Fortinet FortiEDR Reviews

At my last job, we used FortiEDR to secure endpoints for 8,000 employees across MacBooks and Linux machines, ensuring the protection of backups and VPN connections.

In 2020, we faced a significant challenge with remote work in Brazil, where BitLocker was utilized. FortiEDR proved invaluable as it allowed us to create a secure process for remote access.

I oversee Fortinet solutions, focusing on endpoint security and processing.

We deployed the FortiEDR solution for our remote workforce as well.

FortiEDR excels in first-line defense for endpoints against malware, incorporating solutions for antivirus and data loss prevention, especially for confidential documents on the user's device. 

The next-generation features and the utility of threat intelligence are what I value the most.

FortiEDR could enhance cloud environment creation. My experience shows that managing FortiEDR through cloud platforms, unlike SaaS solutions, could be streamlined, especially when integrated with FortiGate firewalls.

Another area of improvement is the support. The response time could be faster. 

I've worked with it for three years.

Stability is fine; I'd rate it a seven out of ten. It works well for me. 

While Fortinet consistently introduces new solutions and functions, there's always room for improvement to reach a higher standard.

While scalability experiences some glitches, it's generally manageable. 

However, due to these issues, I would not rate it as perfectly scalable.

The response time could be better. It takes about two business days for initial support, which is too slow in urgent situations. My environment was too crazy. 

The customer service and support were slower than expected.

I also use Cisco's solutions across various client sites, including small offices, large offices, big data centers, and commercial enterprises.

I have extensive experience with Cisco, spanning over eight years, across a variety of their offerings.

My focus has been Cisco Nexus series for network security.

It is very easy to set up. I would rate my experience with the initial setup a ten out of ten, with ten being very easy to set up. 

It is very user-friendly and easy to manage. The deployment process is quick and easy, especially in new environments.

It's very fast and straightforward.

It's moderately priced, neither cheap nor expensive.

I've previously worked with solutions from Palo Alto and Check Point before switching to FortiEDR.

Considering all factors, I would rate FortiEDR a seven out of ten.

We are an incident response team, and we use Fortinet FortiEDR for our cyber protection-related activities.

Fortinet FortiEDR has helped our organization by providing reports that identify network weaknesses.

With the proper training, the solution is easy to use.

In some cases, the solution has freed up around three and a half hours of our staff's time so that they can work on other projects.

The most valuable feature is the analysis, because of the beta structure.

FortiEDR can be improved by providing more detailed reporting.

I have been using Fortinet FortiEDR for seven years.

I give the stability of the solution a seven out of ten.

FortiEDR is a scalable solution because it has a well-structured and manageable report that is easy to understand.

We previously used a different solution, but I cannot recall its name.

I give Fortinet FortiEDR an eight out of ten.

I came here to test ICS points and get some tools for VFDs. API security is becoming increasingly important, as we use a lot of APIs in our government. We need to test APIs to ensure they are secure, especially as ransomware attacks are also on the rise.

This is my fourth time coming to this RSA. I bought a new product here this time. We can see everything in one room, which makes it easy for us to understand and also make new contacts.

We use it for endpoint security. We were searching if it could replace our old EDR solution. 

We use it for everything now. We no longer have another security solution except from the Microsoft 365 package.

Fortinet FortiEDR handles our main endpoint security.

We have FortiEDR installed on all our systems. This protects them from any threats.

This solution has improved our endpoint security posture. Before this, we didn't have any EDR solution, just standard endpoint security. 

Now, with FortiEDR's behavior analysis and comprehensive threat detection, we definitely have better protection.

We chose FortiEDR because we were looking for a robust EDR solution. One thing that appealed to us was the potential integration with our FortiGate firewalls. 

We hoped to mitigate threats and stop the traffic by having the firewall and EDR work together, but this wasn't straightforward out-of-the-box. It needs specific configuration which hasn't been done yet. That was a bit unexpected.

I would like to improve the integration process because a big selling point was the ease of integration within the Fortinet ecosystem. I would expect more built-in collaboration to allow for easier threat mitigation across Fortinet systems.

