We performed a comparison between Fortinet FortiSIEM and N-able N-sight Remote Monitoring & Management based on real PeerSpot user reviews.
Find out what your peers are saying about Microsoft, Splunk, Wazuh and others in Security Information and Event Management (SIEM)."The product can integrate with any device."
"If you know how to do KQL (kusto query language) queries, which are how you query the log data inside Sentinel, the information is pretty rich. You can get down to a good level of detail regarding event information or notifications."
"It is always correlating to IOCs for normal attacks, using Azure-related resources. For example, if any illegitimate IP starts unusual activity on our Azure firewall, then it automatically generates an alarm for us."
"Sentinel is a Microsoft product, so they provide very robust use cases and analytic groups, which are very beneficial for the security team. I also like the ability to integrate data sources into the software for on-premise and cloud-based solutions."
"Sentinel uses Azure Logic Apps for automation, which is really powerful. This allows us to easily automate responses to incidents."
"The solution has features that helped improve the security posture of our clients. It provides the ability to correlate a large variety of log sources very cost-effectively, especially for Microsoft sources."
"It's pretty powerful and its performance is pretty good."
"The most valuable feature is the onboarding of the workloads. You can see all that has been onboarded in your account on the dashboards."
"We like the integration of all of these Fortinet platforms together. Everything is integrated well, and we are able to sell that as a service to our customers."
"The CMDB and the device discovery features are most valuable."
"The stability is very reliable. It offers very good performance."
"The advanced agents used to collect logs have been most valuable. We have also made use of the advanced intelligence this solution offers."
"The ability to write my own parsers for the devices that are not supported by Fortinet is the most valuable feature."
"I like the various options, including the option for CMDB and the easier access to create rules, playbooks, or use cases. It's also easier to use for creating dashboards and reports."
"It's a very nice solution to work with."
"Analytics is the most valuable feature. The business service summaries in the dashboards and the correlations for the SIEM are also valuable features."
"I'm really happy with the background remote access, which allows me to easily change system internals such as registry keys and silently execute commands using the command prompt in the background. This kind of remote access makes it easy for us to do our jobs without getting in the customer's way."
"The integrated backup and the scripting are good."
"The solution provides an administration panel where we can see what is happening on our client's stations, such as events, alerts, and all the software installed."
"The most valuable aspect of N-able Remote Monitoring & Management is it provides an all-in solution for the different solutions."
"The most helpful feature is script deployment because we can create whatever we want to deploy on our devices. This works in a cloud environment, where we previously relied on Active Directory. Since the start of the COVID outbreak, all the staff members began working from home, and most of the people there did not use the VPN to transfer the policies."
"I like being able to get a picture of what's happening on a computer. I can just click on it, and I can see the CPU usage and the memory usage and what services and programs are currently running. I can connect remotely to a computer. All these are very useful."
"The solution is user-friendly."
"The reporting for this solution has been most valuable."
"They should just add more and more out-of-the-box connectors. It is quite a new product, and it has a lot of connectors, and even more would be good."
"Sentinel still has some anomalies. For example, sometimes when we write a query for log analysis with KQL, it doesn't give us the data in a proper way... Also, the fields or columns could be improved. Sometimes, it is not giving the desired results and there is a blank field."
"They can work on the EDR side of things... Every time we need to onboard these kinds of machines into the EDR, we need to do it with the help of Intune, to sync up the devices, and do the configuration. I'm looking for something on the EDR side that will reduce this kind of work."
"One key area that can be improved is by building a strong integration with our XDR platform."
"It would be good to have some connectors for third-party SIEM solutions. Many customers are struggling with the integration of Azure Sentinel with their on-premise SIEM. Microsoft is changing the log structure many times a year, which can corrupt a custom integration. It would be good to have some connectors developed by Microsoft or supply vendors, but they are not providing such functionality or tools."
"The on-prem log sources still require a lot of development."
"Only one thing is missing: NDR is not available out-of-the-box. The competitive cloud-native SIEM providers have the NDR component. Currently, Sentinel needs NDR to be powered from either Corelight or some other NDR provider."
"There is some relatively advanced knowledge that you have to have to properly leverage Sentinel's full capabilities. I'm thinking about things like the creation of workbooks, how you do threat-hunting, and the kinds of notifications you're getting... It takes time for people to ramp up on that and develop a familiarity or expertise with it."
"Fortinet FortiSIEM is a little out of sight and needs more marketing efforts to be popular in the market."
"The UI could improve in Fortinet FortiSIEM. Humans view the UI frequently for data and if it was more visually pleasing it would be beneficial."
"The reporting feature is not very attractive for the upper management and I am not able to perform complex/nested queries."
"Their product support, in general, is not that great. The product support is in the same ecosystem. Their support is improving but it's not that great.vvv"
"An improvement would be if FortiSIEM's licensing was based on the number of nodes rather than the EPS."
"The backup and recovery process for this solution needs improvement."
"We need to see incident reports about the event log, without events from the administrator or through human interaction."
"The process of installing Fortinet FortiSIEM and the customization of the alerts take too long."
"The SentinelOne integration is not great."
"Kaseya is a similar product and they have easier scripts. If you want to deploy one software to 100 machines, we need to dig into it and then we need to create the script and work with the support team and then we can deploy that particular script. The pre-built scripted is the one thing that I would definitely like to have improved."
"We haven't had it for very long, and we're finally getting comfortable with it. The biggest improvement probably would be a little more clarification. It has few exclamation points or attention-getters when there is a computer that doesn't have the up-to-date patches, etc. However, it's not specific in terms of what you need to do. Sometimes, it says it requires a reboot, and you reboot it, but the same message still shows up. Sometimes, the messages that it gives you about how to resolve an issue are not very easy to understand."
"It would be great if the pricing model could be improved and the solution was more affordable."
"The reporting could be more customizable. RMM pulls a vast amount of data, but you need to filter through it to get a decent executive report each month. I'm pulling reports all day through the XML file and such to get the information our executive needs. They don't want a 34-megabyte Excel spreadsheet, but the overview only provides limited information, like a basic breakdown."
"There are disconnection issues sometimes."
"I would like to see notifications sent with SMS."
"The patch management of the solution could improve."
More N-able N-sight Remote Monitoring & Management Pricing and Cost Advice →
Fortinet FortiSIEM is ranked 9th in Security Information and Event Management (SIEM) with 63 reviews while N-able N-sight Remote Monitoring & Management is ranked 6th in Remote Monitoring and Management (RMM) with 13 reviews. Fortinet FortiSIEM is rated 7.6, while N-able N-sight Remote Monitoring & Management is rated 8.2. The top reviewer of Fortinet FortiSIEM writes "It's cheaper than other solutions with the same features but lacks integration with many third-party vendors". On the other hand, the top reviewer of N-able N-sight Remote Monitoring & Management writes "User-friendly and allows you to do different activities on a single interface, and gives you visibility into multiple devices, but its reporting interface and report generation could be improved". Fortinet FortiSIEM is most compared with IBM Security QRadar, Splunk Enterprise Security, LogRhythm SIEM, Wazuh and ThousandEyes, whereas N-able N-sight Remote Monitoring & Management is most compared with N-able N-central, Zabbix, NinjaOne, ConnectWise RMM and PRTG Network Monitor.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.