Fortinet FortiAnalyzer Reviews

I use FortiAnalyzer to report on these other devices because they have two firewalls, so it's an accessible place to find out what is happening across your Fortinet setup.

I mainly use it for reporting. It also integrates other security solutions around. It can report onto anything that has a syslog on the network. It doesn't have to be a Fortinet product. It integrates within FortiGate and you can find the reports there. It's a very flexible and rich tool, providing custom reports along with default reports.

We use FortiAnalyzer for network security operations, primarily to integrate it with FortiGate firewall and Palo Alto for our firewall operations. FortiAnalyzer provides a very suitable solution for FortiGate firewall since they come from the same vendor, so the integration is very strong.

The most valuable feature of FortiAnalyzer is its visibility, especially in network investigations. When incidents occur in our network, we need to investigate these issues, and FortiAnalyzer provides very strong insights and visibility for troubleshooting and investigation. 

The solution helps in correlating logs centrally, which is beneficial for customers with multiple branches. It is also very suitable for FortiGate firewall operations, and the integration with other Fortinet solutions is strong.

I deployed FortiAnalyzer in three projects. I configured it to manage approximately 50 Fortinet devices.

My job was to add new FortiGates and to analyze data on FortiAnalyzer. The system provides valuable insights through information, graphics, and reports. FortiAnalyzer allows easy configuration of routing status protocols, IP interfaces, and DNS settings. Its operation system makes it easier than using Cisco's iOS.

We use Splunk over SOC, the security operations center because it is more user-friendly for our team. Our team uses the solution extensively for traffic analysis and threat hunting.

The event handling solution in the platform is very good and useful. We can automate event-based handling solutions for example, if we have some events or issues on top of traffic, it triggers that function, and it can even get API for our firewall to ban that IP, or we can add a playbook for our attack, into the solution, and just manage the whole network based on that playbook.

It's working well enough. The solution allows fetching multiple logs across different firewalls. At our company, we use FortiAnalyzer to fetch event and traffic logs. 

In terms of productivity enhancement in our organization, I would rate the solution an eight out of ten. 

Fortinet FortiAnalyzer is a solution that focuses specifically on analyzing and monitoring the performance and security of Fortinet security products. By utilizing this solution in conjunction with Fortinet products such as FortiSwitch, FortiGate, and FortiClient, the user is able to centralize all logging services and analysis in one place, allowing for easy correlation, playbook automation, and comprehensive visibility within the Fortinet services. However, the limitations of the solution are highlighted by the speaker, who wishes for expanded compatibility with other non-Fortinet products such as servers.

One of the greatest advantages of Fortinet FortiAnalyzer is its ability to integrate with a variety of software and solutions, providing comprehensive visibility into the network. The solution's strength lies in its capability to work with Fortinet's own products, such as the FortiAP access point, which allows for deep monitoring, automation, correlation, and incident management. However, this functionality is not present when utilizing other products, such as those from Cisco, limiting the visibility and benefits that can be gained.

We use FortiAnalyzer as our indicator of compromise solution, and I'm also running some SOC into it. 

FortiAnalyzer's reporting features like graphs, threat intelligence, and vulnerabilities analysis are helpful. Fortinet knows how to do reporting. You can customize your reports to show exactly what you want to analyze. It's user-friendly and doesn't require a lot of effort. 

The hub is another feature that's good to use. FortiAnalyzer can be connected to other Fortinet devices via the hub. It isn't restricted, and it's all controlled by FortiManager. It can also integrate all the opcodes to one box. 

I use the solution in my company to analyze logs and generate reports.

The most valuable features of the solution are report generation and traffic logs. The online traffic report in Fortinet FortiAnalyzer is very good. There are different types of reports that one can generate with the tool.