FortiSIEM

Complete Solution for Log Management and Event Correlation: Users find the solution to be very complete for log management and event correlation, with many reviewers expressing satisfaction. They appreciate the comprehensive features offered by the tool, which enable them to effectively manage logs and correlate events.

Easy Creation of Use Cases: The friendly interface makes it easy for users to create the use cases they need for reports. This feature is highly valued by reviewers who highlight its simplicity and efficiency in setting up customized use cases.

Proactive Incident Response: The solution provides functionality and visualization that allows users to act proactively in the event of any incident. Several reviewers have praised this capability, noting that it enables them to identify potential threats early on and take appropriate actions promptly.

Cons:

1. Time-consuming and complex implementation process: Several users have found the implementation process of FortiSIEM to be time-consuming and complex, especially when configuring all the computers to send logs to Siem. This has resulted in frustration and a longer learning curve for some users.
2. Difficulty building custom reports and mediocre support: Users have expressed difficulty in building custom reports with FortiSIEM and have found the support provided by the tool to be mediocre. This lack of support has added to their dissatisfaction with the reporting feature of the tool.
3. Lack of compatibility with other technologies and inability to easily create parsing rules: Some users have mentioned that FortiSIEM lacks compatibility with other major technologies, making it difficult to connect different network infrastructure products. Additionally, they have found it challenging to create parsing rules compared to other SIEM tools, which adds complexity to their experience with FortiSIEM.

Based on user reviews, it is often recommended to invest time in fully learning how to use the tool. This will result in easier configuration and allow users to make the most of its functions. Users also suggest trying the free license before committing to purchasing the software. To ensure reliability, it is advised to install the client software on multiple devices and thoroughly test it. Lastly, users recommend seeking clear information about the licensing terms and conducting thorough testing before making a purchase decision.