Fortinet FortiSIEM Reviews

Name: Fortinet FortiSIEM
Brand: Fortinet
Rating: 3.8 (72 reviews)

3.8 out of 5

72 reviews
82% willing to recommend

2,340 followers

What is Fortinet FortiSIEM?

FortiSIEM (formerly AccelOps 4) provides an actionable security intelligence platform to monitor security, performance and compliance through a single pane of glass.

Get the Fortinet FortiSIEM Buyer's Guide and find out what your peers are saying about Fortinet FortiSIEM, Wazuh, Splunk Enterprise Security and more!

Fortinet FortiSIEM is the #8 ranked solution in top Security Information and Event Management (SIEM) solutions. PeerSpot users give Fortinet FortiSIEM an average rating of 7.6 out of 10. Based on the analysis of the 72 most recent Fortinet FortiSIEM reviews, the overall sentiment is positive, with a sentiment score of 6.8. Fortinet FortiSIEM is most commonly compared to Wazuh: Fortinet FortiSIEM vs Wazuh. Fortinet FortiSIEM is popular among the large enterprise segment, accounting for 53% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 17% of all views.

Helped 817,457 peers since 2012

Featured reviews

HamedWasel

Senior Network Security Engineer at Orange

FortiSIEM needs to expand its integration with third-party vendors. I don't know if Forcepoint has been added, but there were limited resources for integrating Forcepoint solutions when we implemented FortiSIEM. It integrates well with other Fortinet products and solutions from established cybersecurity companies like Palo Alto but doesn't integrate with some of the newer vendors. I would also like to see FortiSIEM add more of the features available in FortiSOAR. You need to buy two separate solutions to get these features, but they should all be available in one product.

Read full review

Babar Shahbaz

Head of Product Management (Cloud & Digital) at Pakistan Telecommunication Company Limited

Fortinet has a unique model, which they call MSSP, managed services security partner. They select a telco in a country, partner with them, and offer them the certification track. We are an MSSP partner in Pakistan. FortiSIEM and FortiSOAR, their overall solutions that are there for threat mitigation, visibility, control, et cetera, is well integrated. We like the integration of all of these Fortinet platforms together. Everything is integrated well, and we are able to sell that as a service to our customers. There's a VR feature that is basically segmenting these firewalls, these security devices. Using that feature, we can make a network slice for each and every enterprise customer. All of the infrastructure is deployed in our data center, yet customer uses it as if it is their own.

Read full review

Haiyang Lu

System Engineer - Security at a educational organization with 1,001-5,000 employees

The challenge I face with Fortinet FortiSIEM is the lack of support. I need to figure out many things by myself. Getting support for the solution is very hard. The support person is pretty good and nice. I need to go through the professional service channel for more professional support. Since my company cannot pay for professional services, I have to figure many things out myself. For example, I have to figure out the best approach to design an architecture to fit into my environment. Then, I will go through the standard support channel to get confirmation from tech support, but they cannot help. I will return to the sales channel and try to get the right architecture for our environment approved. Fortinet FortiSIEM is a new product, and Fortinet only supports one or two people. Fortinet FortiSIEM is not a mature solution. Fortinet should educate existing customers about new features that can help them. Like Microsoft products, Fortinet should provide training or teaching material on YouTube. Fortinet provides free training on its website, but sometimes going through the whole course takes too long. I hope Fortinet improves this part. Fortinet should provide 30 minutes or an hour-long webinars where we can learn lots of new things. Without this information, customers have to try to figure out things by themselves. Many smart engineers can do that, but they may not have enough resources or time to do it.

Read full review

Fortinet FortiSIEM mindshare

As of December 2024, the mindshare of Fortinet FortiSIEM in the Security Information and Event Management (SIEM) category stands at 3.2%, down from 3.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Key learnings from peers

Last updated Nov 27, 2024

Valuable Features

Fortinet FortiSIEM offers valuable features like security notifications, granular monitoring, and automation for dynamic service discovery. Its intelligence in alerting, integration with multiple platforms, and SOC/NOC operations enhance its utility. The dashboard and scalability, along with threat detection through advanced analytics and anomaly-reporting alarms, provide operational oversight. With robust log correlation, flexible reporting, and ease of use, it effectively combines security and performance monitoring while offering cost-efficient, comprehensive integration and reporting capabilities.

"The most fascinating aspect of FortiSIEM is its integration with the MITRE ATT&CK framework."
"The most valuable feature is the ability to view all the network events on a single pane and find the point of contact or point of the incident."
"The most valuable features of the solution is its integration with other technologies, especially its ability to collect logs from Cisco and Aruba devices along with Fortinet products."

Room for Improvement

Fortinet FortiSIEM experiences challenges with complex configuration and licensing options. Users find the dashboards overwhelming and report integration issues with third-party platforms. Support services are inadequate, leading to self-reliance for problem-solving. Upgrades can disrupt operations, and the interface requires modernization. Reporting capabilities need enhancements for ease of use, and the system demands high resources for optimal performance. Improvements in documentation, user experience, and API updates would benefit overall functionality and client satisfaction.

