FortiSOAR vs. IBM Security QRadar SOAR

Most organization with medium & maturity SOC struggle with alert fatigue & false positives with addressing alert volume is result in increasing risk of critical alerts being masked by trivial one , in this situation FortiSOAR help in case management : rapidly response in case of crises also. FortiSOAR is designed very well where Fortinet have other stack of security component also like Fortinet NGFW & Forti SIEM etc.. Fortinet NGFW can and generate the FortiSOAR instance through FortiCloud for Customer . However In absence of FortiFabric it require lot of connectors to work well the solution.

Incentivized

IBM Security QRadar SOAR is versatile. All the major players in SOAR field require the administrator to have coding experience but with IBM it is different. IBM's solution is a full-fledged automation solution, and not some threat-based or limited one. Meaning whatever comes to your mind, if you can write the code, you can do it. This goes from daily tasks from SOC to daily tasks of your network or security administrator or any other administrator. You can manage your ITSM solution if you want to, IBM is a playground and there is much to discover in its capabilities. If you do not have the knowledge or if you want a SOC/Threat Based SOAR solution, meaning you want automation but you want it to be limited to an area and out-of-box, you may choose other alternatives.

Incentivized

• User-friendly interface and easy to read data on the panels.
• Perfect for vulnerability management.
• Great integration with different security operations center platforms.
• Customized panels.
• Setting User Permissions.
• Scheduled asset scans with reports.

Incentivized

• QRadar's ability to collect, analyze and normalize vast amount of security data from various sources is remarkable.
• QRadar allows us to define and automate incident response playbooks which have been amazing for streamlining the response to security incidents.
• It offers and extensive library of pre-built connectors and support for common security standards facilitating seamless integration with a wide range of security tools.

Incentivized

• Training Services- Fortinet offers courses geared towards administration and designed and development of FortiSOAR , Which required multiples access , we need all training services with self pace basis , I think here Fortinet need to improve.
• Licensing Model- Being as a new technology Licensing model should be crystal & Clear, be it Concurrent Users or The number of FortiSOAR nodes there should be no ambiguity .

Incentivized

• You still have to generate reports manually. Reports are very limited and practically not useful.
• The solution should not be SOAR class. Automations usually don't work. It's apparent that it's not designed for that.
• Lack of flexibility.
• Practically no support. The reported integration problems have not been resolved.

Incentivized

It is beneficial to have a program that can run independently and be used without the supervision of a devoted employee

Incentivized

It is very easy to navigate and run the parts that we have needed

Incentivized

I have never had to contact support

Incentivized

Done prove of concept (POC) thoroughly , where we judged the solution on every aspect & We came to know FortiSOAR will work well in our environment as it is blended with features like Case managements , Product Flexibility * Scalable Architecture . These features were much required to optimum use of our SOC solution. Since we have all the Fortinet security stack in our environment it helped us a lot in selection (POC) and also commercially.

Incentivized

Overall, IBM Security QRadar SOAR offered the same set of functionality that was needed by the organization as offered by Splunk SOAR, but the former is less expensive and solves all the purpose within budget. In addition, integration with other IBM products was easier and made implementation of a SOAR solution much faster.

Incentivized

• Improved compliance control and risk management.
• Improved the business process.
• Improved incident visibility.

Incentivized

• It provides comprehensive MTTD and MTTR metrics and we are aware of how secure our systems are at any given moment.
• We use linux 7.7, therefore the integrations are smooth.
• We've been able run our online shops securely for so long.

Incentivized