Communications Outsourcing

Help Desk

Web and Video Conferencing

Customer Support

Push Notifications

Development

Business Intelligence (BI)

Calibration Management

Collaboration

Environmental, Social, and Governance (ESG)

Interactive Voice Response (IVR)

Enterprise

Accounting

Online Trading

Payment Gateway

Finance and Accounting

Applicant Tracking

Corporate Learning Management

Employee Onboarding

Employee Performance Management

HR Management

On-Demand Payment

Payroll

Professional Employer Organizations (PEO)

Resume Parsing

Succession Planning

Talent Intelligence

Talent Management

Workforce Analytics

Workforce Management

Human Resources

API Management

Cloud Storage

Distributed Denial of Service (DDoS) Protection

Dynamic Application Security Testing (DAST)

Embedded Business Intelligence (BI)

Endpoint Encryption

File Sync and Share

Fraud Detection

HTML Editors

Hyper-Converged Infrastructure

Integration Platform as a Service (iPaaS)

Monolithic Frame-based Disk Arrays

Network Performance Monitoring

Network Virtualization

Password Management System

Remote Monitoring and Management

Routers

Secure Email Gateway

Session Border Controllers

Solid State Drives

Static Application Security Testing (SAST)

Static Code Analysis

VoIP Monitoring

Information Technology

A/B Testing

Ad Serving & Retargeting

All-in-One Marketing

Business Card Scanning

Content Management

Data Management

Direct Mail Automation

Email Marketing

Marketing Automation

Marketing Resource Management

Real-Time Interaction Management

Search Marketing Intelligence

Social Media Management

Survey & Forms Building

Video Streaming

Web Analytics

Marketing

Project Management

Transcription

Professional Services

Customer Relationship Management (CRM)

Sales Gamification

Sales

Auto Repair

Car Rental

Equation Editors

Forestry

Insurance Agency Management

Vertical-Specific

Find top rated software and services based on in-depth reviews from verified users. 400+ software categories including PaaS, NoSQL, BI, HR, and more.

FortiAnalyzer

Fortinet

FortiSOAR

Splunk Enterprise

Splunk

IBM Security QRadar SIEM

Microsoft Sentinel

Microsoft

AlienVault OSSIM

AT&T Cybersecurity

Darktrace

Elasticsearch

Elastic

FortiManager

Fortinet FortiGate

### Network and Infrastructure Security
Users generally praise FortiSIEM's network and infrastructure security capabilities. They appreciate the tool's effectiveness in early threat detection, data collection for quick response, and centralized event management. However, some users note that FortiSIEM's optimal performance is achieved when integrated with Fortinet products, which can lead to challenges when supporting a diverse range of network infrastructure devices. Despite this, the consensus remains positive regarding the tool's ability to enhance network security and provide efficient monitoring for various network operations.

### Cloud Security and Management
Users consistently praise FortiSIEM for its robust cloud security and management capabilities. The software is lauded for its efficiency in monitoring functions, providing users with a sense of tranquility and constant protection for their stored cloud information. Reviewers highlight the ease of installation and the platform's ability to quickly identify and address security threats, manage compliance standards, and block malware and threats effectively. FortiSIEM's compatibility with various office equipment and hardware is also commended, making it a versatile and reliable solution for cloud security and management needs.

### Remote Management and Support
Users generally find FortiSIEM's remote management and support capabilities to be efficient and beneficial for managing network infrastructure. The ability to centrally manage devices across different branches without the need for additional resources or on-site visits is highlighted as a significant advantage. While some users mention that the tool is more optimized for Fortinet products, the overall consensus leans towards the effectiveness of remote management and support features in streamlining operations and resolving support issues efficiently.

### Security Threat Management
Users consistently praise FortiSIEM's effectiveness in managing security threats across their network infrastructure. The tool's ability to detect and respond to threats in a timely manner has been highlighted as a key strength. Reviewers appreciate the platform's capacity to monitor, identify, and gather information from various devices, enabling the detection of abnormalities and potential threats. Additionally, users value FortiSIEM's role in providing visibility into security breaches and unauthorized access, allowing for prompt action to mitigate risks. The platform's user-friendly interface and efficient threat visualization have been commended for simplifying threat prioritization and enhancing overall security management.

