Fortinet FortiAnalyzer Reviews

We take all the logs from FortiGate. 

We have it deployed on-premises, and we are definitely using its latest version because we are creating a new virtual machine.

Special notifications about compromised phones are valuable because we have some guest networks, and sometimes, people are connecting phones that are connected to compromised websites. We want to be informed about it. We sometimes have some cases where we want to analyze the connection from inside to outside ports. So, it helps with a lot of things. It depends on our needs.

The interface or GUI does not work properly on Microsoft Edge. The behavior or the view is different on Microsoft Edge versus on Chrome or Firefox. When some buttons do not work, I am forced to switch to Firefox.

There could be better analysis from the client's perspective. If you have FortiClient EMS, you should be able to analyze users more than the connections.

We started using Fortinet FortiAnalyzer this year. It was bought by our main company in the Netherlands.

It is now stable, but our previous instance was unstable. We had problems with connectivity. It was strange because it is a virtual machine, and it was on the same hypervisor or host, but only Fortinet FortiAnalyzer had connectivity problems. The connection was dropped, and it was not always possible to log in. We moved it to a different environment. We have now moved it to a Hyper-V cluster on a different site in Poland, and it is now stable.

It is scalable. We could change the size. It was easy.

We have mainly two people working with Fortinet FortiAnalyzer. My colleague and I from the Netherlands work on it. All IT departments also can access it. In total, we have five or six users, but mainly, two of us work on it.

I use their technical support when I have problems. They solve my problems, but sometimes, they take time because it is difficult to understand each other. I prefer a phone call over the email or ticket system because we can share more information in a short time. I would rate them a nine out of ten. They sometimes do not have a fast solution, but they always resolve an issue in the end.

Positive

I did not work on any similar product previously.

It was easy to deploy. It took one hour.

We deployed it ourselves. We know the product. We know how to register devices and how to join devices. It was easy. We used our knowledge.

I do not know the price of Fortinet FortiAnalyzer. I did not pay for it, but I know the price of other Fortinet products. They are not cheap. I am from Poland. We have Zloty, not Euro, so for us, everything is expensive. 

I had also tried to buy it in the past, but it was too expensive.

If you have FortiGate and FortiClient EMS, FortiAnalyzer is a natural choice. You can have notifications and alerts. Some things are automatically done by FortiAnalyzer. From a security perspective, it is a very good product.

Overall, we are satisfied with it. I would rate Fortinet FortiAnalyzer an eight out of ten.

The primary use case for our clients revolves around robust reporting capabilities, addressing key aspects such as understanding diverse utilizations and the performance of network links. They specifically sought insights into bandwidth usage and detailed reporting at the application level. Additionally, an essential requirement was efficient log management. This is crucial because FortiGate has limitations on retaining logs for an extended duration, and our clients needed a solution, such as FortiAnalyzer, to effectively manage and analyze logs over an extended period.

The most valuable is its robust and comprehensive reporting functionality, providing a thorough overview of various metrics. Additionally, its ability to centrally capture logs from multiple devices proves indispensable for our SOC. This centralized log management facilitates automation processes, and we also greatly appreciate the effectiveness of its analytics features.

I believe that its technical support is the only aspect that requires significant improvement. With the current trend toward AI advancements, there's an opportunity for improved AI analytics. This could empower us to better leverage technology to detect attacks in a more effective manner.

I have been working with it for more than five years.

It offers excellent stability capabilities. I would rate it nine out of ten.

It offers a capacity of up to two thousand gigabytes of logs daily, showcasing considerable scalability. I believe it is a scalable solution that can easily accommodate increasing needs without compromising performance. Our clients fall into the enterprise category. I would rate it eight out of ten.

The support services are often outsourced to specific regions, resulting in varying levels of technical expertise. While regions like America, the USA, Europe, and certain countries in Australia benefit from reasonable and proficient engineers, other locations may experience subpar tech support. Consequently, issue resolution can be time-consuming, leading customers to sometimes address problems independently. Particularly in terms of time efficiency, there is a need for improvement to expedite the support process. I would rate it six out of ten.

Neutral

The initial setup was straightforward. I would rate it eight out of ten.

