |
|
|
| Hybrid Security Posture Validate security controls no matter where they are in the network or in the cloud |
|
|
| Vulnerability Exposure Prioritization Know what network devices are vulnerable and instantly know if they are connected to the network |
|
|
| Path Search See every path a packet can take without ever sending a packet through the network |
|
|
| Config Compliance automated alerts catch any drift, ensuring your network stays compliant and on policy—always |
|
|
| Network Query Engine (NQE) Query your network like it's a database to unlock insights like you never could before |
|
|
