Fortinet FortiSIEM Reviews

Name: Fortinet FortiSIEM
Brand: Fortinet
Rating: 3.8 (71 reviews)

3.8 out of 5

71 reviews
82% willing to recommend

2,340 followers

What is Fortinet FortiSIEM?

FortiSIEM (formerly AccelOps 4) provides an actionable security intelligence platform to monitor security, performance and compliance through a single pane of glass.

Get the Fortinet FortiSIEM Buyer's Guide and find out what your peers are saying about Fortinet FortiSIEM, Wazuh, Splunk Enterprise Security and more!

Fortinet FortiSIEM is the #8 ranked solution in top Security Information and Event Management (SIEM) solutions. PeerSpot users give Fortinet FortiSIEM an average rating of 7.6 out of 10. Based on the analysis of the 71 most recent Fortinet FortiSIEM reviews, the overall sentiment is positive, with a sentiment score of 6.9. Fortinet FortiSIEM is most commonly compared to Wazuh: Fortinet FortiSIEM vs Wazuh. Fortinet FortiSIEM is popular among the large enterprise segment, accounting for 53% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 17% of all views.

Helped 816,406 peers since 2012

Featured reviews

HamedWasel

Senior Network Security Engineer at Orange

FortiSIEM needs to expand its integration with third-party vendors. I don't know if Forcepoint has been added, but there were limited resources for integrating Forcepoint solutions when we implemented FortiSIEM. It integrates well with other Fortinet products and solutions from established cybersecurity companies like Palo Alto but doesn't integrate with some of the newer vendors. I would also like to see FortiSIEM add more of the features available in FortiSOAR. You need to buy two separate solutions to get these features, but they should all be available in one product.

Read full review

Babar Shahbaz

Head of Product Management (Cloud & Digital) at Pakistan Telecommunication Company Limited

Fortinet has a unique model, which they call MSSP, managed services security partner. They select a telco in a country, partner with them, and offer them the certification track. We are an MSSP partner in Pakistan. FortiSIEM and FortiSOAR, their overall solutions that are there for threat mitigation, visibility, control, et cetera, is well integrated. We like the integration of all of these Fortinet platforms together. Everything is integrated well, and we are able to sell that as a service to our customers. There's a VR feature that is basically segmenting these firewalls, these security devices. Using that feature, we can make a network slice for each and every enterprise customer. All of the infrastructure is deployed in our data center, yet customer uses it as if it is their own.

Read full review

Haiyang Lu

System Engineer - Security at a educational organization with 1,001-5,000 employees

The challenge I face with Fortinet FortiSIEM is the lack of support. I need to figure out many things by myself. Getting support for the solution is very hard. The support person is pretty good and nice. I need to go through the professional service channel for more professional support. Since my company cannot pay for professional services, I have to figure many things out myself. For example, I have to figure out the best approach to design an architecture to fit into my environment. Then, I will go through the standard support channel to get confirmation from tech support, but they cannot help. I will return to the sales channel and try to get the right architecture for our environment approved. Fortinet FortiSIEM is a new product, and Fortinet only supports one or two people. Fortinet FortiSIEM is not a mature solution. Fortinet should educate existing customers about new features that can help them. Like Microsoft products, Fortinet should provide training or teaching material on YouTube. Fortinet provides free training on its website, but sometimes going through the whole course takes too long. I hope Fortinet improves this part. Fortinet should provide 30 minutes or an hour-long webinars where we can learn lots of new things. Without this information, customers have to try to figure out things by themselves. Many smart engineers can do that, but they may not have enough resources or time to do it.

Read full review

Fortinet FortiSIEM mindshare

As of November 2024, the mindshare of Fortinet FortiSIEM in the Security Information and Event Management (SIEM) category stands at 2.9%, up from 2.9% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Key learnings from peers

Last updated Oct 31, 2024

Valuable Features

Fortinet FortiSIEM’s most valuable features include robust event correlation, comprehensive dashboards, ease of integration, and automation capabilities. Users appreciate the ability to monitor both SOC and NOC operations, advanced analytics, and customizable reports. With real-time monitoring, dynamic discovery, and built-in compliance reporting, it offers visibility and threat detection. It effectively collects data from varied sources and integrates seamlessly with Fortinet and third-party technologies, ensuring efficient alerting and robust security processes.

"The most valuable feature is the ability to view all the network events on a single pane and find the point of contact or point of the incident."
"The most valuable features of the solution is its integration with other technologies, especially its ability to collect logs from Cisco and Aruba devices along with Fortinet products."
"The tool's most valuable feature stems from the fact that I can see a complete analysis, like all the incidents that have happened, and it detects everything in real-time."

Room for Improvement

Fortinet FortiSIEM requires improvement in various areas including licensing options for small businesses and simplifying configuration. Dashboards and interface need enhancements for better usability. Configuration challenges arise due to complex initial setup and lack of support in log integration and API updates. Users find reporting features limited and integration with third-party vendors lacking. Documentation and support responsiveness are inadequate. Improved AI features and stability, along with better marketing efforts, are also necessary.

