Fortinet FortiAnalyzer Reviews

This product is only used for logs and reporting.

It gives us reporting features, which are helpful in the case of troubleshooting and audit purposes.

It has detailed reporting, e.g., user-wise reporting, threat analysis, etc. It also gives you live logs, which can be really helpful during troubleshooting. 

It should have customized reports as well. While it currently has them, you need to write a script which is not straightforward.

No issues.

No issues.

I would rate it as a two out of 10. The technical support takes at least two days to reply on any ticket post raised on their website. 

We did not have a previous solution.

Initial setup is straightforward, and it has an easy setup.

It depends upon the company.

We evaluated SonicWall and Cisco.

Fortinet FortiAnalyzer is simple and reliable. It does what the product says it would do. We have a lot of replacements in Turkey, Palo Alto, Check Point, and Forcepoint. We are replacing these various vendors with Fortinet products. But there are some software issues, like bugs or bug fixes. Otherwise, we are very happy with Fortinet products.

In terms of what could be improved, sometimes it's lagging and also has some graphical issues with the GUI. The correlation mechanism and the analytics are not as good as the competitors like Check Point or Panorama. But for IoT and SoT, it has graphical dashboards and analytical diagram tables that can correlate various logs from other products like FortiMail and FortiWeb, so it is a good mechanism for Fortinet products. If you have various Fortinet products for your firm, you can use FortiAnalyzer like a synchro mechanism.

But it needs development for software issues like the GUI bug, some logs not showing, not collecting some logs... They need to fix them.

I have been using Fortinet FortiAnalyzer for almost five years and maybe six years experience with Fortinet products.

The scalability is good. It is also good in the cluster nodes. You can make multiple FortiAnalyzer clusters groups, and you can distribute the logs between these FortiAnalyzer nodes. In other words, you can expand the scale.

We have SLA agreements with the customers, so we are giving the technical support.

The initial setup is very simple.

If it is an individual environment, it may take one hour to complete the entire initial setup.

If the hardware requires physical adjustments for the cabinet location or the protected area, then it may take 2 hours.

I would absolutely recommend FortiAnalyzer. Fortinet products have internal logging mechanisms if they have internal disks or stores. But if you have multiple location SD-WAN branches for multiple areas you are controlling with FortiGate, the hardware doesn't give any disk or storage, only limited storage. So if you want to go further on the logging, you have limited options, maybe one week or two weeks. So if you're using a FortiAnalyzer in the SD-WAN branches, you have a centralized logging mechanism, so you can collect all the logs in a  central location and you can make the correlations or analytics with all the devices. Otherwise, you can go device, device to see what is happening on each site.

On a scale of one to ten, I would give Fortinet FortiAnalyzer a seven.

To improve this rating, as I mentioned, I need to see the older bugs, the graphical user experience, made better, like Check Point. Check Point is more visual than FortiAnalyzer. If the customer has experience with the Check Point logging mechanism, they will seek additional features in the FortiAnalyzer, but it has to be more visual. 

So as I said, the graphical issues must improve.

The product is really helpful in examining the logs of multiple firewalls on a single GUI.

Log View is the most valuable part for us, as we can view logs from different Fortigates on a single GUI. 

Another important feature is real-time logs, they help a lot in troubleshooting.

I think some improvement is required in real-time log monitoring, as sometimes it gets stuck or displays results after a delay.

No issues yet.

No issues after installing the 1000E.

Good.

We used view local logs before this.

It's straightforward, just add in different FortiGuards the IP address of FortiAnalyzer.

It's worth spending on FortiAnalyzer if you have multiple firewalls in your network.

I use Fortinet FortiAnalyzer to analyze network logs for increased security protection.

We can see and know our network traffic graphically.

Based on the logs of Fortinet FortiAnalyzer you can have it trigger actions. For example, if the log has a word or a sentence you specified it can send an alert to an email address or SNMP trap.

Fortinet FortiAnalyzer cannot use as SNMP Manager so cannnot receive any queries of SNMP. They should add this feature in the future to help manage solutions.

I have been using Fortinet FortiAnalyzer for approximately eight years.

I have found the solution to be stable. However, when the computer's resources are low the analysis becomes slow. There could be some optimization done.

Fortinet FortiAnalyzer is scalable. It can handle small to large-scale analysis.

The initial installation is easy. You set up the interface IP address and then you can have access. If you use the web GUI, it's very easy to connect to FortiGate and other Fortinet solutions.

If a company purchases FortiGate they should purchase Fortinet FortiAnalyzer together. The reason is FortiGate does not have an interface for analyzing logs but if you have the Fortinet FortiAnalyzer it can analyze logs and give reports on the logs giving you more protection.

I rate Fortinet FortiAnalyzer a nine out of ten.

It generate reports from a specific date or interval.

• Storage in SSD, to generate customized reports 
• Event management

• Operation and maintenance
• High-availability architecture
• Management link embedded in the transmission link

Yes. The combination between FortiAnalyzer and FortiGate 5000 Series with millions of concurrent sessions is high-risk because it can interrupt the operation of the network.

The FortiAnalyzer is not scalable.

Tech support is very poor and slow.

Straightforward.

The hardware cost and services contract are fair.

Buy it for networks that have the FortiGate platform as a security gateway or for enterprises with employees who are on the road a lot.