"The thing that Devo does better than other solutions is to give me the ability to write queries that look at multiple data sources and run fast. Most SIEMs don't do that. And I can do that by creating entity-based queries. Let's say I have a table which has Okta, a table which has G Suite, a table which has endpoint telemetry, and I have a table which has DNS telemetry. I can write a query that says, 'Join all these things together on IP, and where the IP matches in all these tables, return to me that subset of data, within these time windows.' I can break it down that way."
"One of the biggest features of the UI is that you see the actual code of what you're doing in the graphical user interface, in a little window on the side. Whatever you're doing, you see the code, what's happening. And you can really quickly switch between using the GUI and using the code. That's really useful."
"The ability to have high performance, high-speed search capability is incredibly important for us. When it comes to doing security analysis, you don't want to be doing is sitting around waiting to get data back while an attacker is sitting on a network, actively attacking it. You need to be able to answer questions quickly. If I see an indicator of attack, I need to be able to rapidly pivot and find data, then analyze it and find more data to answer more questions. You need to be able to do that quickly. If I'm sitting around just waiting to get my first response, then it ends up moving too slow to keep up with the attacker. Devo's speed and performance allows us to query in real-time and keep up with what is actually happening on the network, then respond effectively to events."
"The most valuable feature is that it has native MSSP capabilities and maintains perfect data separation. It does all of that in a very easy-to-manage cloud-based solution."
"It's very, very versatile."
"In traditional BI solutions, you need to wait a lot of time to have the ability to create visualizations with the data and to do searches. With this kind of platform, you have that information in real-time."
"The most valuable feature is definitely the ability that Devo has to ingest data. From the previous SIEM that I came from and helped my company administer, it really was the type of system where data was parsed on ingest. This meant that if you didn't build the parser efficiently or correctly, sometimes that would bring the system to its knees. You'd have a backlog of processing the logs as it was ingesting them."
"The real-time analytics of security-related data are super. There are a lot of data feeds going into it and it's very quick at pulling up and correlating the data and showing you what's going on in your infrastructure. It's fast. The way that their architecture and technology works, they've really focused on the speed of query results and making sure that we can do what we need to do quickly. Devo is pulling back information in a fast fashion, based on real-time events."
"The product is quite well-organized. The GUI makes it easy to navigate."
"The solution is easy to use and user-friendly."
"We like the integration of all of these Fortinet platforms together. Everything is integrated well, and we are able to sell that as a service to our customers."
"Our customer did not have security monitoring in the first place. With this solution, it provided security posture management and visibility about the security landscape and threats that they had."
"It's a very nice solution to work with."
"Fortinet FortiSIEM's most valuable feature is the simplicity in handling multi-tenancy and the ability to switch between different clients at the same time. That was handled flawlessly."
"The most valuable feature is the anomaly-reporting alarms."
"One of the most valuable features is that we can combine SOC and NOC operations in the same tool. We can provide NOC and SOC services in the same tool for two separate teams. There are plenty of third-party solutions that integrate with FortiSIEM. All these solutions already have a ready integration, and we have the possibility to create a custom connector for these solutions. Its reports are also very good."
"The most valuable feature of ManageEngine OpManager makes it easy to monitor all the network alerts on the application."
"It is easy to use and deploy."
"Some of the most valuable features are the accessibility of the solution and the fact that it is simpler than other products. For example, discovering devices in the network is very simple, making it user-friendly."
"Monitoring is the most valuable feature of this solution."
"We have found the solution to be stable."
"I liked Network Configuration Manager. They had some pretty decent features there, and they also had pretty good monitoring and alerts."
"Some of the useful features are NetFlow and analytics."
"Devo has a lot of cloud connectors, but they need to do a little bit of work there. They've got good integrations with the public cloud, but there are a lot of cloud SaaS systems that they still need to work with on integrations, such as Salesforce and other SaaS providers where we need to get access logs."