The deployment process is straightforward and efficient, requiring minimal time and effort. It takes approximately thirty minutes and it's quite user-friendly.

The pricing is reasonable. The cost structure is primarily based on factors such as the number of logs, log sizes, and the daily log storage capacity, with a minimum requirement of two gigabytes per day. The maximum storage capacity can extend up to eight thousand gigabytes of logs per day.

I would strongly recommend utilizing it. It's an excellent product with abundant features, offered at a very reasonable price point. Overall, I would rate it eight out of ten.

We are an IT company. One of our clients utilizes FortiGate, FortiAnalyzer, and FortiManager. Thus, this is the sole customer in our portfolio using Fortinet FortiAnalyzer. Among our other clients, some exclusively employ FortiGate. Our responsibility encompasses network management for these clients.

What I like the most is the monitoring system. For example, it can track who is accessing through VPNs. The monitoring features are quite impressive, including maps, source IP, country codes, and geolocation – all of which are really cool. Additionally, the logging functionality is also excellent.

The UI can be more user-friendly for new users.

I have been using Fortinet FortiAnalyzer for seven years.

Fortinet FortiAnalyzer is highly stable. In the seven years of usage, we have never needed to reinstall it or perform troubleshooting. We have not had to make any support calls to Fortinet either. We successfully performed upgrades from version five to six and from six to seven, all of which went smoothly.

Fortinet FortiAnalyzer is scalable.

The technical support is excellent. I have never encountered any problems with FortiAnalyzer, but the issues we faced with FortiGate, which I was unable to resolve on my own, were promptly resolved by their team.

Positive

The initial setup is straightforward. We can choose to install either a single node or a cluster. We run it in a virtual environment on firmware, and the process of installing the RPA takes around 15 minutes. Afterward, some configuration is required, including the installation of certificates and similar tasks. Thus, the entire process usually takes approximately one to two hours.

Once the installation is complete, we need to connect all the FortiGate Firewalls to the FortiAnalyzer. This step also involves configuring them securely. When I deploy this solution for a customer, it typically takes me about four to eight hours to complete the installation and configuration. 

The price is not expensive when compared to other solutions like Palo Alto.

In addition to the licensing, we pay for a support contract.

I would rate Fortinet FortiAnalyzer eight out of ten.

Fortinet FortiAnalyzer is only valuable for organizations that utilize ten or more FortiGates.

I recommend Fortinet FortiAnalyzer to others.

It's a lock storage correlation device. You can connect locks from different devices. Not just from Fortinet, but you can send locks from other devices to FortiAnalyzer. Basically, it is a centralized repository.

Fortinet FortiAnalyzer has a lock correlation feature. It simplifies the troubleshooting process for its customers. So now, instead of logging into every firewall, they can log into Fortinet FortiAnalyzer and check the locks. They can also check whether there are any issues with the network.

This is a difficult question for me to answer. I want the tool to have a sophisticated and customizable dashboard similar to the one in the SIEM solution. However, I'm not sure if that is in the pipeline. Basically, I would say that it's not a pure SIEM solution where your customer can have a layer on a view of dashboards or advanced dashboards.

I work with Fortinet and Palo Alto. I am also a partner of Fortinet. Even though I have been working with Fortinet for more than five or six years now, Fortinet EDR is something very new for me and us in general. We have been working on firewalls, FortiAnalyzer, FortiManager, FortiMail, FortiADC, and FortiWeb. EDR, SDMA, and ZTNA are new to us. Speaking about Fortinet FortiAnalyzer, I have been working on it for more than six years now.

The stability of Fortinet FortiAnalyzer is okay. Although some customers have encountered issues, others have had a pretty okay experience and are doing pretty well with the solution.

I would say that more than ten of our clients are working on this solution. I would say that it is kind of scalable since it comes in different form factors. Owing to the different form factors and sizing of the solution, you can add and get increased capacity. This can help a person to add more firewalls and devices.

I would say that Fortinet's tech support is really good.

Neutral

I can say that the setup is a mixture of both options. I wouldn't say it is difficult. I would rather say that the setup process is okay or moderate. Also, the straightforwardness and complexity of the setup process will depend on your environment.