"FortiSIEM is a bit resource-hungry, so work should be done on hardware resource utilization to consume less hardware."
"There could be improvements like introducing some solutions directly into FortiSIEM to avoid the need for separately purchasing additional tools like FortiStore."
"The tool's technical team's response time is too high, and they are not available even when they know that there are many pending issues."

ROI

Fortinet FortiSIEM has provided a positive return on investment for multiple users, who report benefiting from its security capabilities. Several entities acknowledge receiving returns by using it to serve clients. While most users see a profitable outcome, one notes they classify it as a business cost without focusing on generating revenue. Despite this, there is an overall consensus that results are satisfactory from a security perspective, leading to a beneficial return.

Pricing

Fortinet FortiSIEM pricing is perceived as affordable and competitive compared to similar solutions like Splunk, Cisco, and QRadar. Users appreciate its cost-effectiveness for the features provided, although some highlight potential complexity in licensing, particularly for additional features or high EPS volumes. Options include perpetual licenses with three-year support renewals and subscription-based models. Discounts are common, making it accessible for most enterprises, though some find initial setup costs potentially prohibitive. Flexibility in pricing accommodates various customer needs.

"If one is cheap and ten is expensive. I rate the tool's price as an eight out of ten. Compared with Splunk or Oracle, Fortinet is cheap."
"The tool is really expensive. For what the tool does for our team, the price is fair."
"Fortinet FortiSIEM is not an expensive solution."

Popular Use Cases

Fortinet FortiSIEM is used for network and security monitoring, threat detection, and incident management by integrating logs from various sources. It caters to diverse needs such as malware detection, behavior monitoring, and log collection. Organizations employ it for performance and security monitoring, user analytics, and security information management. It supports cloud and on-premises deployments, enabling real-time threat detection and compliance reporting while providing extensive customization for monitoring infrastructure and protection.

Service and Support

Fortinet FortiSIEM customer service is generally positive, with helpful and friendly interactions. Some find it occasionally lacking in responsiveness. Technical support is regarded as knowledgeable and effective in resolving issues, although there are frequent concerns about slow response and resolution times. Many users appreciate their expertise and responsiveness, while some experience frustrations with delayed support and escalation processes. Fortinet FortiSIEM support services show room for improvement, particularly in response times and access to local assistance.

Deployment

Fortinet FortiSIEM's initial setup varies in complexity based on configuration needs and network size. While many find it straightforward, challenges arise with performance issues and specific configurations. Complexity typically emerges during initial configuration and integration with logs, but familiarity simplifies the process. The deployment time ranges widely, from a few days to months, depending on project scope and specific requirements. Some users suggest that while initial steps are guided, advanced configurations require deeper understanding.

Scalability

Fortinet FortiSIEM is often praised for its scalability, handling increased workloads efficiently and supporting various business sizes. It allows easy expansion geographically and in reporting capacities. Customers highlight its affordability and flexibility, although a few mention limitations such as complexity in computing resources, the licensing model, and architectural challenges. Generally, Fortinet FortiSIEM adapts well to the needs of medium and large enterprises, supporting further growth as needed.

Stability

Numerous users report Fortinet FortiSIEM as stable and reliable. Many mention bug fixes during updates, though performance remains generally unaffected. Some have experienced minor stability issues like parser engine crashes and lags, but these are infrequent. Regular updates contribute to maintaining stability. Stability is rated highly, often between seven and ten on a scale. Resource usage is noted, yet no crashes or major glitches impact functionality. It remains stable across various deployments and use cases.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Fortinet FortiSIEM Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

Government

Manufacturing Company

Retailer

University

Educational Organization

Comms Service Provider

Energy/Utilities Company

Healthcare Company

Construction Company

Real Estate/Law Firm

Non Profit

Insurance Company

Legal Firm

Media Company

Outsourcing Company

Wholesaler/Distributor

Recreational Facilities/Services Company

Hospitality Company

Performing Arts

Pharma/Biotech Company

Transportation Company

Consumer Goods Company

Logistics Company

Marketing Services Firm

Compare Fortinet FortiSIEM with alternative products

Learn more about Fortinet FortiSIEM

Companies around the world use FortiSIEM for the following use cases:

Threat management and intelligence that provide situational awareness and anomaly detection
Alleviating compliance mandate concerns for PCI, HIPAA and SOX
Managing “alert overload”
Handling the “too many tools” reporting issue
Addressing the MSPs/MSSPs pain of meeting service level agreements

Fortinet FortiSIEM was previously known as FortiSIEM, AccelOps.

Product Video

Fortinet FortiSIEM customers

FortiSIEM has hundreds of customers worldwide in markets including managed services, technology, financial services, healthcare, and government. Customers include Aruba Networks, Compushare, Port of San Diego, Cleveland Indians, Infoblox, Healthways, and Referentia.