Fortinet FortiAnalyzer Reviews

I use Fortinet FortiAnalyzer for event monitoring and traffic monitoring to generate different types of reports for internal, external, internet traffic, or local LAN traffic.

I am looking for FortiNAC. I requested it from the local Fortinet manager and Forti sales manager. I contacted and emailed them to provide FortiNAC solution for my organization.

Log management in Fortinet FortiAnalyzer is excellent, as it stores approximately two years of logs.

Using Fortinet FortiAnalyzer, I analyze vulnerability risks and threats and sort out problems accordingly. I then create policies and mitigate the risk based on my findings.

I have created many customizable reports in Fortinet FortiAnalyzer. I have customized the reports to schedule them and generate reports every day that are sent to my email.

I am not using any SIEMs, but Fortinet FortiAnalyzer is the best and looks like a SIEM. I did not integrate Fortinet FortiAnalyzer with any security information and event management solutions.

With Fortinet FortiAnalyzer, I have streamlined the process to mitigate risks and save time to get event information on any type of threats, risks, and unwanted traffic. Risk and time are saved, and it is valuable for any organization.

Technical support should make some improvements.

We are using Fortinet FortiAnalyzer to detect and identify data leaks.

We look for firewall logs, router logs, and switch logs in Fortinet FortiAnalyzer for predictive analytics.

My organization uses Fortinet FortiAnalyzer's compliance report templates.

I think Fortinet FortiAnalyzer is the best security solution in the world. It's similar to Splunk, and they are doing a good job.

I am creating dashboards for my analysis, and it's not too complicated to make them.

The importance of Fortinet FortiAnalyzer's integration with Security Information and Event Management rates at seven or eight.

The UI needs to be improved in future updates.

I have been using Fortinet FortiAnalyzer for two years.

The deployment was very easy and took one hour to install the product.

The technical support deserves a rating of ten.

Positive

I use Splunk for log management.

The installation of the product took one hour.

I was the only person who installed the product and took part in the installation.

I didn't evaluate any alternatives for Fortinet FortiAnalyzer.

We are using a private cloud deployment.

We are using Cisco and Forti Endpoints.

I rate Fortinet FortiAnalyzer an eight out of ten.

We use Fortinet FortiAnalyzer primarily for log retention storage. Fortinet FortiAnalyzer allows us to store logs for up to one year, and we base the license on the amount of data received daily, whether 5 GB, 2 GB, or 3 GB. We perform this setup in a VMware environment. This involves downloading the OVA file from the Fortinet Support Portal, installing it, activating the license, and allocating the necessary storage space. This process ensures we can save logs for up to a year as per Fortinet's standard retention period.

The most valuable feature of Fortinet FortiAnalyzer is its ability to simplify and display logs clearly, providing details like which IPs are accessing the system, the destination, and the policies applied. This visualization and detail make managing logs more straightforward. In conjunction with our VMware setup, Fortinet FortiAnalyzer enhances organizational efficiency, meeting the standard log retention period for up to a year.

Fortinet FortiAnalyzer could improve by offering more detailed packet inspection information, especially where packets get dropped. Currently, it informs us that a packet has been dropped, but it does not give the reasons for the block. Enhanced deep inspection features would make troubleshooting easier.

I have been using Fortinet FortiAnalyzer for more than three years.

Fortinet FortiAnalyzer has daily updates with fixes, which means we need to schedule downtime for upgrades. This is not ideal in a production environment. On the other hand, it remains stable during implementation for one or two years. However, security breaches and vulnerabilities do exist, but Fortinet provides quick patches. I rate the stability an eight out of ten.

We plan Fortinet FortiAnalyzer scalability based on customer suggestions for up to five years. It typically handles three to five years of expansion effectively. There is uncertainty beyond five years due to potential changes in requirements.

Technical support is good, and I rate it ten out of ten. Although Fortinet supports frequent updates, we need to allocate downtime for these activities, which is not ideal.

Positive

The initial setup of Fortinet FortiAnalyzer is user-friendly. It provides public knowledge articles which are helpful for clarity and troubleshooting. The support available is good.

