Try our new research platform with insights from 80,000+ expert users

Fortinet FortiEDR vs NetWitness NDR comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
3.4
Fortinet FortiEDR offers enhanced security and ROI with minimal weekly effort, boosting visibility and customer satisfaction over four years.
Sentiment score
8.0
Implementing NetWitness NDR enhances security, improves network visibility, reduces costs, and boosts efficiency and productivity for businesses.
 

Customer Service

Sentiment score
6.8
Fortinet FortiEDR's customer service is responsive but faces occasional delays due to broader reach and non-integrated support.
Sentiment score
7.3
NetWitness NDR's customer service is generally efficient and highly regarded, though some users report occasional slow response times.
The technical support from Fortinet is excellent.
For setting up some proper solutions for issues at the customer site, it can take about one week.
 

Scalability Issues

Sentiment score
6.4
Fortinet FortiEDR is highly scalable for enterprises, though some limitations exist with external integrations and cloud environments.
Sentiment score
7.0
NetWitness NDR is scalable for large enterprises, though some users report issues with scalability and agent migration.
When implemented in a Fortinet environment with an existing firewall, FortiAnalyzer, and FortiManager, it is straightforward to install and scale by adding more EDR for endpoints.
I can give it nine points in terms of scalability.
 

Stability Issues

Sentiment score
8.7
Fortinet FortiEDR is stable and reliable but requires maintenance, with occasional issues like memory concerns and false alerts.
Sentiment score
7.7
NetWitness NDR is generally reliable, providing real-time data and stability, though minor technical issues are occasionally reported.
After that, I stopped scanning the Cisco AnyConnect and switched to Fortinet VPN. Everything worked fine afterward.
For stability, I would give it a score of ten, as we are not having any issues with that currently.
 

Room For Improvement

Fortinet FortiEDR needs improved cloud security, automation, and user interface for better market acceptance and competitive advantage.
NetWitness NDR requires improvements in UI, scalability, detectability, integration, session times, pricing, training, and features, making it complex and slow.
Fortinet could consider reducing the minimum order quantity for EDR, currently set at 500 pieces.
 

Setup Cost

Fortinet FortiEDR offers competitive pricing but may have high setup costs, with potential savings through Fortinet's channel model.
The pricing is moderate; I cannot label it as cheap, but it is moderate compared to other main solutions.
It's reasonably priced compared to other vendors' similar products.
 

Valuable Features

Fortinet FortiEDR offers robust EDR capabilities, efficient resource use, and seamless integration, ensuring scalable, user-friendly cybersecurity for organizations.
NetWitness NDR offers high detection rates, real-time malware response, third-party integration, and a user-friendly, interoperable interface with advanced analytics.
We also require a proactive protection mechanism, including an alarm system for threat detection before attacks occur.
 

Categories and Ranking

Fortinet FortiEDR
Ranking in Endpoint Detection and Response (EDR)
12th
Average Rating
8.0
Reviews Sentiment
6.4
Number of Reviews
39
Ranking in other categories
No ranking in other categories
NetWitness NDR
Ranking in Endpoint Detection and Response (EDR)
63rd
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Endpoint Protection Platform (EPP) (59th), Threat Intelligence Platforms (TIP) (40th), Security Orchestration Automation and Response (SOAR) (25th), Network Detection and Response (NDR) (19th), Extended Detection and Response (XDR) (37th)
 

Mindshare comparison

As of October 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Fortinet FortiEDR is 3.5%, down from 3.9% compared to the previous year. The mindshare of NetWitness NDR is 0.5%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Market Share Distribution
ProductMarket Share (%)
Fortinet FortiEDR3.5%
NetWitness NDR0.5%
Other96.0%
Endpoint Detection and Response (EDR)
 

Featured Reviews

Anoop K Jayan - PeerSpot reviewer
Has strengthened endpoint protection for on-premise networks and supported migration to Linux environments
What really stands out in Fortinet FortiEDR is that we are integrating it with some private clouds at the customer's premises with secure SD-WAN networks. I don't know how much it contributes to this SD-WAN network in the own premises cloud solution, but that is what we are doing. This is especially relevant for government projects where the SD-WAN solution is within their private network, not touching the Internet or any other access. Their first requirement is centralized management. Additionally, they need antivirus updates and other things to be done through a centralized platform within that private cloud. That is their requirement, and currently, we temporarily allow internet access, but it is not preferred. We are moving towards a complete air gap, providing full isolation from the internet for that. We have started to work with machine learning capabilities in Fortinet FortiEDR. We are not that well-versed yet, but we have begun using machine learning for intrusion detection and other purposes. Regarding forensic analysis in Fortinet FortiEDR, it is useful in understanding attack vectors because our projects are based on the voice side, such as cloud PBX solutions and call center management. There are media activities and many attacks coming from the outside, as well as vulnerabilities from endpoints. In those cases, we need detailed analysis through an AI platform to inspect how these attacks are coming. We also require a proactive protection mechanism, including an alarm system for threat detection before attacks occur.
SupravatMaji - PeerSpot reviewer
Beneficial single unified dashboard, good native application integration, and high availability
My advice to those wanting to implement RSA NetWitness Network is they have to first do a little due diligence, such as the exact requirement based on their needs. That will give them a direction for their investment because otherwise, the bill of material or bill of quantity (BOQ) may be higher side. It is important to do good due intelligence on the environment, see the exact requirement, and then go ahead with the solution. The solution is perfectly stable. I rate RSA NetWitness Network a nine out of ten.
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
869,760 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Manufacturing Company
8%
Government
8%
Financial Services Firm
8%
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business19
Midsize Enterprise9
Large Enterprise14
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise2
Large Enterprise5
 

Questions from the Community

What's the difference between Fortinet's FortiEDR and FortiClient?
I suggest Fortinet’s FortiEDR over FortiClient for several reasons. For starters, FortiEDR guarantees solid protection because it continually scans servers for emerging vulnerabilities, which gives...
What do you like most about Fortinet FortiEDR?
We have FortiEDR installed on all our systems. This protects them from any threats.
What is your experience regarding pricing and costs for Fortinet FortiEDR?
The pricing is moderate; I cannot label it as cheap, but it is moderate compared to other main solutions.
Ask a question
Earn 20 points
 

Also Known As

enSilo, FortiEDR
RSA ECAT, NetWitness Network
 

Overview

 

Sample Customers

Financial, Healthcare, Legal, Technology, Enterprise, Manufacturing ... 
ADP, Ameritas, Partners Healthcare
Find out what your peers are saying about Fortinet FortiEDR vs. NetWitness NDR and other solutions. Updated: September 2025.
869,760 professionals have used our research since 2012.