FortiManager, available from FortiNet as an appliance, offers a set of tools to centrally manage 100,000+ devices such as firewalls, switches, and access points from a single console. With its single-pane view, FortiManager helps enterprises simplify oversight of security infrastructure and automate
responses to potential problems.
FortiManager is well suited for any environment with multiple and dispersed FortiGate firewalls. It will not manage other firewall platforms. Therefore, you either have to use multiple centralized management software, one for each firewall vendor, or invest in alternative tools such as Tufin, AlgoSec, FireMon, SolarWinds, etc. However, you will not get a more inclusive tool for your FortiGate firewalls other than FortiManager.
For either DB2 or zLinux, Tivoli is hands-down the best solution. For Oracle and other operating systems, there are more advanced solutions available. Some of these features are considered "game-changing" by our Sys Admins. Of the three solutions I've dealt with, Tivoli ranks right in the middle with cost, features, and complexity. A nice solution (and the best for the options I listed above), but not cutting-edge.
Tivoli is not manageable from the GUI console and I believe it needs a dedicated resource to manage the software.
Tivoli (TSM) configuration is complex, granular, and scalable with customizable configuration features, but it requires a good administrator that has a strong knowledge of the product.
It needs additional agents or plugins for administration; for example, I have to use an MMC plug-in on the servers.
FortiManager is the best choice for managing numerous FortiGate firewalls. It allows for easy integration into ServiceNow and automates simple repetitive tasks that are very straightforward. Role-based access control is easy to enable and you can get quite granular with user permissions. Administrative Domains help segregate firewall management and compliance within the FortiManager console, by almost any classification method that makes sense to your organization.
Tivoli sits right in the middle of these two products, all things considered. Each has its own strengths (Cohesity has bells and whistles, CommVault works well with Microsoft). Tivoli is a nice blend and rock-solid once implemented.