We performed a comparison between Fortinet FortiSIEM and NETSCOUT InfiniStreamNG based on real PeerSpot user reviews.
Find out in this report how the two Security Information and Event Management (SIEM) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."Microsoft Sentinel comes preloaded with templates for teaching and analytics rules."
"Sentinel is a SIEM and SOAR tool, so its automation is the best feature; we can reduce human interaction, freeing up our human resources."
"Previously, it was a little bit difficult to find where an incident came from, including which IP address and which country. So in Sentinel, it's very easy to find where the incident came from since we can easily get the information from the dashboard, after which we take action quickly."
"The Log analytics are useful."
"The most valuable feature is the alert notifications, which are categorized by severity levels: informational, low, medium, and high."
"It has basic out-of-the-box integrations with multiple log sources."
"The standout feature of Sentinel is that, because it's cloud-based and because it's from Microsoft, it integrates really well with all the other Microsoft products. It's really simple to set up and get going."
"I believe one of the main advantages is Microsoft Sentinel's seamless integration with other Microsoft products."
"The primary valuable feature is that it has replaced a whole lot of other products with one platform."
"Fortinet FortiSIEM is less costly than other products and is available 24/7."
"The interface is very easy to use. The connector in the core has FortiSIEM support from the vendor."
"The most valuable feature of Fortinet FortiSIEM is the user and entity behave as analytics(UEBA). This feature mixes your data and provides useful information based on the behavior of the targeted."
"Analytics. It can provide log information from the device. With log information, I can see if there is a threat"
"The most valuable feature is the dashboard. CMDB database collects data from a lot of pre-configured devices."
"AccelOps can handle a lot of data and it's just so important to true monitoring. Also, I can create a lot of rules to detect anything I like."
"There are things like dashboards and reports (pre-configured and custom) that let me know that things are operating the way they should be, and when they are not."
"I love the single pane of glass view. It makes it easier to not have to navigate everywhere. It allows more simplistic visibility, without having to go from tool to tool to tool, or from window to window to window."
"The real-time troubleshooting and application segregation that you can do within it."
"The most valuable feature is utilization."
"It helps us to assist our customers to isolate problems. If it is us who is having the problem, then we can use it to streamline the process."
"The technical support is really good. They will go above and beyond, if you are running into a problem. You can go to a sales engineer, who will engage technical support to help you out."
"When we have mobile operators who are signal partners, where one is the roaming host and another is the roamer, we are able to see their traffic. Their packets are able to detect if any faults to develop, and at what point they fail."
"It allows us to get quicker resolutions. We can see exactly what is using up the bandwidth, so we can assist end users."
"It's an easy product to set up."
"There is some relatively advanced knowledge that you have to have to properly leverage Sentinel's full capabilities. I'm thinking about things like the creation of workbooks, how you do threat-hunting, and the kinds of notifications you're getting... It takes time for people to ramp up on that and develop a familiarity or expertise with it."
"Sometimes, it is hard for us to estimate the costs of Microsoft Sentinel."
"They're giving us the queries so we can plug them right into Sentinel. They need to have a streamlined process for updating them in the tool and knowing when things are updated and knowing when there are new detections available from Microsoft."
"If Sentinel had a graphical user interface, it would be easier to use. I would also like it to be more customizable."
"Sentinel's alerts and notifications are not fully optimized for mobile devices. The overall reporting and the analytics processes for the end user should also be improved. Also, the compatibility and availability of data sources and reports are not always perfect."
"Microsoft should improve Sentinel, considering that from the legacy systems, it cannot collect logs."
"Not all information shows up in Sentinel. Sometimes there are items provided in 365 and if you looked in Sentinel you would not see them and therefore think they do not exist. There can be discrepancies between Microsoft tools."
"It would be good to have some connectors for third-party SIEM solutions. Many customers are struggling with the integration of Azure Sentinel with their on-premise SIEM. Microsoft is changing the log structure many times a year, which can corrupt a custom integration. It would be good to have some connectors developed by Microsoft or supply vendors, but they are not providing such functionality or tools."
"I would like to see more integration with other platforms."
"We expect the latest patch from Fortinet FortiSIEM to give the ability to work with signature files."
"The nodes on our network did not comply with the SIEM solution. They use a different format parking log."
"FortiSIEM is not a market leader in the SIEM space."
"The policy editing should be easier. Right now, it's too hard."
"FortiSIEM could be better integrated with other vendors."
"There is no proper guide for integration or configuration."
"The dashboard needs to improve."
"The monitoring and reporting tool needs improvement. Users want more information, such as the level of detail when doing a packet analysis. They want more detail to be able to isolate down to a specific point."
"The NetFlow Collectors could handle more flows per minute."
"The single pane of glass feed still needs work."
"I'd like them to make the product more user-friendly."
"I would like to see an improved level of stitching between IPs."
"The scalability has some limitations and quirks to it. I would like to be able to upgrade rather than replace the whole thing."
"The technology goes end-of-life on us every year, which is why I am looking forward to vSTREAM. I don't like when devices go end-of-life on us so quickly. If we can get more of an advanced notice of when an end-of-life is brought up, because our certification process within the organization takes a while."
"The stability depends on who is using the tool, because you only can get as much out of the tool as you put into it. There are a lot of patches for this particular environment, so you have to keep on them. If you lose track of them, then the product is not useful anymore."
Fortinet FortiSIEM is ranked 8th in Security Information and Event Management (SIEM) with 63 reviews while NETSCOUT InfiniStreamNG is ranked 63rd in Network Monitoring Software with 13 reviews. Fortinet FortiSIEM is rated 7.6, while NETSCOUT InfiniStreamNG is rated 8.4. The top reviewer of Fortinet FortiSIEM writes "It's cheaper than other solutions with the same features but lacks integration with many third-party vendors". On the other hand, the top reviewer of NETSCOUT InfiniStreamNG writes "Once you know how to use the product, it's easy and simple ". Fortinet FortiSIEM is most compared with IBM Security QRadar, Splunk Enterprise Security, LogRhythm SIEM, Wazuh and ThousandEyes, whereas NETSCOUT InfiniStreamNG is most compared with NETSCOUT vSTREAM, NETSCOUT nGeniusONE and Cisco Secure Network Analytics. See our Fortinet FortiSIEM vs. NETSCOUT InfiniStreamNG report.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
