Fortinet FortiSIEM vs USM Anywhere comparison

Fortinet and LevelBlue are both solutions in the Security Information and Event Management (SIEM) category. Fortinet is ranked #8 with an average rating of 7.8, while LevelBlue is ranked #29 with an average rating of 7.3. Fortinet holds a 3.2% mindshare in SIEM, compared to LevelBlue’s 1.2% mindshare. Additionally, 82% of Fortinet users are willing to recommend the solution, compared to 92% of LevelBlue users who would recommend it.

Fortinet FortiSIEM

Read 73 Fortinet FortiSIEM reviews

5,005 Views
3,335 Comparison Views

82% willing to recommend

USM Anywhere

Read 115 USM Anywhere reviews

3,229 Views
2,226 Comparison Views

92% willing to recommend

Fortinet FortiSIEM

USM Anywhere

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

USM Anywhere and Fortinet FortiSIEM are both popular solutions in the SIEM market. Based on user reviews, Fortinet FortiSIEM seems to have the upper hand due to its robust features that justify its higher cost.

Features: USM Anywhere users value the product's threat detection, compliance capabilities, and ease of use. Fortinet FortiSIEM stands out with its scalability, advanced analytics, and comprehensive monitoring tools.

Room for Improvement: USM Anywhere could benefit from better performance, more frequent updates, and improved reporting. Fortinet FortiSIEM users desire an enhanced alerting system, more intuitive navigation, and simplified administration.

Ease of Deployment and Customer Service: USM Anywhere is praised for its straightforward deployment process and responsive customer service. Fortinet FortiSIEM, while more complex to deploy, provides excellent customer support to ease the process.

Pricing and ROI: USM Anywhere is seen as more cost-effective with a quicker ROI. Fortinet FortiSIEM, despite higher initial setup costs, delivers significant long-term value through its extensive feature set.

To learn more, read our detailed Fortinet FortiSIEM vs. USM Anywhere Report (Updated: December 2024).

Buyer's Guide

Fortinet FortiSIEM vs. USM Anywhere

December 2024

Download the complete report

Helped 824,053 peers since 2012

Categories and Ranking

Fortinet FortiSIEM

Ranking in Security Information and Event Management (SIEM)

8th

Average Rating

7.6

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

USM Anywhere

Ranking in Security Information and Event Management (SIEM)

29th

Average Rating

8.4

Reviews Sentiment

6.9

Number of Reviews

115

Ranking in other categories

Log Management (37th), Endpoint Detection and Response (EDR) (52nd), Compliance Management (12th)

Mindshare comparison

As of December 2024, in the Security Information and Event Management (SIEM) category, the mindshare of Fortinet FortiSIEM is 3.2%, up from 3.3% compared to the previous year. The mindshare of USM Anywhere is 1.2%, down from 2.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Featured Reviews

HamedWasel

Senior Network Security Engineer at Orange

It's cheaper than other solutions with the same features but lacks integration with many third-party vendors

FortiSIEM needs to expand its integration with third-party vendors. I don't know if Forcepoint has been added, but there were limited resources for integrating Forcepoint solutions when we implemented FortiSIEM. It integrates well with other Fortinet products and solutions from established cybersecurity companies like Palo Alto but doesn't integrate with some of the newer vendors. I would also like to see FortiSIEM add more of the features available in FortiSOAR. You need to buy two separate solutions to get these features, but they should all be available in one product.

Read full review

Omer Jamil

Supervisor, Security Operations at Bpm

An easy-to-deploy tool that needs to improve its vulnerability scanning feature

To those who plan to use the solution, I would suggest that they go through the documentation and online training models available for free, as it can help you deploy the product quickly while also being helpful in areas where there is a need to understand correlation and monitoring. I rate the overall product a seven out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"FortiSIEM allows you to match IPs with threat intelligence feeds from sources like Kaspersky or Anomali, adding valuable context."

"Easy alert setup which enables different alerts in different categories."

"I like FortiSIEM because it integrates natively with our other Fortinet solutions and the Fortinet Fabric, but it also integrates with Cisco, Palo Alto and other security fabrics."

"There are things like dashboards and reports (pre-configured and custom) that let me know that things are operating the way they should be, and when they are not."

"We like the integration of all of these Fortinet platforms together. Everything is integrated well, and we are able to sell that as a service to our customers."

"The most valuable feature is the anomaly-reporting alarms."