### Security for Office and Branch Locations
Users consistently praise FortiSIEM's ability to enhance security for office and branch locations. The software's robustness and flexibility are highlighted as key strengths, allowing for centralized management of security across different branches without the need for additional resources or on-site visits. Reviewers emphasize the ease of installation and the platform's effectiveness in quickly identifying and addressing security threats while ensuring compliance standards are met. FortiSIEM's compatibility with various office equipment and hardware is also commended, providing users with the necessary tools to maintain a secure environment for their office equipment.

Based on user reviews, it is often recommended to invest time in fully learning how to use the tool. This will result in easier configuration and allow users to make the most of its functions. Users also suggest trying the free license before committing to purchasing the software. To ensure reliability, it is advised to install the client software on multiple devices and thoroughly test it. Lastly, users recommend seeking clear information about the licensing terms and conducting thorough testing before making a purchase decision.

FortiSIEM, a SIEM solution, has proven to be effective in generating cases and analyzing logs from multiple devices nationwide. Users have found that the tool provides increased visibility of threats and potential threats in the network, enabling them to identify and respond to issues in a timely manner. Its unified and historical statistical views for events across environments make it easier for users to analyze and prioritize threats. Furthermore, FortiSIEM has been instrumental in incident response management, allowing users to effectively handle security incidents.

In addition, the software enables organizations to scale office branches and efficiently manage them from a centralized location, reducing the need for additional resources. Users appreciate the security features offered by FortiSIEM, including secure cloud storage and monitoring functions. It is seen as a great solution for securing office equipment and ensuring the safety of company information stored in the cloud. The software also aids in efficient monitoring and risk management evaluation, helping users maintain a secure environment.

Moreover, FortiSIEM has been helpful in troubleshooting issues with log files such as firewall, proxy, and user access. It provides insight into the environment and helps meet compliance standards. Users have found that the SIEM solution aggregates system logs into a single view, making it easier for the security team to stay on top of important incidents and provide actionable intelligence. Overall, FortiSIEM is considered a valuable investment for companies with limited human resources due to financial constraints.

Complete Solution for Log Management and Event Correlation: Users find the solution to be very complete for log management and event correlation, with many reviewers expressing satisfaction. They appreciate the comprehensive features offered by the tool, which enable them to effectively manage logs and correlate events.

Easy Creation of Use Cases: The friendly interface makes it easy for users to create the use cases they need for reports. This feature is highly valued by reviewers who highlight its simplicity and efficiency in setting up customized use cases.

Proactive Incident Response: The solution provides functionality and visualization that allows users to act proactively in the event of any incident. Several reviewers have praised this capability, noting that it enables them to identify potential threats early on and take appropriate actions promptly.

Cons:
1. Time-consuming and complex implementation process: Several users have found the implementation process of FortiSIEM to be time-consuming and complex, especially when configuring all the computers to send logs to Siem. This has resulted in frustration and a longer learning curve for some users.
2. Difficulty building custom reports and mediocre support: Users have expressed difficulty in building custom reports with FortiSIEM and have found the support provided by the tool to be mediocre. This lack of support has added to their dissatisfaction with the reporting feature of the tool.
3. Lack of compatibility with other technologies and inability to easily create parsing rules: Some users have mentioned that FortiSIEM lacks compatibility with other major technologies, making it difficult to connect different network infrastructure products. Additionally, they have found it challenging to create parsing rules compared to other SIEM tools, which adds complexity to their experience with FortiSIEM.

Fortinet offers security information and event management via FortiSIEM, their product line featuring asset discovery and rapid assessment for location of threat and their remediation.

Sumo Logic is a log management offering from the San Francisco based company of the same name.

Essentials

Enterprise Security

Enterprise Suite

Sumo Logic

FortiSIEM

Security Information and Event Management Tools and Software (often shortened to SIEM) analyze security-related events and log data from network hardware and applications in real-time, performing event correlation and alerting managers to configuration changes of interest, vulnerabilities and potential threats.

