We performed a comparison between Fortinet FortiSIEM and ManageEngine OpManager based on real PeerSpot user reviews.
Find out in this report how the two Security Information and Event Management (SIEM) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."It is able to connect to an ever-growing number of platforms and systems within the Microsoft ecosystem, such as Azure Active Directory and Microsoft 365 or Office 365, as well as to external services and systems that can be brought in and managed. We can manage on-premises infrastructure. We can manage not just the things that are running in Azure in the public cloud, but through Azure Arc and the hybrid capabilities, we can monitor on-premises servers and endpoints. We can monitor VMware infrastructure, for instance, running as part of a hybrid environment."
"Azure Application Gateway makes things a lot easier. You can create dashboards, alert rules, hunting and custom queries, and functions with it."
"We are able to deploy within half an hour and we only require one person to complete the implementation."
"We didn't have anything similar. So, it really provides value from the incidents and automation point of view. The overview of the security fabric is most valuable."
"The features that stand out are the detection engine and its integration with multiple data sources."
"The analytic rule is the most valuable feature."
"Previously, it was a little bit difficult to find where an incident came from, including which IP address and which country. So in Sentinel, it's very easy to find where the incident came from since we can easily get the information from the dashboard, after which we take action quickly."
"The best functionality that you can get from Azure Sentinel is the SOAR capability. So, you can estimate any type of activity, such as when an alert was triggered or an incident was found."
"The most valuable features for us are the built-in reports and alerts, along with the extreme flexibility in reporting and rule generation."
"FortiSIEM helped us discover all the threats at the time that were attacking the IT services of the company. We now have multiple-level authentication."
"Technical support is helpful."
"Its automated response feature has benefited our customer communication. Analysts feel more confident in providing timely responses."
"The event correlation is pretty robust. The GUI is pretty good."
"Analytics is the most valuable feature. The business service summaries in the dashboards and the correlations for the SIEM are also valuable features."
"Fortinet FortiSIEM has its own validated and authentic IP database that marks malicious IP attacks against the firewall and generates an alert for the same."
"Real-time monitoring makes life quite easy for me."
"This is a good general monitoring system that has all the features we require and they constantly update with new capabilities."
"Device monitoring is a good tool of this solution."
"Device backups are smooth and managed centrally, with a nice dashboard, so you can quickly see the status."
"I liked Network Configuration Manager. They had some pretty decent features there, and they also had pretty good monitoring and alerts."
"ManageEngine OpManager is user-friendly and easy to use. Additionally, useful for basic monitoring."
"The features we found most valuable in ManageEngine OpManager are the probe server and reporting because they're pretty good features."
"I like being able to push configurations to multiple devices. If you have the same configurations for all the branches, it's easier to use ManageEngine OpManager and push configurations at once rather than individually pushing them to each device."
"Flexibility in the two view dashboard helps viewers and admins get the information they need about the fetwork in a flash."
"The reporting could be more structured."
"It would be good to have some connectors for third-party SIEM solutions. Many customers are struggling with the integration of Azure Sentinel with their on-premise SIEM. Microsoft is changing the log structure many times a year, which can corrupt a custom integration. It would be good to have some connectors developed by Microsoft or supply vendors, but they are not providing such functionality or tools."
"They only classify alerts into three categories: high, medium, and low. So, from the user's point of view, having another critical category would be awesome."
"Sentinel could improve its ticketing and management. A few customers I have worked with liked to take the data created in Sentinel. You can make some basic efforts around that, but the customers wanted to push it to a third-party system so they could set up a proper ticketing management system, like ServiceNow, Jira, etc."
"We do see continuous improvement all the time, however, I haven't got a specific feature that is lacking or not well designed."
"Currently, the watchlist feature is being utilized, and although there have been improvements, it is still not fully optimized."
"They're giving us the queries so we can plug them right into Sentinel. They need to have a streamlined process for updating them in the tool and knowing when things are updated and knowing when there are new detections available from Microsoft."
"Microsoft Defender has a built-in threat expert option that enables you to contact an expert. That feature isn't available in Sentinel because it's a huge product that integrates all the technologies. I would like Microsoft to add the threat expert option so we can contact them. There are a few other features, like threat assessment that the PG team is working on. I expect them to release this feature in the next quarter."
"Customer support service could be better."
"They could work on their documentation. If there's anything about the solution that needs improvement, it's that. For example, documentation already is on a very high level but specifically on the CLI there are tons of features which can be fine-tuned and thousands of commands are very difficult to document. If they could make this easier, it would improve the overall solution."
"FortiSIEM is not a market leader in the SIEM space."
"There is no proper guide for integration or configuration."
"The log collection and configuration management are not great."
"Fortinet FortiSIEM could improve to extend to several locations or sites."
"If there is a configuration on the wrong side of the network or there are changes that result in harm to our IT infrastructure, the solution should immediately fix it."
"We expect the latest patch from Fortinet FortiSIEM to give the ability to work with signature files."
"The two views into the system are very good but could be extended to further customization to fit the need of end users in a variety of roles."
"There needs to be improvements to make the solution capable of supporting more devices, and it would be good to see an option for automatic deployment."
"The solution is a bit difficult to configure. There are quite a number of configurations and plugins that you must handle early in the process."
"This product is little bit slow sometimes. It may be that we need to change the configuration to improve performance."
"There are certain things that are not possible to do with Op Manager. It's a solution that still needs time to develop."
"We get a lot of false alerts."
"You cannot resolve 100 percent of the issues yourself. You would need to reach out to the support. It needs to be cheaper."
"We would like link monitoring included. At times we need to monitor those specific links closely."
Fortinet FortiSIEM is ranked 8th in Security Information and Event Management (SIEM) with 63 reviews while ManageEngine OpManager is ranked 15th in Network Monitoring Software with 44 reviews. Fortinet FortiSIEM is rated 7.6, while ManageEngine OpManager is rated 8.0. The top reviewer of Fortinet FortiSIEM writes "It's cheaper than other solutions with the same features but lacks integration with many third-party vendors". On the other hand, the top reviewer of ManageEngine OpManager writes "Helps us monitor all the infrastructure in our company but UI monitoring is not practical". Fortinet FortiSIEM is most compared with IBM Security QRadar, Splunk Enterprise Security, LogRhythm SIEM, Wazuh and ThousandEyes, whereas ManageEngine OpManager is most compared with SolarWinds NPM, Zabbix, PRTG Network Monitor, SCOM and Centreon. See our Fortinet FortiSIEM vs. ManageEngine OpManager report.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
