Compare Fortinet FortiEDR vs. Fortinet FortiSandbox

Cancel
You must select at least 2 products to compare!
Top Review
Find out what your peers are saying about CrowdStrike, SentinelOne, Cisco and others in Endpoint Detection and Response (EDR). Updated: September 2021.
535,544 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
"The simplicity of use is its most valuable feature. You can very clearly see things.""The stability of the solution is perfect. I believe it's the most stable solution on the market right now.""I am really satisfied with the technical support.""It is a very stable program.""The solution's integration capabilities are excellent. It's one of the best features.""It doesn't impact the devices. It is an agent-based solution, and we see no performance knock on cell phones. That was a big thing for us, especially in the mobile world. We don't see battery degradation like you do with other solutions which really drain the battery, as they're constantly doing things. That can shorten the useful life of a device.""Integration is a key selling factor for Cisco security products. We have a Cisco Enterprise Agreement with access to Cisco Email Security, Cisco Firepower, Cisco Stealthwatch, Cisco Talos, Cisco Threat Grid, Cisco Umbrella, and also third-party solutions. This is key to our security and maximizing operations. Because we do have the Email Security appliance and it is integrated with Threat Response, we have everything tied together. Additionally, we are using the Cisco SecureX platform, as we were a beta test for that new solution. With SecureX, we are able to pull all those applications into one pane for visibility and maintenance. This greatly maximizes our security operations.""Any alert that we get is an actionable alert. Immediately, there is information that we can just click through, see the point in time, what happened, what caused it, and what automatic actions were taken. We can then choose to take any manual actions, if we want, or start our investigation. We're no longer looking at digging into information or wading through hundreds of incidents. There's a list which says where the status is assigned, e.g., under investigation or investigation finished. That is all in the console. It has taken away a lot of the administration, which we would normally be doing, and integrated it into the console for us."

More Cisco Secure Endpoint Pros »

"The ease of deployment and configuration is valuable. It's very easy compared to other vendors like Sophos. Sophos' configuration is complex. Fortinet is a lot easier to understand. You don't need a lot of admin knowledge to do the configuration.""It notifies us if there's any suspicious file on any PC. If any execution or similar kind of thing is happening, it just alerts us. It doesn't only alert. It also blocks the execution until we allow it. We check whether the execution is legitimate or not, and then approve it or keep it blocked. This gives us a little bit of control over this mechanism. Fortinet FortiEDR is also very straightforward and easy to maintain.""Ability to get forensics details and also memory exfiltration.""Exceptions are easy to create and the interface is easy to follow with a nice appearance.""It is stable and scalable."

More Fortinet FortiEDR Pros »

"The most valuable feature was the EDR, endpoint detection and response.""The most valuable feature is the protection and the way it works, the technology is what I like the most.""The solution is very good because it catches a lot of threats in emails.""he solution's GUI is good.""The technical support is very good.""What I find most valuable, is that it is easy to use.""The analysis engine is a very valuable feature.""The initial setup is straightforward."

More Fortinet FortiSandbox Pros »

Cons
"The initial setup is a bit complex because you need to execute existing antiviruses or security software that you have on your device.""In the next release, I would for it to have back up abilities. I would like the ability to go back to a point in time to when my PC was uninfected and to the moment of when the infection happened.""The reporting and analytics areas of the solution need to be improved.""I would like more seamless integration.""The technical support is very slow.""I would recommend that the solution offer more availability in terms of the product portfolio and integration with third-party products.""Maybe there is room for improvement in some of the automated remediation. We have other tools in place that AMP feeds into that allow for that to happen, so I look at it as one seamless solution. But if you're buying AMP all by itself, I don't know if it can remove malicious software after the fact or if it requires the other tools that we use to do some of that.""The room for improvement would be on event notifications. I have mine tuned fairly well. I do feel that if you subscribe to all the event notification types out-of-the-box, or don't really go through and take the time to filter out events, the notifications can become overwhelming with information. Sometimes, when you're overwhelmed with information, you just say, "I'm not going to look at anything because I'm receiving so much." I recommend the vendor come up with a white paper on the best practices for event notifications."

More Cisco Secure Endpoint Cons »

"The security should be strong for the cloud. Some applications are on-prem and some are on the cloud. Fortinet should also have strong security for the cloud. There should be more security for the cloud.""They can include the automation for the realtime updates. We have a network infrastructure with remote sites. Whenever they send updates, they are not automated. We have to go into the console and push those updates. I wish it was more automated. The update file is currently around 31 MB. It could be smaller.""Detections could be improved.""The SIEM could be improved.""The amount of usage, the number of details we get, or the number of options that can be tweaked is limited in comparison to that with other EDR solutions"

More Fortinet FortiEDR Cons »

"In the next release, I would like to see machine learning and anti-exploitation included.""The licensing can be very confusing. It needs to be simplified.""The response time from technical support should be improved.""At least once a week we have a false alarm. This needs to be adjusted so that we get fewer of these occurrences.""Most people are confused about how to use the right integration of the right Fortinet product.""Something that needs to improve, is the end-point protection.""Product could include a user interface and be made simpler for customers to configure.""The integration is limited. The solution needs to offer better integration with multiple vendors."

