Fortinet FortiAnalyzer Reviews

Our company uses the solution to capture our Forti Firewall into a centralized box and auditing folder that is analyzed at least once per year. Four staff members use the solution, produce detailed reports, and manage operations. 

We initially implemented the solution on-premises at our data center in Colombo City. Now, we are implementing things to the cloud so our next plan is to secure cloud-level protection. 

Technical reports clearly identify system checks, locations and areas, how many times things escape, which firewall is affected, and source IDs. 

Software reports are good but should match the dashboard and include top-level output instead of just base or low-level devices. Currently, we need to look into web URLs to analyze information. We are planning to move to the next level because we need threads for other devices such as HDMI or VGA output. 

I have been using the solution for four years. 

The solution is stable. 

The solution is scalable. 

The management side requires an additional user account that is maintained and AD authenticated by the analyzer. It would be easier to integrate features without this required account that limits scalability from the management side. 

A few years ago, we were implementing and had a session expired issue because the application session had expired on the national channel level. We contacted local agents who reached out to support. The help desk successfully sorted out and fixed the issue. Support is located in India and uses the English language. 

The setup is straightforward with a very easy deployment program. Some IT knowledge is helpful but it is not hard to setup or manage the solution. 

Base features used to be priced lower but now are a bit higher. We have some requirements and combine more than 100 showrooms to the SDN with the MLPS connection. Compared to other products, the price is a little bit high. 

I rate pricing an eight out of ten.

We did not evaluate other options. 

The solution has good availability and provides good information. A few features can be improved to a degree.

I rate the solution an eight out of ten. 

Our company is partners with Fortinet and we provide log monitoring services to our customers. More than one hundred people in our company use the solution. 

The solution provides good standardized reports and is easy to troubleshoot. 

The solution should include the ability to customize reports so that customers receive greater value and high level reporting. 

I would also like to be able to view a real-time log. 

I have been using the solution for seven years. 

The solution is stable. I rate it an eight out of ten. 

The solution is scalable. I rate it a seven out of ten. 

Technical support is very good. 

Positive

The initial setup is very straightforward and is accomplished via quick installation.  

We install the solution for customers. One of our technicians handles base deployment which can take two or three years depending on our customer's needs. 

The hardware has a one-time cost and maintenance is paid by annual subscription. 

Customers contracts are on a monthly basis and include log monitoring services, maintenance, and technical support provided by two technicians. 

The solution is not that expensive and I rate it a five out of ten. 

The solution pairs very well with other Fortinet products.

I rate the solution an eight out of ten. 

The product is for reporting about the use or detecting some issues or activities.

The ability to track the activities of our users and some topics about security risks are the most valuable aspects.

It's simple to use.

It is not hard to set up.

The configuration is easy.

It offers good integration capabilities.

Support is helpful.

There is a lot of great documentation to be found online. 

We are concerned about the compliance of our policy and institutional philosophy. We are a university and provide the tool to the users and to the infrastructure for the right use.

I've been using the solution for six years. 

We have around 2,000 users.

Support is good. We also use the documentation online and find help via some tutorials on the internet.

The initial setup is very simple. 

The deployment took about six months. 

We deployed it via our team, however, we used an external consultant from the reseller.

We pay a standard licensing fee on a yearly basis. 

The pricing is complex since we need to add some other products or tools to assure our infrastructure, then the amount of every one of the items of software otherwise the solution is expensive in the end.

We are a customer and end-user.

I'd rate the solution nine out of ten.

We use this solution to centralize the monitoring on Forti Fabrics. We monitor all firewalls and use this solution for incident management.

This solution offers one view of incident management which has been the most valuable feature. 

When using this solution, you need a high-level expert to make it work as it should. We hired IT support who had knowledge of the network and firewall. For the initial step, you need a Forti expert. 

We have used this solution for one year. 

This is a stable solution. 

This is a scalable solution. 

We have a support expert who contacts Forti when we have a problem. If we come across a bug, we need to involve Forti and open a ticket for support.

We hired a consultant to complete the setup as it is not straightforward and requires an expert. The setup took a few days. Four IT staff look after maintenance of this solution.

The enterprise version of this solution is costly. We have considered FortiAuthenticator for network control, but the pricing was focused on the larger companies and didn't suit our needs as a smaller business.

The pricing for this solution is on an annual basis. Databases, a virus scanner, and intrusion detection is included.

We have previously looked into Sophos UTM and Palo Alto.

I would rate this solution an eight out of ten. 

We use FortiAnalyzer as our indicator of compromise solution, and I'm also running some SOC into it. 

