FortiSIEM

A tool that allows us high visibility of our network and devices

Kommentare: We have been using this tool for two years now and it has helped us to have more visibility of the threats or possible threats that we could have in our network, as well as having reports of the devices that are part of our infrastructure and that it needs to comply with security standards, as well as being able to fulfill the role of auditor when required.

Vorteile:

What I like the most about this tool is its potential to be able to monitor, discover and collect information from the devices on our network, which makes it a powerful tool for collecting information that will later be helpful in detecting abnormalities and threats in our network. infrastructure

Nachteile:

At the moment I have nothing negative to add to the tool since it has worked very well for us and is fulfilling its role.

Makes Branch Network Infrastructure management to be very efficient and simpler

Kommentare: FortiSIEM has allowed us as an organization to scale office branches and manage them efficiently without over-spending on transportation and extra resource acquisition in terms of human resources and we can simply manage and support branches from a centralized location for almost all support issues raised.

Vorteile:

First and foremost, i specifically like its robustness and flexibility and can accommodate most network infrastructure devices. By offering one centralized management point, administrators and users and react and act on support issues in different branches, update device firmware and manage devices much simpler. These ability to manage different devices in different branches from one centralized console proves to also be a big factor economically and no extra resources are needed to visit the branches in different geographical locations nor any extra IT staff needed.

Nachteile:

As good as FortiSIEM is, unfortunately it best works and can be fully utilized best when dealing with Fortinet Products. Connection from different network infrastructure products is great but in some cases prove to be hectic when trying to support and resolve support issues.

Very good SIEM

Kommentare: It's a great system overall, except for a few bugs and the fact that the reporting could be improved. The only big issue is the fact that since they lack support engineers, it can take a very long time to get anything resolved when there is an issue.

Vorteile:

Very straightforward and it makes it very easy to manage alerts.

Nachteile:

It's extremely difficult to build custom reports and the support is mediocre - they do not have enough ressources.

Good data analysis tool

Vorteile:

The functionality and visualization that it offers me in my network, to be able to act proactively in the event of any incident. This solution allows me to have all the events that happen in all my network equipment from the different vendors.

Nachteile:

As good as FortiSIEM is, it unfortunately works better and can be used better when it comes to Fortinet products. Connecting different network infrastructure products is great, but sometimes hectic when it comes to providing support and resolving support issues and it takes a bit of time and effort to fully understand and implement the tool correctly.

It is good for the correlation of events, and necessary for a soc, to be able to respond to a securi

Kommentare: I have had good experiences using this Siem solution, currently I have a deployment of 80 devices nationwide and having all the logs in a single solution that allows me to quickly generate the cases of one.

Vorteile:

that it is a solution that is very complete for the management of the logs and the correlation of events and that also has a friendly interface and it is easy to create the use cases I need for the reports

Nachteile:

One of the few points that I don't like is the amount of time in the implementation since having to configure all the computers to send all the logs to Siem requires many hours of work.