"There could be improvements like introducing some solutions directly into FortiSIEM to avoid the need for separately purchasing additional tools like FortiStore."
"The tool's technical team's response time is too high, and they are not available even when they know that there are many pending issues."
"The solution's technical support didn't help our company a lot."

ROI

Organizations using Fortinet FortiSIEM have generally experienced a return on investment. They serve clients through Fortinet FortiSIEM and notice improvements in their security levels, which contributes to their ROI. While some users track this financial measure, others consider it a necessary cost of doing business without linking it directly to revenue generation. Nonetheless, multiple users have confirmed positive returns from their use of Fortinet FortiSIEM.

Pricing

Fortinet FortiSIEM's pricing is perceived as competitive and cost-effective compared to other solutions like Splunk, EventTracker, and QRadar. Many users indicate it is cheaper than similar products and offers flexible licensing options, including perpetual and subscription models. Costs are often based on events per second or device monitoring, which can add complexity. While generally affordable, the solution might appear expensive in some markets, especially when additional resources for cloud infrastructure or custom parsing are needed.

"If one is cheap and ten is expensive. I rate the tool's price as an eight out of ten. Compared with Splunk or Oracle, Fortinet is cheap."
"The tool is really expensive. For what the tool does for our team, the price is fair."
"Fortinet FortiSIEM is not an expensive solution."

Popular Use Cases

Organizations primarily use Fortinet FortiSIEM for comprehensive network and security monitoring. It aggregates logs, manages incidents, and aids in detecting threats and anomalies within infrastructures. Users deploy it for security information management, event analysis, and performance monitoring across devices like firewalls, servers, and applications. The tool supports log collection, user behavior analytics, malware detection, and threat intelligence integration, providing real-time insights into IT environments for enhanced security posture and compliance reporting.

Service and Support

Customer service for Fortinet FortiSIEM receives mixed feedback; it's often praised for being responsive and helpful, though some experience delays. Technical support is generally considered knowledgeable and quick, but responsiveness varies, with some delays and hierarchical hurdles reported. Some users find it excellent, while others see room for improvement in speed and accessibility. Technical proficiency is highly regarded, but users highlight variability in satisfaction levels. Overall, customer service is rated high by some, yet inconsistent by others.

Deployment

Many found Fortinet FortiSIEM setup straightforward, although some mentioned it as complex due to initial unfamiliarity and configuration challenges. Performance issues and the need for extensive log and security configurations were noted as difficulties. Deployment time varied from days to months depending on network size and complexity. Help from support and third-party services was often required, and licensing concerns were highlighted. Installation generally improved in newer versions.

Scalability

Fortinet FortiSIEM is recognized for its scalability, allowing flexibility and quick expansion without significant cost increases. It suits all business sizes, from small to enterprise-level. While some report limitations with architecture and licensing, others appreciate the ease of adding users and handling events. Fortinet FortiSIEM's scalability receives positive ratings, although optimal usage often requires a substantial investment in hardware resources. Many users manage to effectively expand Fortinet FortiSIEM as their operational needs grow.

Stability

Fortinet FortiSIEM is generally stable, with many users reporting consistent reliability and few issues. Some encountered bugs during updates, but these were often resolved without affecting performance. Stability is rated highly, frequently between eight to ten out of ten. While a few faced problems with third-party integration or database issues, many find the platform's stability satisfactory, requiring minimal reboots or adjustments. Regular updates and configurations by professionals enhance its stability further.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Fortinet FortiSIEM Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

17%

Government

Financial Services Firm

Manufacturing Company

Retailer

University

Educational Organization

Comms Service Provider

Energy/Utilities Company

Healthcare Company

Construction Company

Real Estate/Law Firm

Non Profit

Insurance Company

Legal Firm

Media Company

Outsourcing Company

Wholesaler/Distributor

Recreational Facilities/Services Company

Hospitality Company

Performing Arts

Pharma/Biotech Company

Transportation Company

Consumer Goods Company

Logistics Company

Compare Fortinet FortiSIEM with alternative products

Learn more about Fortinet FortiSIEM

Companies around the world use FortiSIEM for the following use cases:

Threat management and intelligence that provide situational awareness and anomaly detection
Alleviating compliance mandate concerns for PCI, HIPAA and SOX
Managing “alert overload”
Handling the “too many tools” reporting issue
Addressing the MSPs/MSSPs pain of meeting service level agreements

Fortinet FortiSIEM was previously known as FortiSIEM, AccelOps.

Product Video

Fortinet FortiSIEM customers

FortiSIEM has hundreds of customers worldwide in markets including managed services, technology, financial services, healthcare, and government. Customers include Aruba Networks, Compushare, Port of San Diego, Cleveland Indians, Infoblox, Healthways, and Referentia.