Fortinet FortiAnalyzer Reviews

Our company is partners with Fortinet and we provide log monitoring services to our customers. More than one hundred people in our company use the solution. 

The solution provides good standardized reports and is easy to troubleshoot. 

The solution should include the ability to customize reports so that customers receive greater value and high level reporting. 

I would also like to be able to view a real-time log. 

I have been using the solution for seven years. 

The solution is stable. I rate it an eight out of ten. 

The solution is scalable. I rate it a seven out of ten. 

Technical support is very good. 

Positive

The initial setup is very straightforward and is accomplished via quick installation.  

We install the solution for customers. One of our technicians handles base deployment which can take two or three years depending on our customer's needs. 

The hardware has a one-time cost and maintenance is paid by annual subscription. 

Customers contracts are on a monthly basis and include log monitoring services, maintenance, and technical support provided by two technicians. 

The solution is not that expensive and I rate it a five out of ten. 

The solution pairs very well with other Fortinet products.

I rate the solution an eight out of ten. 

We use Fortinet FortiAnalyzer for logs and reports. We have a SOC subscription to monitor the end users' login activity and traffic.

Fortinet FortiAnalyzer is deployed by us in both on-premises and cloud environments.

Fortinet FortiAnalyzer provides more visibility into the logs.

The traffic log information we receive from Fortinet FortiAnalyzer is valuable.

Fortinet FortiAnalyzer needs to have more out-of-the-box connectors for integration with other solutions.

I have been using Fortinet FortiAnalyzer for three months.

Fortinet FortiAnalyzer is stable as long as we keep it up to date. 

Fortinet FortiAnalyzer is scalable.

The technical support is great. We receive support within 24 hours of opening a ticket.

Positive

The initial deployment of Fortinet FortiAnalyzer is straightforward. There are two network interfaces involved: the Internet interface and the LAN interface. The LAN interface must be configured on the same subnet as the other Fortinet products to enable visibility of the network connector from the Fortinet console. Upon successful configuration, an authorization message will be received, allowing us to proceed with adding the devices to the FortiAnalyzer device manager and initiating log data collection. The deployment process is well-documented, requiring minimal personnel, and can be completed within five hours.

The number of licenses required directly corresponds with the number of devices connected.

I would rate Fortinet FortiAnalyzer a nine out of ten.

FortiAnalyzer enhances network security visibility with its comprehensive logging and analysis capabilities, making it a valuable tool for organizations seeking to improve their security posture. I highly recommend it.

We are an IT company. One of our clients utilizes FortiGate, FortiAnalyzer, and FortiManager. Thus, this is the sole customer in our portfolio using Fortinet FortiAnalyzer. Among our other clients, some exclusively employ FortiGate. Our responsibility encompasses network management for these clients.

What I like the most is the monitoring system. For example, it can track who is accessing through VPNs. The monitoring features are quite impressive, including maps, source IP, country codes, and geolocation – all of which are really cool. Additionally, the logging functionality is also excellent.

The UI can be more user-friendly for new users.

I have been using Fortinet FortiAnalyzer for seven years.

Fortinet FortiAnalyzer is highly stable. In the seven years of usage, we have never needed to reinstall it or perform troubleshooting. We have not had to make any support calls to Fortinet either. We successfully performed upgrades from version five to six and from six to seven, all of which went smoothly.

Fortinet FortiAnalyzer is scalable.

The technical support is excellent. I have never encountered any problems with FortiAnalyzer, but the issues we faced with FortiGate, which I was unable to resolve on my own, were promptly resolved by their team.

Positive

The initial setup is straightforward. We can choose to install either a single node or a cluster. We run it in a virtual environment on firmware, and the process of installing the RPA takes around 15 minutes. Afterward, some configuration is required, including the installation of certificates and similar tasks. Thus, the entire process usually takes approximately one to two hours.

Once the installation is complete, we need to connect all the FortiGate Firewalls to the FortiAnalyzer. This step also involves configuring them securely. When I deploy this solution for a customer, it typically takes me about four to eight hours to complete the installation and configuration. 

The price is not expensive when compared to other solutions like Palo Alto.

In addition to the licensing, we pay for a support contract.

I would rate Fortinet FortiAnalyzer eight out of ten.

Fortinet FortiAnalyzer is only valuable for organizations that utilize ten or more FortiGates.

I recommend Fortinet FortiAnalyzer to others.

I use the solution for the configuration process.

Logs are the most useful feature of the solution. The solution is easy to use and easy to integrate. It helps to configure multiple devices at once.

The solution provides details like category, IP address, and location. It would be good if the product could provide data about the websites users visit.

It will be better if the product can build its UI like Cisco Meraki’s.

I have been using the solution for around seven years.

I rate the stability an eight out of ten.

Compared to most other solutions, it is easier to scale Fortinet FortiAnalyzer. We also use FortiAnalyzer VM, so the scalability is pretty flexible. Around 1000 employees in our organization use the solution.

It is a bit of a challenge to return devices. Once we return the device to Fortinet, they will send us a replacement. This process takes a bit of time. The cost of sending the device is very high. With that money, we can buy a smaller device.

The initial setup was very simple.

We need three employees to maintain the solution.

The product’s price is much better than its competitors.

We need to have a license for individual devices to use the solution. We end up in a loop when we try to access the websites and different routes. We also have to provide the options ourselves for all our queries. The process would be better if reports and records were more readily available.