Security Information and Event Management (SIEM)

Likelihood to Recommend

Centralized event and log data collection

Correlation

Event and log normalization/management

Deployment flexibility

Custom dashboards and workspaces

Host and network-based intrusion detection

FortiSIEM Key Features Overview | SIEM - Network Security Information and Event Management Solution

Explore FortiSIEM solutions: https://www.fortinet.com/products/siem/fortisiem.html

Read the FortiSIEM data sheet: https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/FortiSIEM.pdf

John Maddison explains how Fortinet enables business success:
https://www.youtube.com/watch?v=wkJCsaCSWA4&t=33s

How the Security Fabric supports business-critical services: https://www.youtube.com/watch?v=Rr5XkPgyHh8

Read about the release of FortiOS 6.4: https://www.fortinet.com/corporate/about-us/newsroom/press-releases/2020/fortinet-introduces-350-new-features-security-fabric-platform.html

More on how Fortinet solutions secure business initiatives: https://www.youtube.com/playlist?list=PLLbbcH8MnXJ5_tL05Un9h63jtvEBATCes

Security management only gets more complex. Endpoints, IoT, Infrastructure, Security Tools, Applications, VM’s and Cloud – the number of things you need to secure and monitor grows constantly. FortiSIEM – Fortinet’s Multivendor Security Incident and Events Management solution brings it all together. Visibility, Correlation, Automated Response and Remediation in a single, scalable solution. 

Using a Business Services view, the complexity of managing network and security operations is reduced, freeing resources, improving breach detection. Worldwide 80% of breaches go undetected because of skills shortage and event information ‘noise’. FortiSIEM provides the cross correlation, applies machine learning and UEBA to improve response, to stop breaches before they occur.

Improve user experience and simplify operations at the WAN Edge with an integrated NGFW and SD-WAN in single offering.

As the use of business-critical, cloud-based applications and tools continue to increase, distributed organizations with multiple remote offices are switching from performance-inhibited wide-area networks (WANs) to software-defined WAN (SD-WAN) architectures. SD-WAN offers business application steering,

Security Information and Event Management is a category of security software that allows security analysts to look at a more comprehensive view of security logs and events than would be possible by looking at the log files of individual, point security tools

Effectiveness of real-time centralized event and log data collection

Correlation of logs and events to pinpoint significant threats

Ability to normalize event syntax so that logs can be compared and are machine-understandable

Ability to tune system to maximize threat detection and minimize false positives

Integration with Identity and Access Management Tools

Integration with access control tools like Active Directory and LDAP

dashboards that can be customized to meet the needs of specific groups

Ability to detect both endpoint intrusion and network ingress detection

Log retention

Length and quality of log storage and archiving over time

Data integration/API management

Ease and quality of data integrations between SIEM and other systems

Behavioral analytics and baselining

How effectively activity and behavior baselines are established and maintained

Rules-based and algorithmic detection thresholds

Effectiveness of manually-established rules and algorithmically-determined detection thresholds

Response orchestration and automation

Quality of built-in response orchestration and automation in Next-Gen SIEM

Reporting and compliance management

Ease and quality of reporting and compliance functions

Incident indexing/searching

Effectiveness of searching across structured and unstructured events and incidents within SIEM

Fischer Identity as a Service

BlueCat Integrity (Address Manager + DNS/DHCP Server)

Palo Alto Networks Next-Generation Firewalls - PA Series

Palo Alto Networks Virtualized Next-Generation Firewalls - VM Series

Paññã

Deputy CIO

FortiSIEM 2018-11-21 08:46:17

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

User interface

Reporting feature

Report generation

Generation process

User interaction

Non intuitive

Log aggregation

Remote management

Multiple customers

Home

Security Information and Event Management (SIEM) Software

As the name implies it's a SIEM solution which aggregates all the system generated logs into a single pane of view combined with some analytics resulting in actionable intelligence. By nature, it'll make it easier for the security team to stay on top of the important incidents that are reported by the information systems that support an organization. This can be viewed as a good investment for any company who has to work with fewer human resources due to financial constraints.

Log aggregation and analytics
CMDB
Device inventory and remote management .
It can be used by Managed Security Providers who have multiple customers as it offers multi organization support .

Non-intuitive/unattractive user interface
Too many features that will usually remain unused
Very crowded (too many icons) portal
The reporting feature is confusing, e.g. you have to click on the "refresh" button to get the result of your inquiry. The report generation process can be much easier, as the user interaction is not pleasant.

Other SIEM solutions were cost prohibitive at the time of purchase (2016).
Just like any other SIEM, it helped draw a better picture of our current security posture.

Palo Alto Networks Next-Generation Firewalls - PA Series, Fischer Identity as a Service, BlueCat Address Manager