The strength of FortiEDR lies in its overall ability to protect us from new threats. We have encountered issues with it as well.

We've had a lot of false positives; things incorrectly flagged that require manual configuration to allow. Even worse, after we allow a legitimate program, it sometimes gets flagged again after an update. This has caused a lot of extra work for my team. I would like to see improved heuristics so the system better understands what's legitimate and doesn't keep blocking it after minor updates.

I have been using it for a year. We use the latest version in my company. 

I would rate the stability a six out of ten. 

We've had some erroneous warnings that didn't make sense. It gives me the impression of a product that still has some issues to resolve. 

Additionally, there are three main areas of concern:

1. The product itself seems to have some unresolved issues.
2. The integration with the rest of the Fortinet ecosystem could be better. It feels standalone rather than part of an integrated solution.
3. The high level of maintenance required due to the heuristics, or lack thereof. We keep seeing the same warnings and blockages even after updates. We need to constantly be on top of it, allowing traffic repeatedly.

So, all those factors impact the overall stability. There's room for improvement, especially considering it's a newer version.

I would rate the scalability an eight out of ten. 

It's installed on everyone's devices, so it's protecting users during working hours. Think of it as active for five days a week. We use it to its maximum capacity. 

We have around 500 end users.

We work through our supplier for support. We've shared our findings and issues, and there was some initial back-and-forth to find the root cause. There wasn't a clear, immediate answer or solution. They opened tickets with Fortinet, so it feels like the whole process is still evolving.

Neutral

We had traditional endpoint security, but this is our first EDR solution.

We didn't have any major problems during the installation while in monitoring mode. Issues arose, causing a lot of overhead, when we enabled the prevention mode and started seeing those false positives.

If we're looking strictly at the setup, there weren't any problems. I'd rate my experience with it an eight out of ten, with ten being easy and one being difficult to set up. 

The implementation itself was fine, but we experienced a lot of frustration due to the overhead of those false positives. We had to dedicate someone to constantly monitor and allow legitimate traffic. This created a negative experience with FortiEDR.

The deployment involved installing it on all our endpoint user devices. One person handled the deployment. 

We use it on the cloud. Since it's a managed service, the provider handles the systems where it's installed. We install the client on our users' devices.

We have one person dedicated to maintaining, but I'd like to have less overhead. There's too much time spent handling these findings. We'll be working with the service provider to try to reduce that.

We license it per employee, so as long as the employee count remains the same, the licensing won't change. We have it installed on every device.

We got a good deal on licensing, so it is in the competitive range.

I would rate the pricing a seven out of ten, with ten being expensive, and one being cheap. 

The pricing is fixed. However, we had larger configuration costs associated with the implementation.

We considered CrowdStrike and Microsoft Defender. Cost was a factor, and we were interested in the potential integration with FortiGate firewalls. However, that integration didn't work out as smoothly as expected.

Definitely have a small testing environment and not just monitor mode. Include a limited network so you can see how it reacts in full prevention mode to assess the potential impact of false positives. 

Also, if you are interested in integration with FortiGate firewalls, carefully investigate how that collaboration will be achieved.

Overall, I would rate the solution a six out of ten.

I utilize Fortinet FortiEDR for endpoint protection.

Our security posture improved since implementing Fortinet FortiEDR in terms of our overall setup, as we've experienced significant enhancements. We now have streamlined operations, better dashboards, and improved monitoring capabilities, consolidating multiple functions into a single solution. Previously, we were managing three separate vendors alongside support from our IT arm and outsourced assistance. With FortiEDR, everything is integrated under one dashboard, making our processes more efficient.

Fortinet FortiEDR effectively manages threat detection and response in our daily operations with great robustness. Previously, we had to rely on two separate Palo Alto devices for bandwidth management, both lacking real-time capabilities. Our search engine, detection engine, and database were also disjointed. However, with FortiEDR, we've achieved parity in functionality for both functions. Consequently, our bandwidth performance has seen a significant boost, providing users with a stable stream to work with.