"It's very easy for anyone to work with."

"We have found the most important features in Fortinet FortiSIEM to be the correlation, file utility check, latest file, and hash changes. These features are important for us."

More Fortinet FortiSIEM pros

"This is a USM, so being able to get all the features under one roof makes it a good product with good new features."

"In terms of monitoring, my best feature would be the monitoring of components across the network. It monitors the respective nodes and any new node that comes onto the network and provides reports. The reporting dashboards are really helpful for management in terms of making decisions around patch management."

"The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful."

"AlientVault has helped us in improving our visualization and incident response during cybersecurity situations."

"The best thing about AlienVault USM is it being a “Jack-of-All Trades” solution. It provides SIEM, HIDS/NIDS, FIM, NetFlow, Asset Management, Vulnerability Management, etc., under one USM platform. None of the commercial SIEM vendors like ArcSight, McAfee, etc., can boast of such a diverse feature set."

"SIEM log collection is great, and all of the rules that support updates with maintenance."

"Vulnerability scanning helped out shortcomings of what was not patched in the past and what needed to be patched. This assisted with fine tuning the environment for compliance."

"The IDS and the threat intelligence are very useful. They are very intuitive and data-rich."

More USM Anywhere pros

Cons

"The challenge I face with Fortinet FortiSIEM is the lack of support."

"Fortinet FortiSIEM could improve by having a signature update."

"With FortiSIEM, the issue has to do with the ways we can generate a report. It's not as flexible compared to that with other SIEM tools, like Splunk."

"Fortinet FortiSIEM is a little out of sight and needs more marketing efforts to be popular in the market."

"Not very good on non-API features, lacks that functionality."

"Does not have load-sharing or high-availability, and these are important things to implement. I can do the same things in another way, but not naturally having these features makes it complicated."

"We need to see incident reports about the event log, without events from the administrator or through human interaction."

"They should enhance the solution's AI capabilities, including XDR and EDR."

More Fortinet FortiSIEM cons

"There is room for improvement in Log parsing."

"I feel that some areas of improvement would be vulnerability scanning. We use a separate product that seems to do a much better job."

"There could be some type of integration with our existing portal. We have our own customer portals, and it would be good if there was an integration so that our portal can provide reports. There could be some type of API into the AlienVault system with the USM system so that it is easy to show the customers high-level reports of the system through our portal."

"We develop additional rules and scripts to make it more usable."

"I've been told that AlienVault doesn't have a full version of NES running in there, but I'm not sure if that's accurate or if my engineer made it that way. I'm not sure he was completely honest either because we had NES in the environment before. Those tools could be improved because AlienVault is a SIEM, and it added all these other features."

"The price of AT&T AlienVault USM could be reduced."

"One area that has room for improvement is storage. AllienVault is a good place to put logs, but sometimes it's a tough place to go get logs... The logger can only hold so much data. If they improved that, that would help."

"It was easy on PoC, but when we got to the product it was different story. We had to learn the product again and got feeling that the PoC was a different product."

More USM Anywhere cons

Pricing and Cost Advice

"There is a need to make yearly payments towards the licensing charges attached to the product. The free version license of the product is available for two months."

"The price of Fortinet FortiSIEM was reasonable compared to other solutions."

"The tool is really expensive. For what the tool does for our team, the price is fair."

"Manageable, however would be better as pay as you go versus CapEX."

"They have a yearly subscription."

"The solution is available for both, perpetual and subscription licenses."

"Please be cheaper and more simplified."

"The price of the solution is expensive. The license is scalable. If there are 10 devices it is simple to license."

More Fortinet FortiSIEM pricing and cost advice

"AlienVault is flexible on their pricing for unlimited licenses."

"It is affordable, and it also has many features that the premium products such as ArcSight and QRadar have. It is a very good platform for a SIEM solution. Everything is included in the price."

"We checked out several competitors. For what it can do and the cost, it was the best option!"

"They charge a license based on the storage. ATT AlienVault USM is a less expensive solution than IBM QRadar."

"We ran a few PoCs. The price and feature set were the best with AlienVault."

"Use the AlienVault team. They are helpful and the documentation that they provide is second to none."

"I don't think the product's pricing is a good value because they try to raise the price 50 percent every year... AlienVault needs to understand that not all customers are huge enterprises... Their sales team is way too aggressive. The price they advertise is not always the price you get."

