Fortinet FortiEDR Reviews

For FortiDR, it serves as an add-on to the firewalls and the SD-WAN solution that I am already using from Fortinet. Basically, it is an additional layer on top of my existing network environment. 

Initially, when I started, I bought FortiGate from Fortinet. After that, I implemented tools like webmail. Then, after maybe six months to a year, I decided to switch from my existing EDR to other vendor solutions, like Kaspersky, Trend Micro, or Broadcom, and eventually switched to Fortinet since it's interoperable with the firewall I am already using. 

The EDR became the next step in implementing Fortinet solutions for me.

The data collected from the endpoint where the EDR is installed is highly valuable for me. The firewall and FortiEDR Analyzer use this data for analytics, collecting it from the endpoint. This data allows for comprehensive analysis and better security measures. The collection and analysis of data are essential features that enhance its functionality significantly within my network.

We use the solution for endpoint protection. Since we also use Windows Defender, we don't go for the extended protection. We're just using the normal EDR services from Fortinet.

The solution's most valuable features are the investigation tab and the granular control that Fortinet provides. The solution helps control all the steps of different endpoints, like controlling the USBs and the flow of data.

Fortinet FortiEDR is pretty helpful in detecting and mitigating zero-day threats because it works at the granular level. It promptly blocks any suspicious software that it has not seen before.

We use FortiEDR for EDR on our internal environment, which includes about 2,900 endpoints.  

I like FortiClient EMS. FortiEDR has a lot of great features like lockdown mode, remote wipes, and encryption. I can set malware outbreak policies and controls for detecting abnormalities. I can also simulate phishing attacks. 

The product detects and blocks threats and is more proactive than firewalls.

Our problem with the EDR platform is that another company manages it. We don't manage it. We give them the infrastructure, and they give us the information in return as a service. Once, we had an event that was locked and blocked, but information about it came to us two or three days later. That isn't the way it should be. We see blocked functions and events but don't get information about them. You ask why something doesn't work before checking and seeing that EDR has blocked an event, but why is it blocked? This information is not accessible by our company as we are customers. We want a solution that works in our network and only in our network. We have to have all the information, such as what happened, when it happened, and why it happened, and that information should be provided at the moment, not two days later.

Our primary use cases for Fortinet FortiEDR are cash registers and endpoint, and point of sales.

The reason we originally started with FortiClient with one of our clients in the first place was that they were able to have legacy cash registers, a really old technology, which we had to get to run in a small resource space, and FortiClient, which was the predecessor, allowed us to literally pick and choose what features we wanted in the client and reduce its size, which you couldn't do with any other types of clients that were out there. That's how we started with that.

It is mostly on premise and any cloud services that we use are directly from Fortinet themselves. I would call that public cloud. We do run some of the customer's environment in private cloud, basically co-location. This has provided the services back to their dataset. I am talking about Fortinet's cloud for the public. For the private stuff it was basically out at Q9, which is the co-location provider.

Fortinet FortiEDR has the ability to customize the footprint of the client or the agents on the device and on the endpoint.

I utilize Fortinet FortiEDR for endpoint protection.

Our security posture improved since implementing Fortinet FortiEDR in terms of our overall setup, as we've experienced significant enhancements. We now have streamlined operations, better dashboards, and improved monitoring capabilities, consolidating multiple functions into a single solution. Previously, we were managing three separate vendors alongside support from our IT arm and outsourced assistance. With FortiEDR, everything is integrated under one dashboard, making our processes more efficient.

Fortinet FortiEDR effectively manages threat detection and response in our daily operations with great robustness. Previously, we had to rely on two separate Palo Alto devices for bandwidth management, both lacking real-time capabilities. Our search engine, detection engine, and database were also disjointed. However, with FortiEDR, we've achieved parity in functionality for both functions. Consequently, our bandwidth performance has seen a significant boost, providing users with a stable stream to work with.

The implementation of automation has had a significant impact on our team's workload. As we operate shared services centers across the APAC region, having this infrastructure in place has provided us with visibility across all three sites. This visibility, facilitated by automation, is particularly beneficial for higher management and decision-makers. It's a notable advancement for our operations.

FortiEDR has played a crucial role in mitigating the impact of breaches within our healthcare IT industry. Given the vast amount of data we handle and the real-time nature of data processing via APIs and centralized databases, FortiEDR has streamlined our operations. It allows us to process data at our own pace without encountering significant obstacles or requiring extensive workarounds. Essentially, it has provided us with a seamless transition between sandbox and production environments, making our workflow smoother and more efficient.

At my last job, we used FortiEDR to secure endpoints for 8,000 employees across MacBooks and Linux machines, ensuring the protection of backups and VPN connections.

In 2020, we faced a significant challenge with remote work in Brazil, where BitLocker was utilized. FortiEDR proved invaluable as it allowed us to create a secure process for remote access.

I oversee Fortinet solutions, focusing on endpoint security and processing.

We deployed the FortiEDR solution for our remote workforce as well.

FortiEDR excels in first-line defense for endpoints against malware, incorporating solutions for antivirus and data loss prevention, especially for confidential documents on the user's device. 

We are primarily using the solution for endpoint detection response. It's endpoint security.

We do POCs for people who wish to purchase the product.

The performance has been fine.

It's good for the detection and response to threats.

The setup is pretty simple.

Technical support has been decent in the past.

We have seen an ROI. It is worth the cost.