Fortinet FortiSIEM

What differentiates Fortinet FortiSIEM from other similar products?

This software differs from others because it helps to reduce the complexity of managing the business network and its security, thus bringing an automated response for the prevention and reduction of threats, it has high scalability in which it provides high visibility, remediation and prevention, it has the ability to differentiate anomalous behaviors from normal ones, thus giving the advantage of having visibility of the activity from one end to another, that is, end points, local servers, network and applications located in the cloud, it also achieves the identification of both internal and external threats quickly and accurately.

What is your favorite aspect of this product?

I like that it has an identification of both internal and external threats quickly and precisely, which can reduce the detection time so that the faster and more accurately the threat is addressed, the less damage is generated, on the other hand it helps, Well to have a more prepared security staff since it gives you all the necessary information and reduces the difficulty of managing the network and its security.

What do you dislike most about this product?

For some really complex configurations, a great deal of knowledge is required, so having adequate training for the management of the software helps to ensure that its operation is adequate, in addition, the time it takes to export data can be somewhat long if it is heavy files .

What recommendations would you give to someone considering this product?

Its handling for someone with little knowledge in this type of software can be somewhat complex so it is best to train as soon as possible so that when implementing the software it can be done in a short time and in the correct way.

What differentiates Fortinet FortiSIEM from other similar products?

It differs from other applications because it is made up of a huge set of functions, it is scalable and has the ability to reduce complex network management, avoid infractions and prevent them in a totally effective way, it is based on automated learning which allows to be able to quickly and accurately visualize normal behavior and detect anomalous behavior, thus avoiding the presence of anomalies in business security, it also includes flexible licenses.

What is your favorite aspect of this product?

The aspect that is my favorite about this software is that it has a unified platform in which it is possible to manage a customizable graphical user interface, this helps to centrally manage all clients while maintaining an overview of business security, which is capable of detecting not only abnormal behavior, but also external and internal threats, and which allows the reduction of incidents and their low impact due to having a correlation engine.

What do you dislike most about this product?

There are many functions offered by this software, however there are also several of them that are not used, so perhaps this can prevent a better optimization of the software, on the other hand its use can be complex if you do not have prior knowledge .

What recommendations would you give to someone considering this product?

A software with the ability to face internal and external threats that has a wide variety of functions that help not only to detect such threats but also to evaluate user behavior and improve business security management, for example. which although I use it can be somewhat complex, trying it can be good.

What differentiates Fortinet FortiSIEM from other similar products?

It differs from other tools or software because it provides an automated response and effective remediation in the presence of vulnerabilities, allows the collection and analysis of data either by metrics, alerts or changes in configuration, it is based on automated learning which helps to make it possible to rely on normal behavior and differentiate this from anomalous, also allows high performance by providing the addition of virtual machines.

What is your favorite aspect of this product?

I like that it is capable of examining records to be able to find patterns that indicate suspicious activity, this being in real time what makes it more accurate and faster, its supervision of configuration changes in software or devices, finds them and It reverses what avoids the alteration of its performance, it also implements a technique based on the risk score to take into account which system needs prioritization in terms of its supervision.

What do you dislike most about this product?

Your dashboard is somewhat confusing so understanding it can be a time-consuming process, its integration with third-party software needs more stability, and its recovery process is somewhat slow.

What recommendations would you give to someone considering this product?

This software is complete, versatile and functional when it comes to providing protection against intrusions and malicious activities, so even though its price can be somewhat high if you carefully evaluate its pros, having it will be a valuable tool to protect business systems.