"From our experience, the Devo agent needs some work. They built it on top of OS Query's open-source framework. It seems like it wasn't tuned properly to handle a large volume of Windows event logs. In our experience, there would definitely be some room for improvement. A lot of SIEMs on the market have their own agent infrastructure. I think Devo's working towards that, but I think that it needs some improvement as far as keeping up with high-volume environments."
"Technical support could be better."
"There is room for improvement in the ability to parse different log types. I would go as far as to say the product is deficient in its ability to parse multiple, different log types, including logs from major vendors that are supported by competitors. Additionally, the time that it takes to turn around a supported parser for customers and common log source types, which are generally accepted standards in the industry, is not acceptable. This has impacted customer onboarding and customer relationships for us on multiple fronts."
"The overall performance of extraction could be a lot faster, but that's a common problem in this space in general. Also, the stock or default alerting and detecting options could definitely be broader and more all-encompassing. The fact that they're not is why we had to write all our own alerts."
"An admin who is trying to audit user activity usually cannot go beyond a day in the UI. I would like to have access to pages and pages of that data, going back as far as the storage we have, so I could look at every command or search or deletion or anything that a user has run. As an admin, that would really help. Going back just a day in the UI is not going to help, and that means I have to find a different way to do that."
"I would like to have the ability to create more complex dashboards."
"We only use the core functionality and one of the reasons for this is that their security operation center needs improvement."
"There is no proper guide for integration or configuration."
"They need to integrate better with Cisco and Palo Alto."
"The product does not have Security Orchestration and Automation Response, I would recommend adding this feature."
"It would be good if the solution offered even more configuration options, especially in relation to the VPN so that it continues to be a very flexible option."
"FortiSIEM is not a market leader in the SIEM space."
"Areas for improvement would be the ease of use and the integration with Fortinet's own products."
"Not very good on non-API features, lacks that functionality."
"Its training can be improved. Its price also needs to be improved."
"The only problem with it is that the setup isn't very intuitive. I know that they just upgraded the product to make it a little bit easier to use, but compared to some of the other platforms, it is not easy to configure it, set it up, and get it running. However, once you have set it up and got it running, it runs great."
"I would like to see more enhancements made to the product."
"We would like link monitoring included. At times we need to monitor those specific links closely."
"There are certain things that are not possible to do with Op Manager. It's a solution that still needs time to develop."
"We have been facing an issue since last year when a lot of our users started to work from home through their mobiles or computers. We are having trouble reaching these devices. We are now planning to publish our instance to the cloud so that we can reach these devices. Its performance should be improved in terms of the discovery of the devices. I would like to feel confident with the discovery that this solution does. For example, on my dashboard, I would like to be able to view a list of all devices seen on a specific server. At present, it is difficult to find such information. This would be an excellent feature to have."
"There needs to be improvements to make the solution capable of supporting more devices, and it would be good to see an option for automatic deployment."
"ManageEngine OpManager can improve by having better updates for critical issues."
See how Devo allows you to free yourself from data management, and make machine data and insights accessible.
Fortinet FortiSIEM is ranked 8th in Security Information and Event Management (SIEM) with 19 reviews while ManageEngine OpManager is ranked 18th in Network Monitoring Software with 7 reviews. Fortinet FortiSIEM is rated 7.6, while ManageEngine OpManager is rated 7.6. The top reviewer of Fortinet FortiSIEM writes "Very easy alert setup; a good tool for analysis and for SOC". On the other hand, the top reviewer of ManageEngine OpManager writes "Stable, difficult to install, and the technical support could be improved". Fortinet FortiSIEM is most compared with Splunk, Microsoft Sentinel, IBM QRadar, Elastic Security and PRTG Network Monitor, whereas ManageEngine OpManager is most compared with SolarWinds NPM, Zabbix, PRTG Network Monitor, Nagios XI and Wireshark. See our Fortinet FortiSIEM vs. ManageEngine OpManager report.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