FortiAnalyzer's reporting features like graphs, threat intelligence, and vulnerabilities analysis are helpful. Fortinet knows how to do reporting. You can customize your reports to show exactly what you want to analyze. It's user-friendly and doesn't require a lot of effort. 

The hub is another feature that's good to use. FortiAnalyzer can be connected to other Fortinet devices via the hub. It isn't restricted, and it's all controlled by FortiManager. It can also integrate all the opcodes to one box. 

If Fortinet could introduce some firewalling or maybe FortiAnalyzer on the cloud, that would be interesting because I've never seen it on a cloud. 

We've been using FortiAnalyzer since 2015. 

FortiAnalyzer is stable. It will do the work as long as your FortiGate is stable. It depends more on the FortiGate, so if your FortiGate is cool, there's no problem. If there is a problem, you can bypass it most of the time. I can't say that there are no issues. I don't want to lie.

FortiAnalyzer is scalable. It can even take over traffic from other analyzers. You can connect as many analyzers as you want to it. 

I used a McAfee SIEM solution before at my previous employer, but it's not as powerful as FortiAnalyzer. I used a Rapid7 solution and Cisco FirePOWER, which are both weak.

We don't need to do much to install FortiAnalyzer because it always depends on FortiGate. You need to deploy FortiGate before you install it. That's why I say that I see it as a dummy box. I don't see anything interesting in it. It's only a support structure.

I rate FortiAnalyzer seven out of 10. It's a very user-friendly box. You don't even need to know the CLI. It has a CLI, but you don't need to know it because the GUI is excellent. It's always doing its duty to keep up with the reporting. 

Our clients use Fortinet FortiAnalyzer to analyze and locate the traffic in their network. Since it's a big customer, they have both Fortinet FortiAnalyzer and Fortinet FortiManager.

With Fortinet FortiAnalyzer, it is easy to get reports and read specific logs. It provides fast log analysis for getting information. The solution helps locate if a destination is blocked or a machine communicates with the right port or server. Basic debugging can be done quickly using Fortinet FortiAnalyzer.

Fortinet has a new bug every month, which needs to be improved.

I have been using Fortinet FortiAnalyzer for four years.

Fortinet FortiAnalyzer is a really stable solution and does not have any bugs.

Fortinet FortiAnalyzer is a scalable solution.

I have previously used the Kibana tool.

The solution's initial setup is easy because it's a virtual machine. You have to upgrade it once every two to three years, which is a slow process. However, there aren't many features that need to be updated because the product is good.

The solution has been in our organization before I joined. Based on that, I have to say it's a good investment.

Fortinet FortiAnalyzer is quite an expensive tool.

On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten.

Users should never upgrade to the newest firmware. In the last decade, we have learned to always wait and see. Fortinet has had some bad releases. You must have good quality assurance that the product is bug-free. It is easy to maintain the solution.

Overall, I rate the solution an eight out of ten.

We use the solution for enterprise firewalls, URL filtering, and SD-WAN.

The solution could embed monitoring.

I have been using Fortinet FortiAnalyzer for a year. We are using V6.2 of the solution.

The solution’s scalability is good. 500 users are using this solution. The solution is suitable for small and medium businesses.

I rate the solution’s scalability a seven out of ten.

When the case is unresolved, the following person takes time to get involved in the tickets. The information may be complex.

Neutral

The initial setup is easy. I rate the initial setup an eight out of ten, where one is difficult and ten is easy.

The solution's pricing is good.

I recommend it because it's a perfect solution.

Overall, I rate the solution a nine out of ten.

Fortinet FortiAnalyzer is utilized to gather logs from all Fortinet products and generate reports.

The most valuable feature is the capability to gather logs and generate reports. Without this solution, the firewalls exhibit limited proficiency in displaying logs.

The integration with other vendors for log collection could be enhanced.

The licensing cost has room for improvement.

I have been using Fortinet FortiAnalyzer for over three years.

I rate FortiAnalyzer's stability a nine out of ten. We have had instances of data loss or source loss.

For our needs, FortiAnalyzer is scalable because we are not dealing with thousands of firewalls.

The technical support is good.

The initial setup is straightforward. The deployment took a couple of days.

For the deployment, we needed to create the server for deploying the FortiAnalyzer image and create the policy rules. We also had to complete the basic configuration of FortiAnalyzer. Following that, we configured all the resources and logs within FortiAnalyzer to collect and correlate the logs, which are then used to generate reports.

We used a consultant for the implementation.

We pay for an annual license, but we have the ability to determine the payment schedule with our distributor.

The cost of the license is high.

I would give Fortinet FortiAnalyzer a rating of six out of ten. I am not satisfied with the solution as it falls short of a proper SIEM. Therefore, we would prefer to allocate more funds towards a SIEM in order to effectively collect logs.