We are a solution provider, and I have experience working on multiple Fortinet products.

When comparing the price of Fortinet FortiAnalyzer to other products, I would give it a rating of seven out of ten. Costs reflect the feature set offered, similar to how costs vary between an iPhone and an Android phone. Customer requirements dictate purchasing decisions.

I have used Check Point and FortiManager. I do not have experience with Cisco's security products or FortiMail.

While Fortinet FortiAnalyzer has some deep inspection limitations, I would recommend it to enterprise customers. I rate the overall solution an eight out of ten.

I saw some projects where clients use Fortinet now. They have Fortinet in their LAN, so they need to continue to have this solution. It is very difficult to change. We know that IT managers do not want to change anything. They just make it better with what they have now, not to change. For Fortinet, the solution that I used most recently is Fortinet FortiAnalyzer and FortiManager.

For us in Latin America, the best features of Fortinet FortiAnalyzer are the solutions that combine SD-WAN and security in the same box. I think that is what differentiates Fortinet from the others. Almost every manufacturer has a similar structure for monitoring and collecting logs. To have all the information about clients, networks, or security information, you typically need two platforms.

We use the information from Fortinet FortiAnalyzer to show our clients and provide consultancy for them. We advise them, 'You need to make an action plan for this problem,' or help them understand the vulnerabilities of the security and create an action plan for better security practices.

Fortinet FortiAnalyzer is good for that, but we need to have a team that knows about the information that is collected. You need to know the platform.

When I had contact with FortiManager and Fortinet FortiAnalyzer, it was not so easy, but with some reading or training on the platform, it becomes easy to use.

I would rate Fortinet's customer service a nine, on a scale of 1 to 10.

Positive

The initial setup for Fortinet FortiAnalyzer is easy. It is not so difficult. You need to have some training, but it is okay.

In the past, I did research to know different SIEM solutions because it is very common; each company has its own SIEM. Cisco has its own SIEM, so they work very well with their Cisco ecosystem. But we have clients with heterogeneous solutions, and we try to look for a SIEM solution that is universal. You can use Cisco, Huawei, or Aruba, and the SIEM solution can integrate and work with any kind of solution. I also saw something about IBM.

Fortinet FortiAnalyzer integrates with SIEM, but I do not know about the integration with other kinds of solutions.

I am a user of HPE and not a partner yet. We are a partner with Huawei.

I was in presales, so I know Zabbix and Grafana. We know how it works, but we do not have the responsibility to set up the solution. I communicate to our clients that we have the solutions of Zabbix and Grafana, and it is possible for them to see the information of the LAN, the WLAN, and the link.

Here where I am working now, we use the solution of XDR and NDR from Trend Micro. Our security business unit has a lot of experience selling Trend Micro XDR or NDR solutions in Brazil. The Trend Micro solution I am mentioning is Trend Vision One. They sell solutions to a big energy company in Brazil.

We show the reports to clients to let them know about their problems and compliance with their security policies.

Fortinet is very common for security, and everybody knows them. We have different kinds of companies. Those that lead for technology do not worry a lot about using it, as they have money for investment in technology. The other ones that do not have a lot of money almost do not know about the technology. So we have to show them that something this exists and try to make the projects according to their budget. That is our challenge here.

I rate Fortinet FortiAnalyzer an eight out of ten.

I am using Fortinet and Red Hat myself as a consultant. I am dealing with Fortinet products and can provide information about them. I am working with Fortinet products, including firewalls and other Fortinet products. I am working with Fortinet products such as Fortinet FortiAnalyzer and FortiManager. I use Fortinet FortiAnalyzer.

I find it easy to deploy Fortinet products, including the firewall, Fortinet FortiAnalyzer, and many other Fortinet products.

The interface of Fortinet FortiAnalyzer is intuitive enough. Fortinet provides training through many training documents and videos.

It is very important to integrate Fortinet products for my customers because it provides many network information for them.

I don't know what the main room for improvement is for Fortinet FortiAnalyzer, but perhaps I don't have much experience, so I cannot answer this question comprehensively.

