Fortinet FortiAnalyzer Reviews

The normal use case for FortiAnalyzer is log review, log analysis, etc.

FortiAnalyzer makes it much easier for us to find an apparently compromised host on the network.

FortiAnalyzer has a robust ability to find a compromised host on your network, and when you identify a compromised host, you can address it.

Though FortiAnalyzer has improved over the last few versions, the user interface still has room for improvement. It's a bit dated-looking. I guess that's the nicest way to describe it. In FortiAnalyzer, I would like the ability to turn off some of the services. So, for example, FortiAnalyzer can take data from FortiCamera products and turn off the FortiCamera stuff to lighten the load on the box or turn off the FortiSock product.

I've been using FortiAnalyzer for about seven years.

FortiAnalyzer is really stable. It runs very well on its own and doesn't really need much TLC. It's a good product.

It's pretty scalable. The units that we have are the right size for the amount of stuff that we're running, but they do have products that scale up to handle significantly more Fortigate firewalls in log stuff than we do. I would say about 20 people use FortiAnalyzer. There's me, the security engineer, and the network engineering team, which uses it to look at stuff on the firewalls or check the firewall logs. And our information security group uses it to look at stuff that's going on with the firewalls as well as compromised hosts. It is being used pretty well as we get further down the path of deploying our FortiGate-managed endpoint product. There'll be more users and probably more use cases for it in the future.

I haven't really used a different solution previously. We've always used FortiAnalyzer in concert with Splunk.

FortiAnalyzer is a pretty straightforward product to deploy. It took half a day to deploy a pair of FortiAnalyzers and set them up in high availability mode. I deployed it by myself. These are hardware appliances, so there were a couple of devices that needed to be racked, powered, and configured.

I believe that these devices were procured with a five-year maintenance and support license up front. I work at a university, so the vendor provides a considerable higher ed discount.

It's all part of our Fortinet ecosystem, so we didn't really consider alternatives. I have a significant investment in FortiGate firewalls, so it just made sense to add FortiAnalyzer.

I rate FortiAnalyzer eight out of 10. It does an outstanding job of what it does. But the vendor doesn't necessarily live up to the hype, which is why it only got an eight out of 10. There's a lot of hype about the Fortinet security fabric. But for the large customers that buy their large firewalls and deploy them in infrastructure components, the Fortinet fabric does not work. If you are considering FortiAnalyzer, I suggest having a complete understanding of how your firewall infrastructure works in terms of what data you're going to and from it for analysis and what you're looking for in that analysis.

Our clients use Fortinet FortiAnalyzer to analyze and locate the traffic in their network. Since it's a big customer, they have both Fortinet FortiAnalyzer and Fortinet FortiManager.

With Fortinet FortiAnalyzer, it is easy to get reports and read specific logs. It provides fast log analysis for getting information. The solution helps locate if a destination is blocked or a machine communicates with the right port or server. Basic debugging can be done quickly using Fortinet FortiAnalyzer.

Fortinet has a new bug every month, which needs to be improved.

I have been using Fortinet FortiAnalyzer for four years.

Fortinet FortiAnalyzer is a really stable solution and does not have any bugs.

Fortinet FortiAnalyzer is a scalable solution.

I have previously used the Kibana tool.

The solution's initial setup is easy because it's a virtual machine. You have to upgrade it once every two to three years, which is a slow process. However, there aren't many features that need to be updated because the product is good.

The solution has been in our organization before I joined. Based on that, I have to say it's a good investment.

Fortinet FortiAnalyzer is quite an expensive tool.

On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten.

Users should never upgrade to the newest firmware. In the last decade, we have learned to always wait and see. Fortinet has had some bad releases. You must have good quality assurance that the product is bug-free. It is easy to maintain the solution.

Overall, I rate the solution an eight out of ten.

As part of a company, we manage customers of Fortinet FortiAnalyzer. The solution is used to analyze and locate traffic in a particular network. 

Fortinet FortiAnalyzer has helped my organization improve operational efficiency. The company has been using it for ten years. 

Report generation is very easy when using Fortinet FortiAnalyzer. Checking and reading the logs becomes seamless with the solution. Fortinet FortiAnalyzer also allows fast logging on a license when requesting information. For example, when you are trying to locate a logged destination or using the tool to find an error or fault, the basic networking is very fast. 

The upgrade process for Fortinet FortiAnalyzer is slow. 

I have been using Fortinet FortiAnalyzer for four years. 

Fortinet FortiAnalyzer is a stable product. 

The solution is highly scalable. 

It's easy to deploy Fortinet FortiAnalyzer. The solution needs to be upgraded every two or three years. The product is very easy to maintain. 

Due to the multiple features and the large environment compatibility, the solution is quite expensive. I would rate the pricing an eight out of ten. 

At our company, Kibana is sometimes used to pull logs and develop graphical representations from it. 

