Fortinet FortiAnalyzer Reviews

Fortinet FortiAnalyzer is primarily utilized to generate quarterly reports showcasing blocked attacks and vulnerabilities. It employs features like WAV porting triggers and DNS triggers to effectively demonstrate to the client the security of their environment.

Fortinet FortiAnalyzer assists in showcasing the value of Fortinet and facilitates the upselling of additional Fortinet products to our customers.

The most valuable feature is the capability to create a customized dashboard. We can subsequently input our EMS, FortiClient, and FortiGate data into it and generate reports.

The integration between specific tenants and FortiAnalyzer can be simplified when utilizing a multi-tenant EMS for our FortiClient.

I have been using Fortinet FortiAnalyzer for three months.

Fortinet FortiAnalyzer is stable.

Fortinet FortiAnalyzer is scalable.

I utilized the technical support services once, and I received a prompt response.

The initial setup is straightforward. The deployment was an easy and smooth process. The deployment took one day and I did it myself.

I would rate Fortinet FortiAnalyzer a nine out of ten.

Fortinet FortiAnalyzer does not require maintenance after the initial report setup. We simply have to remove and add FortiGate as needed for each report.

Before utilizing Fortinet FortiAnalyzer, individuals should determine the type of reporting they require. Additionally, they ought to be acquainted with FortiGate before endeavoring to use FortiAnalyzer.

We use the solution for just one company for the analysis of the FortiGate switch.

The solution is scalable. 

The performance is good.

It's easy to set up the product. 

The solution costs too much. 

I've used the solution for about three years. 

The solution has been stable and reliable. There are no bugs or glitches, and it doesn't crash or freeze. 

It's a scalable product and expands well.

Only admins use the solution. There are three to four people with direct access to the product. 

I do not have access to technical support. In Iran, we have sanctions, and so we cannot get support. 

The initial setup is pretty straightforward and simple. It's not overly complex or difficult to manage. We can deploy it in about two hours. You only need one person to handle the deployment and maintenance tasks as it is very simple. 

We have witnessed a bit of an ROI and find the product to be worth the cost. 

We do need to pay for a license, and the payment is made yearly. There are no extra costs associated with the product beyond the main licensing fee. 

It is an expensive solution. 

We did not evaluate other solutions before choosing this product.

Overall, I'd rate the product eight out of ten in terms of its functionality. I have been pleased with its capabilities so far. I'd recommend the solution to others. 

The Primary case is to collect & monitor logs & events from all of our firewalls and appliances in one single interface with analysis

Our work has been more focused and efficient due to the automatic notifications and reports

You can monitor all appliances from a centralized location. 

You have a front dashboard for all our operations and all the logs. If you need to search for anything you can just dig deep into the logs.

For example, if you are searching for an email to find out why it is blocked, you will be able to see the policy that blocked it, which logs were triggered, etc... It gives you all the information you need right there, from the dashboard.

The solution offers excellent customizable reports. In our case, we needed a monthly report of all internet consumption, and we were able to easily create this.

There are pre-defined templates. The logs cover any question or need that we populate within these templates. However, you can also build your own template.

There is great analytics that can be used in different departments. For example, our marketing department can go more into media patterns and not just into browsing patterns.

Everything is easily visible and can be tracked and studied.

SOC is very helpful. It shows which IPs are targeting your environments. It shows you the threat levels of all the threats you're facing - including the locations, which policy was triggered et cetera. It will even tell you if the system blocked the threat or not.

FortiAnaylzer is compatible with all of our web browsers. 

There are customizable workflows that you can work with. You can automate certain tasks in FortiAnaylzer in the incidents and events sections. 

It is a pretty big software package. It has a lot of features which maybe aren't that useful. 

It's possible that they could add some advanced analytics and some proactive controls for logging analytics. That will help a lot.

The could be more automation and more artificial intelligence integrated into the solution.

It was a service model application originally. It needs to have some artificial intelligence in dealing with the analysis of the nodes, and not just showing the nodes. I'm one version behind the latest version, so I don't know if they added it yet, however, if they haven't it would be a good thing to put into their roadmap.

I've been using the solution for four years.

My solution is based on VM ova image which is predefined by Fortinet. I don't remember when was the last time I restarted the machine which shows no matter what is the size of logs collected the system doesn't crash.

The scalability is pretty good. It's only limited in the log size. You can buy five gigs or 10 gigs if you need to. It depends on how you're going to handle/store the logs.

That said, it is scalable since you are only billed with the size of logs you are using as per the packages and you don't need to modify the cpu/ram. I have it installed on a VM environment and it's connecting to data all over my sites that are both inside and outside Lebanon.

Technical support is perfect whether from the vendor or from the online support. I'm lucky to have a partner in Lebanon who is a preferred platinum partner with Fortinet. Whenever we open a case with them we always get a clear response. They are professional. We're quite satisfied with the level of support we are getting.

It is very straight forward, the only thing that you might do some customization in the report and the event management. Other than this everything is predefined and based on templates, so you are able to add your touch on the reports as well.

I have implemented it with a vendor who is the leader in our region working with Fortinet Solutions.

We're Fortinet end-users.

I was on older versions and now I'm with a newer version. People have faced many issues after downloading the latest update so I tend to keep one update back from the newest one to avoid issues.

I'd advise other potential users that, first of all, if they have Fortinet products in their environment, they should consider FortiAnaylzer. If they don't have it, they shouldn't consider it. They need to have Fortinet appliances.

Secondly, it is a very easy configuration, so companies will not have any problems configuring the FortiAnaylzer. It doesn't require a lot of resources.

