Try our new research platform with insights from 80,000+ expert users

Fortinet FortiSandbox vs NetWitness Platform comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiSandbox
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
38
Ranking in other categories
Advanced Threat Protection (ATP) (4th), Threat Deception Platforms (7th)
NetWitness Platform
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
Log Management (33rd), Security Information and Event Management (SIEM) (30th)
 

Mindshare comparison

Fortinet FortiSandbox and NetWitness Platform aren’t in the same category and serve different purposes. Fortinet FortiSandbox is designed for Advanced Threat Protection (ATP) and holds a mindshare of 8.7%, down 9.9% compared to last year.
NetWitness Platform, on the other hand, focuses on Log Management, holds 0.4% mindshare, up 0.3% since last year.
Advanced Threat Protection (ATP) Market Share Distribution
ProductMarket Share (%)
Fortinet FortiSandbox8.7%
Palo Alto Networks WildFire10.7%
Microsoft Defender for Endpoint9.0%
Other71.6%
Advanced Threat Protection (ATP)
Log Management Market Share Distribution
ProductMarket Share (%)
NetWitness Platform0.4%
Wazuh12.2%
Grafana Loki7.9%
Other79.5%
Log Management
 

Featured Reviews

Abdelhamid Saber - PeerSpot reviewer
Enhanced network security with adaptable integration and really good support
We use FortiSandbox for scanning files and images that pass through our networks. It integrates with different devices, such as five adapters and other Fortinet devices It is time-saving and more secure. It saves us from a lot of antivirus and anti-malware issues. The adapter is beneficial as it…
MOTASHIM Al Razi - PeerSpot reviewer
It is a stable solution, but they should make the user interface easier to understand
The solution's initial setup takes work. We have to organize multiple paths and many features. The deployment process takes less than a week. But it takes a month to complete if we want to make the solution smarter by integrating it with various devices. I rate the process as a six out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution extracts an attached file before reaching the user and notifies the user if there's something malicious in the attachment received along with an email."
"It is an easily scalable solution."
"Fortinet FortiSandbox's most valuable feature is the security it provides against threats, such as ransomware. Additionally, it integrates well with APIs."
"The most valuable feature is the protection and the way it works, the technology is what I like the most."
"Overall, it works fine. Its interface is also fine."
"The solution is easy to manage."
"It is a stable solution."
"Integration is one of the solution's most valuable aspects. You can integrate even third-party solutions so that they can send the information or files they quarantine through the FortiSandbox"
"It gives the ability to investigate into network traffic in the Net and the organization what we couldn't do before."
"NetWitness Platform is valuable for creating rules that the solution must detect."
"The most valuable features are its ingestion of logs and raising of alerts based on those logs."
"The most valuable features are the packet decoder, log decoder, and concentrator."
"The most valuable features are the integration and ease of use."
"It's fully scalable. There is no limit. Of course, the license limits per day the number of terabytes. In my opinion, it's very flexible."
"Performance and reporting are very good."
"The most valuable features are the packet inspection and the automated incident response."
 

Cons

"In the next release, I would like to see machine learning and anti-exploitation included."
"It would be better if we could integrate FortiSandbox with endpoint security solutions."
"The use cases in Fortinet FortiSandbox are not good. It is difficult to upload a custom VM for Fortinet FortiSandbox. The integration of Fortinet FortiSandbox with other Fortinet or FortiGate firewalls is not good. VMs are already installed in the hardware and are working fine, but we tried to approve the custom VM many times but did not succeed."
"I don't know if it is viable to do an improvement like this. When there are passwords in the password-protected files, it can't scan them or do things like this. I don't know if an algorithm or something else could make it better. Nowadays, many legitimate office documents have passwords."
"The delivery feature in my country is extremely bad."
"Fortinet FortiSandbox can improve by decreasing the time of analysis response. Other solutions have a better response time, such as WildFire."
"Most people are confused about how to use the right integration of the right Fortinet product."
"The area I would like this solution to be improved in is the integrations for Sandbox with AI and big data ML mechanisms. I think this would be a practical improvement."
"The product's licensing models are complex to understand. This particular area needs improvement."
"There is no support for this product in this country, so problems have to be resolved through global technical teams."
"The system architecture is complex and sometimes it’s hard to troubleshoot potential problems."
"Security needs improvement."
"Health monitoring of the event sources and devices."
"The implementation needs assistance."
"The solution should have more integration capabilities with different platforms."
"The initial setup was complex because it takes a lot of time to complete the implementation."
 

Pricing and Cost Advice

"FortiSandbox is a subscription that can be purchased from Fortinet directly. Only using FortiSandbox as features purchased as a subscription in the cloud."
"There is a license to use this solution."
"The price is competitive."
"The solution is not expensive at all."
"The price of Fortinet FortiSandbox is not expensive."
"The license for Fortinet FortiSandbox depends on the use case."
"The price of Fortinet FortiSandbox is expensive."
"Altogether, it is about €10,000 for the Sandbox and Email Gateway."
"Our license is for one year."
"The licenses are good but the cost is very expensive."
"The product is expensive."
"There is a licensing fee and the customer can choose whether he wishes this to be subscription-based or perpetual."
"The new pricing and licensing mechanisms are fair. I would advise always to get the full solution (i.e., not only Logs)."
"It’s cheaper to run virtual machines in a VMware environment."
"Compared to the competition, the is price is not that high."
"It provides tools to assist in selecting the appropriate license and usage scenarios."
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
872,706 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Government
10%
Financial Services Firm
9%
Comms Service Provider
9%
Financial Services Firm
13%
Computer Software Company
11%
Performing Arts
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise13
Large Enterprise9
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
 

Questions from the Community

What do you like most about Fortinet FortiSandbox?
The real-time analysis capability of FortiSandbox is beneficial for email analysis.
What is your experience regarding pricing and costs for Fortinet FortiSandbox?
I think it's affordable. For the six to seven months of usage, the cost has been reasonable.
What needs improvement with Fortinet FortiSandbox?
We sometimes face a delay in email scanning due to not having multiple virtual machines. Improvements could be made in dynamic scanning, scanning all email components such as URLs and attachments, ...
What do you like most about NetWitness Platform?
The product's initial setup phase was not at all difficult.
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
 

Also Known As

FortiSandbox
RSA Security Analytics
 

Overview

 

Sample Customers

Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Los Angeles World Airports, Reply
Find out what your peers are saying about Fortinet FortiSandbox vs. NetWitness Platform and other solutions. Updated: September 2022.
872,706 professionals have used our research since 2012.