I would rate the solution an eight out of ten. I would advise others never to jump into upgrading to the latest firmware; wait until the present environment products are being used. There have been bad releases in the past, so everyone needs to carefully analyze options. 

Fortinet FortiAnalyzer is utilized to gather logs from all Fortinet products and generate reports.

The most valuable feature is the capability to gather logs and generate reports. Without this solution, the firewalls exhibit limited proficiency in displaying logs.

The integration with other vendors for log collection could be enhanced.

The licensing cost has room for improvement.

I have been using Fortinet FortiAnalyzer for over three years.

I rate FortiAnalyzer's stability a nine out of ten. We have had instances of data loss or source loss.

For our needs, FortiAnalyzer is scalable because we are not dealing with thousands of firewalls.

The technical support is good.

The initial setup is straightforward. The deployment took a couple of days.

For the deployment, we needed to create the server for deploying the FortiAnalyzer image and create the policy rules. We also had to complete the basic configuration of FortiAnalyzer. Following that, we configured all the resources and logs within FortiAnalyzer to collect and correlate the logs, which are then used to generate reports.

We used a consultant for the implementation.

We pay for an annual license, but we have the ability to determine the payment schedule with our distributor.

The cost of the license is high.

I would give Fortinet FortiAnalyzer a rating of six out of ten. I am not satisfied with the solution as it falls short of a proper SIEM. Therefore, we would prefer to allocate more funds towards a SIEM in order to effectively collect logs.

Fortinet FortiAnalyzer is primarily utilized to generate quarterly reports showcasing blocked attacks and vulnerabilities. It employs features like WAV porting triggers and DNS triggers to effectively demonstrate to the client the security of their environment.

Fortinet FortiAnalyzer assists in showcasing the value of Fortinet and facilitates the upselling of additional Fortinet products to our customers.

The most valuable feature is the capability to create a customized dashboard. We can subsequently input our EMS, FortiClient, and FortiGate data into it and generate reports.

The integration between specific tenants and FortiAnalyzer can be simplified when utilizing a multi-tenant EMS for our FortiClient.

I have been using Fortinet FortiAnalyzer for three months.

Fortinet FortiAnalyzer is stable.

Fortinet FortiAnalyzer is scalable.

I utilized the technical support services once, and I received a prompt response.

The initial setup is straightforward. The deployment was an easy and smooth process. The deployment took one day and I did it myself.

I would rate Fortinet FortiAnalyzer a nine out of ten.

Fortinet FortiAnalyzer does not require maintenance after the initial report setup. We simply have to remove and add FortiGate as needed for each report.

Before utilizing Fortinet FortiAnalyzer, individuals should determine the type of reporting they require. Additionally, they ought to be acquainted with FortiGate before endeavoring to use FortiAnalyzer.

My clients mainly use Fortinet FortiAnalyzer for the log and automation.

This solution can be deployed on-premise and on the cloud.

The most valuable features of Fortinet FortiAnalyzer are the GUI and there is automation that can be done with playbooks and mini-books.

Fortinet FortiAnalyzer can improve by introducing integration with other Fortinet solutions with automation with one interface would be helpful.

I have been using Fortinet FortiAnalyzer for approximately four years.

The stability of Fortinet FortiAnalyzer is good.

I rate the stability of Fortinet FortiAnalyzer a ten out of ten.

The solution is scalable.

This solution is suitable for all sized companies.

I rate the scalability of Fortinet FortiAnalyzer a nine out of ten.

My clients had a mixed experience with the support from Fortinet FortiAnalyzer. Some had good experiences and others had poor experiences.

I rate the support of Fortinet FortiAnalyzer a ten out of ten.

Neutral

My customers have tried Palo Alto Panorama and we only had positive feedback from Fortinet FortiAnalyzer.

The initial setup of Fortinet FortiAnalyzer is simple.

The price of Fortinet FortiAnalyzer is expensive.

I rate the price of Fortinet FortiAnalyzer a ten out of ten.

I rate Fortinet FortiAnalyzer a ten out of ten.

The solution is used for grabbing logs. It is designed for log aggregation of all Fortigate firewalls and to give visibility of traffic and usage. 

The log events are quite useful for us. The events aggregation from various Fortigate products makes it very helpful.

Technical support is helpful.

The stability is excellent.

This is a highly scalable product.

The setup is straightforward. 

We'd like to see more embedded features.

We'd like to see more SIEM capabilities. I'd love to see this merged with FortiSIEM for example. 

I've been using the solution for around 20 years. 

The stability is great. I'd rate it ten out of ten for reliability. We rarely have any issues. 

You pay compared to the volume of logs you collect. It is very scalable. It's highly expandable. On a scale from one to ten, I'd rate the scalability ten out of ten. 

We have less than five network engineers using the product. 

I've dealt with support in the past and found them helpful and responsive. 