The implementation of automation has had a significant impact on our team's workload. As we operate shared services centers across the APAC region, having this infrastructure in place has provided us with visibility across all three sites. This visibility, facilitated by automation, is particularly beneficial for higher management and decision-makers. It's a notable advancement for our operations.

FortiEDR has played a crucial role in mitigating the impact of breaches within our healthcare IT industry. Given the vast amount of data we handle and the real-time nature of data processing via APIs and centralized databases, FortiEDR has streamlined our operations. It allows us to process data at our own pace without encountering significant obstacles or requiring extensive workarounds. Essentially, it has provided us with a seamless transition between sandbox and production environments, making our workflow smoother and more efficient.

One of the most effective features of FortiEDR for our security requirements is its dashboard accessibility. Having all monitoring, response, tracking, and mitigation tools in one dashboard provides our analysts and SOC team with a comprehensive view at a glance. This has significantly improved our response time, which is crucial given our primary focus on healthcare IT and the stringent regulations such as GDPR. The data we handle is highly sensitive, making robust agent-based active monitoring and protection, along with the mitigation setup, invaluable features that we truly appreciate.

There's room for improvement in the quick response time and technical support for integration issues, especially when dealing with multiple vendors. Delays in resolving integration challenges can impact project timelines and collaboration efforts, as experienced during our partnership with a fintech company. While the EDR's mitigation and tracking capabilities are commendable, there are concerns regarding vulnerability detection and database updates. In comparison to Trend Micro, our EDR solution seems to lag in addressing new vulnerabilities, necessitating workaround strategies to minimize risks. Therefore, enhancing real-time vulnerability detection capabilities is essential to maintain competitiveness and ensure user security.

I have been using it for two years.

We transitioned all sites and infrastructure simultaneously without encountering any drawbacks. I would rate it nine out of ten.

Scalability-wise, we encountered no issues, except for integration challenges with other vendors. I would rate it eight out of ten.

I am extremely dissatisfied with the support and would like to see a faster response time. I would rate it four out of ten.

Neutral

The initial setup was relatively straightforward. I would rate it eight out of ten.

The deployment across the entire APAC region, encompassing two countries and seven field SSEs, with approximately eighty-nine devices per region, involved a team of around two hundred specialists from various domains such as risk assessment, compliance, network, database, and others. In total, about two hundred ten users were working on the deployment, and the process was robust and straightforward.

The pricing is significantly high. The implementation of this solution required us to allocate additional funds beyond our initial budget. However, due to thorough testing and careful solutions, we are confident in its capabilities and scalability for the next three years. While the cost may have been high, we view it as a worthwhile investment due to Fortinet's reliability and long-term performance.

We didn't need to explore alternative products on the market, as we already had a partial setup in place.

The integration of Fortinet products significantly bolstered our security environment. Among the seven layers of integration implemented, two key integrations stand out. Firstly, integrating across several SSCs globally facilitated the aggregation of information into a single BI tool, notably Microsoft BI, streamlining reporting processes. While this integration was relatively straightforward, integrating with external vendors posed challenges due to diverse systems and solutions across the industry chain. However, with the assistance of specialized experts, these challenges were effectively addressed. 

In terms of my recommendation, I would certainly endorse its use. Overall, I would rate it eight out of ten.

It's a kind of virus defense that is looking to the future and not to the past.

The main thing is that I feel safe. Because the processes that have been used to get a handle on the attackers are much better than other competitors.

The solution is very secure compared to other vendors.

The only minor concern is occasional interference with desired programs, although it's a necessary trade-off. Otherwise, I have no suggestions for improvement.

Another area of improvement is support. It could be faster. 

In future releases, maybe some extra features could be added to make it better, and maybe the events and history could be made a little bit clearer.

We've been using it for four to five years now.

It is a stable solution. 

It is a scalable solution. There are around 6o end users using this solution. It is easy to scale. 

The customer service and support are quite okay. It could be better. 

Positive

I have used ESET. ESET is an old-style defense that has less problems with new programs, but it's not as secure as Fortinet.