More Fortinet FortiSandbox Cons »

Pricing and Cost Advice
"The costs of 50 licenses of AMP for three years is around $9,360.""The price is very good.""The visibility that we have into the endpoint and the forensics that we're able to collect give us value for the price. This is not an overly expensive solution, considering all the things that are provided. You get great performance and value for the cost.""Whenever you are doing the licensing process, I would highly advise to look at what other Cisco solutions you have in your organization, then evaluate if an Enterprise Agreement is the best way to go. In our case, it was the best way to go. Since we had so many other Cisco products, we were able to tie those in. We were actually able to get several Cisco security solutions for less than if we had bought three or four Cisco security solutions independently or ad hoc.""In our case, it is a straightforward annual payment through our Enterprise Agreement.""Our company was very happy with the price of Cisco AMP. It was about a third of what we were paying for System Center Endpoint Protection.""There are a couple of different consumption models: Pay up front, or if you have an enterprise agreement, you can do a monthly thing. Check your licensing possibilities and see what's best for your organization.""The Enterprise Agreement is like an all-you-can-eat buffet of Cisco products. In that vein, it was very affordable."

More Cisco Secure Endpoint Pricing and Cost Advice »

"There are no issues with the pricing."

More Fortinet FortiEDR Pricing and Cost Advice »

"There are additional costs, which isn't included in the licensing fee.""The solution is not expensive at all.""Altogether, it is about €10,000 for the Sandbox and Email Gateway."

More Fortinet FortiSandbox Pricing and Cost Advice »

report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
535,544 professionals have used our research since 2012.
Questions from the Community
Top Answer: The most valuable feature is signature-based malware detection.
Top Answer: Licensing fees are on a yearly basis and I am happy with the pricing.
Top Answer: The GUI needs improvement, it's not good. There are false positives in emails. At times, the emails are blocked and… more »
Top Answer: Comparatively, it works fine, but the amount of usage, the number of details we get, or the number of options that can… more »
Top Answer: Integration is one of the solution's most valuable aspects. You can integrate even third-party solutions so that they… more »
Top Answer: The solution is a rather sizable investment. That said, for those organizations with sensitive data, that feed to know… more »
Top Answer: With the 3000D we had some issues with the FortiOS version. I don't remember which one it was, however, there was an… more »
Comparisons
Also Known As
Cisco AMP for Endpoints
enSilo, FortiEDR
FortiSandbox
Learn More
Overview

Advanced Malware Protection (AMP) is subscription-based, managed through a web-based management console, and deployed on a variety of platforms that protects endpoints, network, email and web Traffic. AMP key features include the following: Global threat intelligence to proactively defend against known and emerging threats, Advanced sandboxing that performs automated static and dynamic analysis of files against more than 700 behavioral indicators, Point-in-time malware detection and blocking in real time and Continuous analysis and retrospective security regardless of the file's disposition and Continuous analysis and retrospective security.

Advanced attacks can take just minutes, if not seconds, to compromise the endpoints. First-generation endpoint detection and response (EDR) tools simply cannot keep pace. They require manual triage and responses that are not only too slow for fast moving threats but they also generate a huge volume of indicators that burden already overstretched security teams. Further, legacy EDR tools drive up the cost of security operations and can slow processes, negatively impacting business.

FortiEDR delivers advanced, real-time threat protection for endpoints both pre- and post-infection. It proactively reduces the attack surface, prevents malware infection, detects and defuses potential threats in real time, and can automate response and remediation procedures with customizable playbooks. FortiEDR helps organizations stop breaches in real-time automatically and efficiently, without overwhelming security teams with a slew of false alarms or disrupting business operations.

Today’s threats are increasingly sophisticated and often bypass traditional malware security by masking their malicious activity. A sandbox augments your security architecture by validating threats in a separate, secure environment. FortiSandbox offers a powerful combination of advanced detection, automated mitigation, actionable insight, and flexible deployment to stop targeted attacks and subsequent data loss. It's also a key component of our Advanced Threat Protection solution.

Offer
Learn more about Cisco Secure Endpoint
Learn more about Fortinet FortiEDR
Learn more about Fortinet FortiSandbox
Sample Customers
Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank
Financial, Healthcare, Legal, Technology, Enterprise, Manufacturing ... 
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Top Industries
REVIEWERS
Healthcare Company19%
Government13%
Manufacturing Company13%
Financial Services Firm6%
VISITORS READING REVIEWS
Comms Service Provider25%
Computer Software Company22%
Government7%
Financial Services Firm5%
VISITORS READING REVIEWS
Comms Service Provider29%
Computer Software Company23%
Government7%
Manufacturing Company3%
VISITORS READING REVIEWS
Comms Service Provider26%
Computer Software Company25%
Government6%
Energy/Utilities Company6%
Company Size
REVIEWERS
Small Business36%
Midsize Enterprise18%
Large Enterprise46%
VISITORS READING REVIEWS
Small Business27%
Midsize Enterprise21%
Large Enterprise52%
No Data Available
REVIEWERS
Small Business45%
Midsize Enterprise36%
Large Enterprise18%
Find out what your peers are saying about CrowdStrike, SentinelOne, Cisco and others in Endpoint Detection and Response (EDR). Updated: September 2021.
535,544 professionals have used our research since 2012.

Fortinet FortiEDR is ranked 9th in Endpoint Detection and Response (EDR) with 5 reviews while Fortinet FortiSandbox is ranked 6th in Advanced Threat Protection (ATP) with 10 reviews. Fortinet FortiEDR is rated 7.8, while Fortinet FortiSandbox is rated 8.0. The top reviewer of Fortinet FortiEDR writes "Straightforward, easy to maintain, and works as per our expectations". On the other hand, the top reviewer of Fortinet FortiSandbox writes "Good performance and integration capabilities with good technical support". Fortinet FortiEDR is most compared with Fortinet FortiClient, SentinelOne, CrowdStrike Falcon, Microsoft Defender for Endpoint and Webroot Business Endpoint Protection, whereas Fortinet FortiSandbox is most compared with Palo Alto Networks WildFire, Check Point SandBlast Network, FireEye Network Security, SonicWall Capture Advanced Threat Protection and RSA NetWitness Logs and Packets (RSA SIEM).

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.