I have been working with Fortinet FortiAnalyzer for two years.

Fortinet FortiAnalyzer is very stable.

I do not recommend Fortinet FortiAnalyzer for bigger companies because it is not scalable enough.

I always ask Fortinet support about their technical support, and I think they are good.

I rate their technical support as seven out of ten. Sometimes they can answer the question immediately, but they could be more quick.

Positive

Palo Alto also provides log management and has this product, but I have never used Palo Alto.

I find it easy to deploy Fortinet products, including the firewall, Fortinet FortiAnalyzer, and many other Fortinet products.

I usually help my customers with the implementation of Fortinet products, and they always use Fortinet products.

I think Fortinet FortiAnalyzer has fifty percent market share in my region.

The pricing of Fortinet FortiAnalyzer is okay. For smaller companies, the pricing is acceptable.

Palo Alto also provides log management and has this product, but I have never used Palo Alto.

I recommend Fortinet FortiAnalyzer for big companies. I rate this review an eight overall.

I use Fortinet FortiAnalyzer to consolidate all our logs and traffic details in one box with a single GUI.

The features that are most effective for me in Fortinet FortiAnalyzer are easy to manage. Fortinet FortiManager is also a great product to manage multi-site management options and other tools.

The capability of logging in Fortinet FortiAnalyzer is great because there is no need to go to each individual box to check the traffic details. We can collect everything in Analyzer and check from a single console.

Fortinet FortiAnalyzer could be improved by enabling features such as predictive analysis. We should implement AI features, correlation of different logs, and have predictive analysis, including alerts for policy violations.

AI features would enhance Fortinet FortiAnalyzer significantly.

I have worked with Fortinet FortiAnalyzer for almost three years.

The deployment of Fortinet FortiAnalyzer is very easy because we have it virtual.

The stability of Fortinet FortiAnalyzer is consistently stable.

The scalability of Fortinet FortiAnalyzer is quite normal and easy to scale, with no restrictions or limitations.

Scaling Fortinet FortiAnalyzer is expensive.

The technical support from Fortinet is adequate, but it varies case by case. Some issues are resolved easily with good support, while sometimes it is less effective. I would rate it as average seven.

I am not satisfied with the skills of the support team. The response time is faster, but the level one team has some shortages in skills. When issues are escalated, we get better feedback.

Neutral

Fortinet FortiAnalyzer saves time, but it's debatable on any savings from its use.

I cannot approximate any savings in percentage terms or comment on Total Cost of Ownership (TCO) because we don't have any savings. We invest in other products in addition to this firewalling.

I manage licensing by purchasing based on three years of support and bundled licenses.

The costs are a few million Qatar riyals.

I am a customer of Palo Alto, and my email is abduljabbar@km.qa.

My job title is engineer.

We have Fortinet FortiGate, Fortinet FortiAnalyzer, Fortinet FortiManager, and Fortinet FortiSandbox.

I am a user and customer only with Fortinet.

Only one person is generally required for the maintenance of Fortinet FortiAnalyzer.

I would rate Fortinet FortiAnalyzer eight out of ten overall.

It is possible for us to discuss Fortinet FortiManager at a later date.

I am a customer as well as a partner of Fortinet. I work with telecom service providers in India, and I partner with Fortinet to resell their solutions to our end customers. I also use Fortinet appliances in our own network for securing our network and our data.

Fortinet FortiAnalyzer provides good correlation capability from the logs generated by Fortinet appliances. It serves as a single log management and analysis platform for various Fortinet appliances, including FortiGate, FortiSwitches, and FortiWi-Fi access points. This makes it a unified platform for numerous Fortinet appliances. It helps in security management by aggregating logs across all devices and offers a single platform for monitoring.

Currently, Fortinet FortiAnalyzer provides a very basic level of correlation facilities. I would like to see improvements in the integration of better correlation capabilities. This would help in analyzing various security incidents and events more effectively by delivering a handful of relevant logs instead of thousands, allowing me to pinpoint issues with minimal effort and time.