Positive

We use a variety of Fortigate products.

We did not use a different vendor previously. There is no other real option. We did try to use the free version of Splunk. We moved to Fortianalyzer as it works better in Fortinet products. Splunk is harder to fit into other Fortinet products. 

The installation process only takes a couple of hours. It is easy to install. 

The maintenance is very minimal. One person can handle maintenance tasks. 

We do use specialized consultants occasionally. However, I have been able to do it by myself as well in the past.

I cannot speak of the exact price. Someone else manages the contract. However, you do get good value for your money. It's not overly expensive. 

As it is on-premises, you do need some on-prem resources. You need a traditional hypervisor and need the ability to host the solution on your premises. 

We're customers and end-users. 

We are using the latest version of the solution typically. 

I'd recommend the solution to other users. 

I would rate the solution ten out of ten.

We use the solution for just one company for the analysis of the FortiGate switch.

The solution is scalable. 

The performance is good.

It's easy to set up the product. 

The solution costs too much. 

I've used the solution for about three years. 

The solution has been stable and reliable. There are no bugs or glitches, and it doesn't crash or freeze. 

It's a scalable product and expands well.

Only admins use the solution. There are three to four people with direct access to the product. 

I do not have access to technical support. In Iran, we have sanctions, and so we cannot get support. 

The initial setup is pretty straightforward and simple. It's not overly complex or difficult to manage. We can deploy it in about two hours. You only need one person to handle the deployment and maintenance tasks as it is very simple. 

We have witnessed a bit of an ROI and find the product to be worth the cost. 

We do need to pay for a license, and the payment is made yearly. There are no extra costs associated with the product beyond the main licensing fee. 

It is an expensive solution. 

We did not evaluate other solutions before choosing this product.

Overall, I'd rate the product eight out of ten in terms of its functionality. I have been pleased with its capabilities so far. I'd recommend the solution to others. 

Most of our clients are banking and financial institutions, so their data doesn't go to the cloud as such. Their data is on-premises only. Some of our clients can go to the cloud to save the price and do management, administration, and so on, but then most of our clients, use on-premises FortiAnalyzer.

Fortianalyzer helped us to manage fortigate devices and update them from central location.

I have found incident management and also identifying new threats, analyzing the network traffic, and finding out the issues with the network traffic such as any security issues to be valuable. I also like the compliance reports.

It is a very stable and scalable solution.

One thing we struggled with FortiAnalyzer was integration with SIEM. We also had issues with the new threats and APTs. There were false positives, so we needed to have some ratings related to false positives.

It is easy to set up is you have FortiGate firewalls. We tried setting up with other devices, and I don't think it supports other firewalls or other devices. If it did, then it would have been great because we would have been able to use FortiAnalyzer for hybrid environments with different OEM firewalls.

If we can have an intelligent analysis system which will detect false positives and detect the exact problem, it would be great.  If FortiAnalyzer can integrate with FortiSIEM and give us threat reports, that will also help because then I won't need to have another tool or another dashboard which I need to look out for.

I've been using it for four years.

It is a very stable product, and we have had no issues at all.

It is easy to scale; there are no challenges.

The technical support is good. Most of the time, when we escalate the tickets the second line of support, FortiGate support, has been very good. The first line might take up time, but the second line of support resolves the case quite quickly.

Yes we used checkpoint for our organisation , but it was a complex system to manage, we expect a firewall to be a simple device to avoid complexity.

The initial setup is quite simple with FortiGate devices. So, if you have FortiGate firewalls, it is quite easy to set up. Once Fortinet FortiAnalyzer is configured, then the only thing we need to do is to monitor it.

When you compare with other firewall vendors, FortiAnalyzer is quite competitive in pricing. They are very aggressive as well.

Yes we did evaluate paloa alto , but it went into backburner due cost factor.

If you have critical objects to protect or critical data to protect, then you should go for FortiAnalyzer.

On a scale from one to ten, I would rate Fortinet FortiAnalyzer at eight.

We are using Fortinet FortiAnalyzer for the managing surface for our customers. We are a service provider and we are focusing on providing a service to our customers.

The most valuable feature of Fortinet FortiAnalyzer is its performance.

Fortinet FortiAnalyzer could improve the user interface, and the experience of users receiving the reports and tracking could be better.

I have been using Fortinet FortiAnalyzer for approximately three years.

Fortinet FortiAnalyzer is stable.

The support from Fortinet FortiAnalyzer is good.

The initial setup of Fortinet FortiAnalyzer is fine. There is a lot of browsing and a lot of hierarchy that you need to have a particularly good understanding of in order to track the right things that you want to select.

There is a license needed to use this solution.

My advice to others is they have to assess well what kind of specific function or what kind of solution they are looking for.

I recommend this solution to others, but it depends on their usage.

I rate Fortinet FortiAnalyzer a seven out of ten.