Fortinet FortiAnalyzer Reviews

It receives logs from the FortiGate 5000 Series (about 12 FortiGate blades), and it was configured for keep logs for about 1,050 days. The logs are divided by archive (raw logs) and analytics (logs indexed in a database). 

The use case is primarily for getting graphical data to make quick decisions.

FAZ has improved the organization because it stores events in the past so we can correlate incidents using another monitor tools; the problem is that it can´t recognize logs from FortiController blades, not even specifying it as a syslog device so this is a big lack. Devices from another brand are compatible only as syslog devices if they support.

It supports SQL for logging and reporting. Log data is inserted into the SQL database for log view and report generation. 

Another feature is the custom reports, where you can obtain a chart builder from a log view: traffic, event, or security log.

It is very important that FAZ can support FortiController as the architecture designed for the network. FortiController should be registered in FAZ at least for event logs.

No issues at all. It is a reliable product.  

The problems come when you are using different OS versions between FortiGate and FortiAnalyzer.

No scalability issues. You should know how many logs per second or minute are generated in your network to avoid issues with scalability.

The technical support with Fortinet has risen considerably. Now, they respond in three to four hours instead of two days.

We did not use a previous solution.

The FAZ includes a wizard, which is very simple to follow during the initial setup.

We implemented it in-house. We have had some experience implementing FAZ.

I do not have this value yet.

The cost and pricing should be in accordance with the calculation of log storage capacity for a time period required for historical analysis.

We did not look at any other options, because Fortinet was elected for use by the end user.

My only experience is with a very important customer, the most recognized in Latin America.

This product is only used for logs and reporting.

It gives us reporting features, which are helpful in the case of troubleshooting and audit purposes.

It has detailed reporting, e.g., user-wise reporting, threat analysis, etc. It also gives you live logs, which can be really helpful during troubleshooting. 

It should have customized reports as well. While it currently has them, you need to write a script which is not straightforward.

No issues.

No issues.

I would rate it as a two out of 10. The technical support takes at least two days to reply on any ticket post raised on their website. 

We did not have a previous solution.

Initial setup is straightforward, and it has an easy setup.

It depends upon the company.

We evaluated SonicWall and Cisco.

It generate reports from a specific date or interval.

• Storage in SSD, to generate customized reports 
• Event management

• Operation and maintenance
• High-availability architecture
• Management link embedded in the transmission link

Yes. The combination between FortiAnalyzer and FortiGate 5000 Series with millions of concurrent sessions is high-risk because it can interrupt the operation of the network.

The FortiAnalyzer is not scalable.

Tech support is very poor and slow.

Straightforward.

The hardware cost and services contract are fair.

Buy it for networks that have the FortiGate platform as a security gateway or for enterprises with employees who are on the road a lot.

The product is really helpful in examining the logs of multiple firewalls on a single GUI.

Log View is the most valuable part for us, as we can view logs from different Fortigates on a single GUI. 

Another important feature is real-time logs, they help a lot in troubleshooting.

I think some improvement is required in real-time log monitoring, as sometimes it gets stuck or displays results after a delay.

No issues yet.

No issues after installing the 1000E.

Good.

We used view local logs before this.

It's straightforward, just add in different FortiGuards the IP address of FortiAnalyzer.

It's worth spending on FortiAnalyzer if you have multiple firewalls in your network.

The key functions for us are the next-gen firewall and network analytics. To ensure the best protection, we need to constantly analyze the situation in the network, as well as internal and external threats, as well as actual AV protection. The Fortinet products and FortiGuard services give us all of this.

Our company uses a virtual infrastructure. Implementing this product supplements the protection of our infrastructure.

The current version of the product is easy to use. Based on my experience, I can't recommend any areas of improvement. It's important, however, to know what you want prior to implementation. Otherwise, it may not meet your future needs based on the initial configurations.

We've used it for about four months.

During installation, we had no problems with deployment.

We have had no problems with stability.

We have had no problems with scalability.

The level of local customer service was very good. Per our request, tested the product. We got all answers to our questions from technical support. I rate both of them highly.

We used Wallix AdminBastion together with it.

The initial setup was straightforward.

A successful implementation for this product depends on how clearly the customer understands what they have and what they need in the future. In most cases, the customer turns out to be unsatisfied when it's unclear that they knew what they wanted prior to implementation. My main recommendation is to implement it together with the vendor, writing down the tasks, solutions, and the expected result before you begin.

I think Fortinet has a balanced offering of prices and licenses.

Fortinet's strategy is based on the dividing the product line depending on functionality. This allows customers to choose only the necessary feature set for them.

The Fortinet product line is wide – you can choose from SOHO to Enterprise, and from hardware to virtual solution. The presence of a free client (Win/Android/OS X) provides protection for client workstations. Each customer will be able to find the most suitable solution for them.

The balanced policy product line and licensing allows customers to choose only the necessary feature set for them. Also you can easily migrate from other vendors using single tools for conversion. Another tool helps you plan the placement of Wi-Fi points in the building. Also, it's very important that equipment has international and national certification such as PCI, DSS, etc. Presentation of products for SDN (Software-defined Networks including SDDC - Software-defined Data Center) confirms the company's leading position in the market.

• Real time reports
• Reports on who tried to attack
• FortiGate monitor

Before using FortiAnalyzer, people would surf wherever and we could not monitor or see which computer in the company goes where. Everyone had the same IP. Now, using the analyzer, I am able to see each IP separately, including user name and other stats. One time the police called and told me someone from the company was breaking the law and I was able to monitor the specific computer.

They should learn from CheckPoint how to design UX for admins.

No issues encountered.

It's very stable.

I've not used them yet.

I've not used them yet.

We previously used a previous solution.

It was straightforward.

We did it in-house.

It's a great ROI for the price.

Only get it if you need it.

We use it for reports and analysis.

The report templates are valuable. It works very well, and integrations also work well.

Feature-wise, it is working very well for us. We don't need any additional features. However, its pricing can be improved. For small business customers, price is an important factor.

I have been using this solution for two years.

It is stable.

It is easy to scale.

It is expensive for small business customers. It is only available for customers with a high number of firewalls to manage or to report. If a customer has only five boxes of FortiGate, the price of FortiAnalyzer can be more than the five boxes. So, we can't easily put this solution for small business customers.

I would rate this solution a nine out of ten.

The feature I find most valuable is the reporting customization.

Areas for improvement would be the default template reporting and the user-friendliness of the report customization. In the next release, I would like to see more information about tracking intelligence.

I have been using this product for over five years.

This solution is stable.

This solution is scalable.

Technical support is fine, but they could improve their understanding of the customer environment when troubleshooting.

The initial setup is ok.

The pricing of this product should be about 10-20% lower.

This is a good product, but I think there are better ones for log analytics. I would rate this product seven out of ten.