Fortinet FortiEDR Reviews

For FortiDR, it serves as an add-on to the firewalls and the SD-WAN solution that I am already using from Fortinet. Basically, it is an additional layer on top of my existing network environment. 

Initially, when I started, I bought FortiGate from Fortinet. After that, I implemented tools like webmail. Then, after maybe six months to a year, I decided to switch from my existing EDR to other vendor solutions, like Kaspersky, Trend Micro, or Broadcom, and eventually switched to Fortinet since it's interoperable with the firewall I am already using. 

The EDR became the next step in implementing Fortinet solutions for me.

The data collected from the endpoint where the EDR is installed is highly valuable for me. The firewall and FortiEDR Analyzer use this data for analytics, collecting it from the endpoint. This data allows for comprehensive analysis and better security measures. The collection and analysis of data are essential features that enhance its functionality significantly within my network.

We use the solution for endpoint protection. Since we also use Windows Defender, we don't go for the extended protection. We're just using the normal EDR services from Fortinet.

The solution's most valuable features are the investigation tab and the granular control that Fortinet provides. The solution helps control all the steps of different endpoints, like controlling the USBs and the flow of data.

Fortinet FortiEDR is pretty helpful in detecting and mitigating zero-day threats because it works at the granular level. It promptly blocks any suspicious software that it has not seen before.

Fortinet FortiEDR protects our workstations against ransomware and other malicious applications.

The solution acts like an advanced antivirus with extended features like logging and automated response to detected threats. This automation helps save time, as the system automatically handles malicious detections and responses without much manual configuration.

The tool has saved me time managing workstation protection.

We use FortiEDR for EDR on our internal environment, which includes about 2,900 endpoints.  

I like FortiClient EMS. FortiEDR has a lot of great features like lockdown mode, remote wipes, and encryption. I can set malware outbreak policies and controls for detecting abnormalities. I can also simulate phishing attacks. 

At my last job, we used FortiEDR to secure endpoints for 8,000 employees across MacBooks and Linux machines, ensuring the protection of backups and VPN connections.

In 2020, we faced a significant challenge with remote work in Brazil, where BitLocker was utilized. FortiEDR proved invaluable as it allowed us to create a secure process for remote access.

I oversee Fortinet solutions, focusing on endpoint security and processing.

We deployed the FortiEDR solution for our remote workforce as well.

FortiEDR excels in first-line defense for endpoints against malware, incorporating solutions for antivirus and data loss prevention, especially for confidential documents on the user's device. 

The product detects and blocks threats and is more proactive than firewalls.

Our problem with the EDR platform is that another company manages it. We don't manage it. We give them the infrastructure, and they give us the information in return as a service. Once, we had an event that was locked and blocked, but information about it came to us two or three days later. That isn't the way it should be. We see blocked functions and events but don't get information about them. You ask why something doesn't work before checking and seeing that EDR has blocked an event, but why is it blocked? This information is not accessible by our company as we are customers. We want a solution that works in our network and only in our network. We have to have all the information, such as what happened, when it happened, and why it happened, and that information should be provided at the moment, not two days later.

I utilize Fortinet FortiEDR for endpoint protection.

Our security posture improved since implementing Fortinet FortiEDR in terms of our overall setup, as we've experienced significant enhancements. We now have streamlined operations, better dashboards, and improved monitoring capabilities, consolidating multiple functions into a single solution. Previously, we were managing three separate vendors alongside support from our IT arm and outsourced assistance. With FortiEDR, everything is integrated under one dashboard, making our processes more efficient.

Fortinet FortiEDR effectively manages threat detection and response in our daily operations with great robustness. Previously, we had to rely on two separate Palo Alto devices for bandwidth management, both lacking real-time capabilities. Our search engine, detection engine, and database were also disjointed. However, with FortiEDR, we've achieved parity in functionality for both functions. Consequently, our bandwidth performance has seen a significant boost, providing users with a stable stream to work with.

The implementation of automation has had a significant impact on our team's workload. As we operate shared services centers across the APAC region, having this infrastructure in place has provided us with visibility across all three sites. This visibility, facilitated by automation, is particularly beneficial for higher management and decision-makers. It's a notable advancement for our operations.

FortiEDR has played a crucial role in mitigating the impact of breaches within our healthcare IT industry. Given the vast amount of data we handle and the real-time nature of data processing via APIs and centralized databases, FortiEDR has streamlined our operations. It allows us to process data at our own pace without encountering significant obstacles or requiring extensive workarounds. Essentially, it has provided us with a seamless transition between sandbox and production environments, making our workflow smoother and more efficient.

At our company, we first evaluate whether a client is already using Fortinet Firewall. If so, the Fortinet team of our organization explains the benefits of integrating the existing firewall with Fortinet FortiEDR, including the advantage of gaining visibility on a network and endpoints. Then, our company strategizes how Fortinet FortiEDR can be implemented for the client. 

Intelligence and detection capability are among the top features of Fortinet FortiEDR. The detection capabilities are far better than other basic areas of the solution, and it's able to satisfy customers by being integrated with native platforms. The solution won't be the best in comparison to products from Palo Alto and SentinelOne.