We're going to bring a dedicated server for our FortiAnaylzer due to the fact that it is a bit of a predefined virtual machine that we can download from Fortinet's side. If you don't want to go deep in the reports and logs, it can rely on the built-in reporting tools in your appliances.

If you happen to have three Fortinet solutions in your environment then you need to have a FortiAnaylzer as it helps a lot in troubleshooting. It helps a lot with predicting everything that you might see happening on a lot on your network. You will need to have FortiAnaylzer due to the fact that the reporting is not that advanced in the appliances.

Overall, I'd rate the solution eight out of ten. If it was more automated and added in some AI elements, I would rate it higher.

We use the on-prem deployment model of this solution.

My primary use case for this solution is for log collection. I have a lot of FortiGates that I have to collect logs from, so I primarily use it for log collection. We plan to deploy a SIEM and we want to try to see how to integrate all the solutions to our SIEM. We are processing for PCI data specifications. We have to respond to PCI requirements, so that's why we are making some changes and acquiring some new security solutions to deploy. Among them, we have FortiSIEM and other security solutions like antivirus.

It is a simple and solution. I can structuralize all my FortiGate logs but it's not so good from the administrative side. I have FortiGate in four countries and I am responsible for securing Fortinet. I also have to manage FortiGate in other countries, not just my own. If I have to go through each FortiGate it's going to be a little bit complicated. FortiAnalyzer is a good product; but, I keep thinking that FortiAnalyzer isn't really what I'm looking for which is why I am looking to acquire a SIEM solution. It will give me more log collection possibilities. 

I'm looking for something more efficient to analyze different foreign things. That's why FortiSIEM could compete with FortiAnalyzer. 

I haven't had to contact their technical support yet. 

The initial setup is not that complex. I didn't do the initial configuration, it was already set up, I'm only managing it right now. If we're talking about the integration side, like how to integrate FortiGate in FortiAnalyzer, I don't think it's complex. That's why they are known as one of the leaders in security.

I would recommend this solution to somebody considering it. 

The relevance of this solution will depend on the case. If you are considering this solution I would ask what you really intend to accomplish with it and what model you want. It's going to be based on the data you need to protect and analyze.

If I had to choose between FortiSIEM and FortiAnalyzer for log position it's better to go for SIEM. We all know that we can do a lot more with SIEM than just a log collection. Log collection is included in FortiSIEM; so, why acquire FortiAnalyzer is you can have FortiSIEM?

I would rate FortiAnalyzer a 6.5 out of ten. 

Fortinet FortiAnalyzer is a complete package for managing our equipment.

I have been using Fortinet FortiAnalyzer for approximately six years.

The support could be better for Fortinet FortiAnalyzer here in Mexico.

I would rate Fortinet FortiAnalyzer a nine out of ten.

We are using Fortinet FortiAnalyzer for analyzing network traffic and it provides us with log analytics.

Overall we are satisfied with all the features the solution provides.

There are a lot of solutions on the market and Fortinet FortiAnalyzer is limited. It cannot be used across multiple vendors. They can improve by advancing their technology.

The solution could improve by having better integration and support with Apple, Linux, and Microsoft solutions.

I have been using Fortinet FortiAnalyzer for approximately five years.

We have been making changes to the cloud signatures and categories because the market is changing and Fortinet FortiAnalyzer has been stable and reliable.

The solution is scalable but there are additional costs if you want to increase the scalability.

We have been satisfied with the support.

The installation was not difficult.

We did the implementation ourselves.

In the local market sometimes people are being charged more than other solutions. Although the market is competitive, legitimate suppliers do not receive a large enough discount to pass onto the customers. 

Fortinet FortiAnalyzer is not suitable for everyone, it is best suited for mid-sized businesses but if the price could be reduced there would be more customers in all-sized businesses.

I rate Fortinet FortiAnalyzer a seven out of ten.

We basically use it for security. We are using the latest version.

Its robust security and performance are the two main features. We also use the log reporting feature. 

We should be able to do the patch upgrades in a centralized manner. This functionality is currently not there. It would be good to be able to do the firmware updates from one place and at the same time. Currently, if we want to update all appliances, we require FortiManager, which is another solution from Fortinet.

Its documentation can be improved. It will be helpful for implementing the product and gaining knowledge for management purposes.

I have been using Fortinet FortiAnalyzer for three years.

It is stable.

It is scalable. This solution is being used for a government department with a lot of users.

Their technical support is good. We don't have any issues with their support.

In my earlier organization, I have used solutions from CheckPoint and Palo Alto. These are good products, but they are expensive as compared to Fortinet. 

The initial setup is very easy. 

We got help from Fortinet engineers. We have a tie-up with the Fortinet support team. They install it for us. 

We have three people for its deployment and maintenance. We have two network engineers and one technical support engineer.

Its price is okay for us. Fortinet products are cheaper than other solutions.

I would recommend this solution, but it also depends on the organization. We are using this solution, and we are getting good results. 

I would rate Fortinet FortiAnalyzer a ten out of ten. It is the best. 

The primary use cases are log management and the reporting fraud forum. It provides a vision of the network.

From my perspective, we need to see the traffic in a good way so we can know what has happened in our network. The analyzing tools and the monitoring tools and the logs are the important part in the network.

The traffic monitoring could be better, and stability could be improved.

I have been using this solution for about two years.

The solution should be more stable.

For the cloud version, you can expand it as you need it.

I haven't contacted technical support.

The solution is easy to install.

FortiAnalyzer was in the product itself, but two years ago they split it from Fortinet. We paid the license two years ago.

I would rate this solution 9 out of 10. 

I can recommend this solution for other users.