I have approximately 15 years of experience with Fortinet FortiAnalyzer.

I think Fortinet FortiAnalyzer is quite stable. I would rate its stability as a nine out of ten.

I would rate the scalability of Fortinet FortiAnalyzer as a seven out of ten.

The technical support from Fortinet is fantastic and I would rate it as nine out of ten.

Positive

The initial setup of Fortinet FortiAnalyzer is straightforward. It comes in two variants: a physical appliance and a virtual appliance. It can be installed on any server hardware, and the documentation from Fortinet is excellent, providing necessary help when required.

The ROI is pretty good. Fortinet is highly efficient for moderate deployments and provides a secure platform for medium-sized networks and data centers. The pricing is very competitive, especially in the Indian market, providing excellent ROI.

In the Indian market, Fortinet's pricing is very competitive, allowing us to win most of our deals. It is supportive in terms of pricing, offering a good balance for mid-sized enterprises.

Based on my experience, I would recommend Fortinet FortiAnalyzer wherever there are more than ten FortiGate devices. It is effective for small and medium enterprise deployments but may not be suitable for large enterprises or high-grade data centers which might require solutions like Palo Alto or Check Point. I rate the overall solution as eight out of ten.

I use FortiAnalyzer to report on these other devices because they have two firewalls, so it's an accessible place to find out what is happening across your Fortinet setup.

I mainly use it for reporting. It also integrates other security solutions around. It can report onto anything that has a syslog on the network. It doesn't have to be a Fortinet product. It integrates within FortiGate and you can find the reports there. It's a very flexible and rich tool, providing custom reports along with default reports.

The only issue is the cost of the licenses. When licensing, each device is licensed separately, such as the firewall, which can become expensive. It sometimes becomes difficult to explain to management why the cost is so high. Other than that, I haven't faced any challenges.

All these products were bought in at the same time, about four years.

It is a very stable solution.

Understanding how it works so far, I think it shouldn't be difficult to scale.

Customer support would be rated an eight out of ten.

Positive

I haven't evaluated log management tools like Splunk on this platform, I've just explored just the open-source tools.

Setting up FortiAnalyzer was not complicated. It took a day or a few hours.

Being not a commercial entity, my focus is on keeping the environment safe and informed. I can't really specify a value or ROI.

I can't calculate costs per user. We buy it as one solution as part of a package with the firewall and the analyzer, which makes it difficult to calculate individually.

I have not evaluated other branded log management tools. Perhaps only open-source tools, not brands like Splunk.

There's a lot of material available for FortiAnalyzer to help you understand how it works, which is well documented and makes life easier if you don't know anything. This makes it easy to configure and use. I would recommend it to anyone.

Positive

I deployed FortiAnalyzer in three projects. I configured it to manage approximately 50 Fortinet devices.

My job was to add new FortiGates and to analyze data on FortiAnalyzer. The system provides valuable insights through information, graphics, and reports. FortiAnalyzer allows easy configuration of routing status protocols, IP interfaces, and DNS settings. Its operation system makes it easier than using Cisco's iOS.

Sometimes, there is a problem with CPU consumption, where one process consumes 100%, and I need to restart FortiAnalyzer to fix this. I am not familiar with the processes of scalability.

I have used Fortinet Solutions for about three to five years.

The version I used was 7.4.2. We faced some CPU consumption issues, which caused the machine to slow down and required a restart of FortiAnalyzer. However, this issue was addressed in later versions.

Sometimes, I need to consult FortinetDocs to understand integration. It is not very easy.

Positive

The initial setup is straightforward and more straightforward than Cisco. It is easy when equipped with the necessary information like device name, IP address, and SNMP configurations.

The impact of the tool is low when the functionalities are inaccessible due to resource consumption. When operations run smoothly, FortiAnalyzer delivers efficiency yet does not significantly impact costs.

I am a technical engineer, so I am not privy to pricing details.

I recommend FortiAnalyzer to companies that have two or more FortiGates for easier report generation and to execute actions through Playbooks.

I'd rate the solution nine out of ten.