Cisco Meraki is an online portal that provides organized and in-depth reports. Overall, I rate the solution an eight out of ten.

We use the product to review firewall logs.

The solution works fine. Separating sections or conditions on Fortinet FortiAnalyzer is quite clear.

The product should be integrated with other third-party solutions for context exchange.

I have been using the solution for the past two years.

The solution is stable. I would rate the stability a nine out of ten.

The solution is scalable. Around 20 to 30 IT employees in our organization use the solution. I would rate the scalability a nine out of ten.

The product is easy to set up.

Around 120 employees work in the technical and maintenance department. I would recommend the solution to other users. I don’t know whether FortiNAC can be integrated with the Fortinet FortiAnalyzer. I rate the solution a nine out of ten.

FortiAnalyzer provides a centralized dashboard for analyzing the output of all our Fortinet solutions, like FortiGate, FortiManager, FortiSandbox, etc. It aggregates and correlates all the events.

Many of my clients are financial institutions that transmit files from around the country across a VPN. In a setup like this, it's helpful to have a centralized dashboard to manage firewalls and other security solutions across a distributed environment. You can do all sorts of analysis and configure it to trigger alarms. 

FortiAnalyzer only integrates with Fortinet solutions. That is a limitation because many organizations use multiple vendors. It's often a mixture of Cisco network hardware and equipment from other vendors, such as switches, access points, etc. 

We have used FortiAnalyzer for one year.

FortiAnalyzer is stable as long as you don't push it. It can cause trouble if you are overreliant on virtual machines and you don't have hardware acceleration. You might see some performance problems. 

FortiAnalyzer is scalable. It covers FortiGate firewalls, switches, etc. You can always buy more licenses or hardware if you need to upgrade. 

The response times could be faster.

Setting up FortiAnalyzer is straightforward. It doesn't take long because everything is already built for you unless you need to do some virtualization. The specific steps depend on your environment and what kind of device fabrics you use. 

They have three-year licenses, but I usually recommend starting with a one-year license to try FortiAnalyzer out. After that, you can switch to a three-year license. 

I rate FortiAnalyzer nine out of 10. I recommend FortiAnalyzer to anyone who is using Fortinet products. 

It's a lock storage correlation device. You can connect locks from different devices. Not just from Fortinet, but you can send locks from other devices to FortiAnalyzer. Basically, it is a centralized repository.

Fortinet FortiAnalyzer has a lock correlation feature. It simplifies the troubleshooting process for its customers. So now, instead of logging into every firewall, they can log into Fortinet FortiAnalyzer and check the locks. They can also check whether there are any issues with the network.

This is a difficult question for me to answer. I want the tool to have a sophisticated and customizable dashboard similar to the one in the SIEM solution. However, I'm not sure if that is in the pipeline. Basically, I would say that it's not a pure SIEM solution where your customer can have a layer on a view of dashboards or advanced dashboards.

I work with Fortinet and Palo Alto. I am also a partner of Fortinet. Even though I have been working with Fortinet for more than five or six years now, Fortinet EDR is something very new for me and us in general. We have been working on firewalls, FortiAnalyzer, FortiManager, FortiMail, FortiADC, and FortiWeb. EDR, SDMA, and ZTNA are new to us. Speaking about Fortinet FortiAnalyzer, I have been working on it for more than six years now.

The stability of Fortinet FortiAnalyzer is okay. Although some customers have encountered issues, others have had a pretty okay experience and are doing pretty well with the solution.

I would say that more than ten of our clients are working on this solution. I would say that it is kind of scalable since it comes in different form factors. Owing to the different form factors and sizing of the solution, you can add and get increased capacity. This can help a person to add more firewalls and devices.

I would say that Fortinet's tech support is really good.

Neutral

I can say that the setup is a mixture of both options. I wouldn't say it is difficult. I would rather say that the setup process is okay or moderate. Also, the straightforwardness and complexity of the setup process will depend on your environment.

The deployment of Fortinet FortiAnalyzer is not complex, but integrating it with firewalls can take some time, depending on the number of firewalls. So, the deployment of the entire solution can take approximately one week to complete.

I'm not familiar with the cost point, because I am more of a technical person and I do not do pre-sales or sales.

I downloaded reports for CrowdStrike Falcon and FortiEDR from peerspot.com to see how they are in terms of performance.

Based on current trends, people are shifting towards FortiGate devices for their attractive value proposition and exceptional performance. FortiGate is the go-to choice for firewalls. And for us, along with FortiGate, I'll even go with FortiManager and FortiAnalyzer. I rate this solution a seven out of ten.

The product is for reporting about the use or detecting some issues or activities.

The ability to track the activities of our users and some topics about security risks are the most valuable aspects.

It's simple to use.

It is not hard to set up.

The configuration is easy.

It offers good integration capabilities.

Support is helpful.

There is a lot of great documentation to be found online. 

We are concerned about the compliance of our policy and institutional philosophy. We are a university and provide the tool to the users and to the infrastructure for the right use.

I've been using the solution for six years. 

We have around 2,000 users.

Support is good. We also use the documentation online and find help via some tutorials on the internet.

The initial setup is very simple. 

The deployment took about six months. 

We deployed it via our team, however, we used an external consultant from the reseller.

We pay a standard licensing fee on a yearly basis. 

The pricing is complex since we need to add some other products or tools to assure our infrastructure, then the amount of every one of the items of software otherwise the solution is expensive in the end.

We are a customer and end-user.

I'd rate the solution nine out of ten.