Fortinet FortiSIEM

What differentiates Fortinet FortiSIEM from other similar products?

This Fortinet SIEM differs from others because it is a software that is based on a centralized administration giving the user the advantage of managing events and security information much simpler, it is fully scalable and it is capable of giving better visibility, remediation and generate an automated response in the presence of a suspicious event, it detects threats quickly since it is based on the behavior of users which makes it possible to respond faster to it, it also supports hundreds of products from multiple providers.

What is your favorite aspect of this product?

My favorite aspect of this SIEM is that it makes it possible to identify external and internal threats more quickly, it allows the reduction of the time to detect events, its centralized console gives a better vision of business security, in addition to avoiding having to carry out a more complex administration , collects and conducts unified data analysis from various information sources and is able to easily integrate with other Fortinet software, making security much more powerful.

What do you dislike most about this product?

When it comes to carrying out the export of data in large quantities, the process takes more than normal, in addition, its updates are not usually very constant so that if an unknown event occurs it can be difficult to give an answer.

What recommendations would you give to someone considering this product?

It allows you to manage events in a much more efficient way and carry out a simpler management of business security, in addition to helping in the detection and remediation of threats, so having this software makes it possible to face cyber attacks.

What differentiates Fortinet FortiSIEM from other similar products?

FortiSIEM differs from other products or software because it gives companies the facility to have a scalable and secure security management, it is based on automated learning that has the advantage of processing information in real time about when there is abnormal user behavior or not in order to stop any anomaly before it continues advancing, it allows the increase of the performance of the registries thanks to the addition of virtual machines, it offers very flexible license options, and it integrates easily with other Fortinet products to enhance its characteristics and provide more powerful protection.

What is your favorite aspect of this product?

My favorite aspect of this Fortinet software is that it gives the user a graphical interface that can be personalized and that has capacity for several users, on the other hand, the one that accepts several providers because in this way it is possible to choose the one that best suits the needs of the company, allows a fast and effective detection of both external and internal threats, in addition to the collection and analysis of unified data from various information sources, including logs, performance metrics, security alerts and configuration changes which makes it possible to quickly and easily detect any anomaly originating.

What do you dislike most about this product?

It has a somewhat high learning curve, especially for first time users of this type of software, also its initial configuration is confusing so the estimated time for it is longer than expected.

What recommendations would you give to someone considering this product?

You can opt for training before starting the installation of this product since if you are a user with little knowledge, it may take time or not to achieve a result of high potential for business protection, in addition, implementing intermediate capable will be easier for when you carry out information management.

What differentiates Fortinet FortiSIEM from other similar products?

FortiSIEM differs from other products because it is a software that provides the user with advanced threat analysis, which includes real-time monitoring to monitor the performance of the system and applications, issuance of notifications that alert the presence of any incident, charts command with a high customization in which it is possible to observe critical problems quickly, since they are identified according to their color, cross correlation in which network monitoring is carried out as well as physical security monitoring, it has A simple configuration, its administration console is centralized which facilitates the management and security management, in addition to its prices being accessible since it offers two licenses one per month and the other per year, the user being able to choose the one that best suits them. adjust to your needs.

What is your favorite aspect of this product?

My favorite aspect of this software is the ease of administration, given that having a centralized administration console makes it much simpler to have a vision of all business security, based on a unified network analysis in real time, since This allows the faster detection of any anomaly that is present, as well as its constant performance monitoring, since together they allow a quick detection but also an immediate remediation of business security giving the advantage of protecting the information that is handled. on a daily basis but also to continue to maintain a high potential and trustworthy clientele.

What do you dislike most about this product?

Its installation is complex due to the lack of documentation, in addition to carrying out the export of a large amount of data takes longer than expected as well as its remediation.

What recommendations would you give to someone considering this product?

It is important to be clear about what you want for the security of your company, so reviewing the functions and requirements of this software is a key point, since in this way you can take full advantage of this solution to keep your information protected by a clientele that you trust in you.