We currently use both ESET and Fortinet. We have some places, especially for developers, that can't use FortiEDR because it's too restrictive.

Installation is straightforward.

The initial installation on the server side takes a bit of time, but if we consider the overall process, it could take about a week.

We require two people for deployment. The maintenance is easy. 

The pricing model is okay. It's not cheap, but it's not expensive either. It's a customized price. It's a yearly license. There are no extra costs. 

I would definitely recommend the solution. 

Overall, I would rate the solution a nine out of ten because but the only concerns I have are that it can sometimes have problems with new programs, and the support could be a bit faster.

We use Fortinet firewalls for perimeter security at six to seven of our locations.

It provides extreme perimeter security, especially for VPN and application profiles, and seamless security monitoring through FortiAnalyzer.

As a firewall the solution is great, we never had any issues.

We saw time to value within three to four months of the firewall deployment.

Fortinet FortiEDR's firewalling, rule creation, monitoring, and inspection profiles are great.

Integration with Azure and SaaS provisioning tools could improve Fortinet FortiEDR.

I have been using Fortinet FortiEDR for almost five years.

The stability is generally good. We had one problem once, but otherwise, it has been good.

I don't think Fortinet FortiEDR is scalable with other vendors and new cloud provisionings, such as Azure or other cloud providers. I need to evaluate it further.

Technical support is good, but there are sometimes problems with reachability.

Neutral

I used Check Point and Cisco firewalls in my previous companies. At my current company, we use Fortinet, which I find to be a good firewall.

The initial deployment was complex, but that is expected in any firewall environment.

We use a migrator for the implementation and they were good.

We have seen a return on investment over the past four years. We can be assured of the perimeter security system's stability and ability to sustain itself in good conditions.

I'm not familiar with pricing, but it looks a bit costly compared to other vendors.

Fortinet FortiEDR was installed before I joined my organization but it was a good choice.

I give Fortinet FortiEDR an eight out of ten.

We are looking for max solutions from vendors. We may look at VPN solutions as well.

Attending RSA is an opportunity to network and compare products from vendors around the world which are interesting.

Attending RSA gives us the opportunity to compare products and understand the latest technology. This is something that is really valuable.

We are primarily using the solution for endpoint detection response. It's endpoint security.

We do POCs for people who wish to purchase the product.

The performance has been fine.

It's good for the detection and response to threats.

The setup is pretty simple.

Technical support has been decent in the past.

We have seen an ROI. It is worth the cost.

The stability could be better.

The scalability could be improved a bit.

We find the solution to be a bit expensive. 

I've been using the solution for approximately one year. I haven't used it for that long just yet.

The solution is mostly stable and the performance is okay. It could be better, however.

The scalability is fine. I'd rate it eight out of ten, although it could always be better. 

We have around 2,000 users. At this time, we do not have plans to increase the number of users. 

We've used technical support several times. They were fine. I do not have any complaints about the level of service.

We did not previously use a different EDR solution. This is the first product of this nature that we have used. 

The setup is pretty simple. The deployment takes less than one month. For the most part, the setup process is pretty reasonable and not complex.

We have a few people that are able to handle the deployment and maintenance. 

We have witnessed ROI. It is worth the money. 

The pricing is a bit expensive. I'd rate it eight out of ten, with ten being very expensive. 

We're using the latest version of the solution.

I'd rate the solution eight out of ten overall. I'd recommend the solution to others. 

Clients use the solution for endpoint protection purposes.

It's easy to configure and integrate the solution with the current network because it is used by Fortinet clients.

I have been using Fortinet FortiEDR for two years.

Fortinet FortiEDR is a stable solution.

Fortinet FortiEDR is a scalable solution.

I rate the solution’s scalability ten out of ten.

The solution costs less than 10,000 for 100 users. Users have to pay additional costs to have the solution on the cloud.

Fortinet FortiEDR provides good documentation and training for its partners. I would recommend the solution to other users.

Overall, I rate the solution ten out of ten.