"The price for this solution is very good, but since the features do not work the price is expensive."

More USM Anywhere pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

824,053 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

Government

Manufacturing Company

Computer Software Company

18%

Educational Organization

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Fortinet FortiSIEM?

Fortinet FortiSIEM needs to provide better API integrations to users.

See all answers

What is your experience regarding pricing and costs for Fortinet FortiSIEM?

Fortinet FortiSIEM is high-priced. Previously, its licensing model required separate licenses for devices, agents, and EPS, which was quite rigid. The revised model is subscription-based and more f...

See all answers

What needs improvement with Fortinet FortiSIEM?

FortiSIEM is a bit resource-hungry, so work should be done on hardware resource utilization to consume less hardware. Another major problem is its licensing model, which initially required separate...

See all answers

What do you like most about AT&T AlienVault USM?

The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful.

See all answers

What is your experience regarding pricing and costs for AT&T AlienVault USM?

The pricing is amazing and really cheap.

See all answers

What needs improvement with AT&T AlienVault USM?

There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks. It is also limited when used with bigger products and has complex password requirements.

See all answers

Comparisons

IBM Security QRadar vs Fortinet FortiSIEM

Compared 13% of the time

Wazuh vs Fortinet FortiSIEM

Compared 12% of the time

Splunk Enterprise Security vs Fortinet FortiSIEM

Compared 10% of the time

Microsoft Sentinel vs Fortinet FortiSIEM

Compared 8% of the time

ThousandEyes vs Fortinet FortiSIEM

Compared 7% of the time

More Fortinet FortiSIEM Competitors

AlienVault OSSIM vs USM Anywhere

Compared 18% of the time

Wazuh vs USM Anywhere

Compared 17% of the time

Splunk Enterprise Security vs USM Anywhere

Compared 10% of the time

Rapid7 InsightIDR vs USM Anywhere

Compared 9% of the time

IBM Security QRadar vs USM Anywhere

Compared 8% of the time

More USM Anywhere Competitors

Product Reports

Buyer's Guide

Fortinet FortiSIEM

December 2024

Download Fortinet FortiSIEM product report

Buyer's Guide

USM Anywhere

November 2024

Download USM Anywhere product report

Also Known As

FortiSIEM, AccelOps

AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity

Learn More

Fortinet

Video not available

LevelBlue

Overview

FortiSIEM (formerly AccelOps 4) provides an actionable security intelligence platform to monitor security, performance and compliance through a single pane of glass.

Companies around the world use FortiSIEM for the following use cases:

Threat management and intelligence that provide situational awareness and anomaly detection
Alleviating compliance mandate concerns for PCI, HIPAA and SOX
Managing “alert overload”
Handling the “too many tools” reporting issue
Addressing the MSPs/MSSPs pain of meeting service level agreements

USM Anywhere centralizes security monitoring of networks and devices in the cloud, on premises, and in remote locations, helping you to detect threats virtually anywhere.

Discover

Network asset discovery
Software & services discovery
AWS asset discovery
Azure asset discovery
Google Cloud Platform asset discovery

Analyze

SIEM event correlation, auto-prioritized alarms
User activity monitoring
Up to 90-days of online, searchable events

Detect

Cloud intrusion detection (AWS, Azure, GCP)
Network intrusion detection (NIDS)
Host intrusion detection (HIDS)
Endpoint Detection and Response (EDR)

Respond

Forensics querying
Automate & orchestrate response
Notifications and ticketing

Assess

Vulnerability scanning
Cloud infrastructure assessment
User & asset configuration
Dark web monitoring

Report

Pre-built compliance reporting templates
Pre-built event reporting templates
Customizable views and dashboards
Log storage

Sample Customers

FortiSIEM has hundreds of customers worldwide in markets including managed services, technology, financial services, healthcare, and government. Customers include Aruba Networks, Compushare, Port of San Diego, Cleveland Indians, Infoblox, Healthways, and Referentia.

Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom

Buyer's Guide

Fortinet FortiSIEM vs. USM Anywhere

December 2024

Free Report: Fortinet FortiSIEM vs. USM Anywhere

Find out what your peers are saying about Fortinet FortiSIEM vs. USM Anywhere and other solutions. Updated: December 2024.

DOWNLOAD NOW

824,053 professionals have used our research since 2012.

See our Fortinet FortiSIEM vs. USM Anywhere report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.