The deployment of Fortinet FortiAnalyzer is not complex, but integrating it with firewalls can take some time, depending on the number of firewalls. So, the deployment of the entire solution can take approximately one week to complete.

I'm not familiar with the cost point, because I am more of a technical person and I do not do pre-sales or sales.

I downloaded reports for CrowdStrike Falcon and FortiEDR from peerspot.com to see how they are in terms of performance.

Based on current trends, people are shifting towards FortiGate devices for their attractive value proposition and exceptional performance. FortiGate is the go-to choice for firewalls. And for us, along with FortiGate, I'll even go with FortiManager and FortiAnalyzer. I rate this solution a seven out of ten.

Our customers are working with this product in their companies.

I haven't really played around with it so much. Basically, we're just doing log reviews, and that's it.

The initial setup is easy.

It's a very stable product.

We can scale the product as well. 

Support has been good in general. 

It offers pretty good documentation.

I like the interface they offer. 

I'm a reseller and integrator.

I can't really tell if anything is missing. Maybe we'll find something in the future, however, I'm not sure at the moment.

Their pricing model is not the best and needs work. 

It would be nice if there were more third-party integration capabilities. 

I've been using the solution for six months. It hasn't been that long. 

Like all Fortinet products, it is pretty stable. There are no bugs or glitches. It doesn't crash or freeze. 

The solution is scalable and expandable. It's not an issue at all. 

We have three people working on it in our organization. 

Technical support is fairly good. I haven't really needed to call support just yet.

Our company is a Fortinet supplier. We don't deal with other solutions. 

It's an easy initial setup. The implementation is not overly complex. The deployment is pretty fast and only takes two or three hours. 

I'm not a fan of the licensing system in general. I don't like their pricing model. 

I'd rate the solution nine out of ten.

Our primary use case of this solution is to deep-dive and get deep visibility analyzing of logs and proxy of the network. In other words, to get good customized reports.

The solution allows us to see what our users do on their computers. Some way they work all day long, but then we see that they have been surfing on net, using YouTube, streaming or looking at Facebook. It is therefore a very handy program. 

I am very impressed by the new version's security - on-premise or on the cloud. We have integrated the program with FortiView to get a better-customized log and more scalability on the application. The newer version is also much faster than the previous one and we have more visibility on whatever is happening on our system. 

Reporting wasn't very good in the previous version, but I believe it has greatly improved. The newer version has more features and the quality of reporting is better too. 

I would also like to see an improvement in the rebooting.

The stability of the solution is good - better than the previous version. Even the hardware had changed from DCVs to some STVs so now the hardware and software are more powerful compared to the previous version. We are now able to do 14-hour functionality. The program is disabled on the FortiManager by default, but we can enable it via the console in order to get the same visibility on the FortiAnalyzer. 

The scalability of the program is good and we are hoping to increase our usage. I would like to see new features and better functionality, though. For the scalability of the FortiAnalyzer, we need to take into consideration the time it will take to load 30 users instead of only 14. So maybe we would perhaps need an upgrade license for FortiAnalyzer deployment in that case.

The technical support isn't very good, I rate it a 2 out of 5. I don't really rely on their support because in the past I had some issues and the support team could not help me. 

The initial setup was really straightforward. The duration of the deployment depends on the requirements of the customer and the kind of reports they want to get. It can be customized to the client's specifications. Some only use it for visibility while others want to get detailed reports. If the requirements are complex, it will take around two days. Otherwise, it will take a few hours. It is very easy to deploy the FortiAnalyzer. 

This program is quite expensive. We have to renew the hardware every year and the hardware is very expensive. And we need to renew the licensing for application control too. 

I rate this solution a 6 out of 10. It is a good security firmware for automation. From a single dashboard we can get all the logs and traffic information on our firewall. We can get more visibility, so there is no need for the engineer to go in each and every firewall to get information. 

Even if we don't use the FortiAnalyzer, we can use a FortiCloud to send a log. But we are still using a cloud-based solution. We are using our internet bandwidth to send logs. That's in real-time or scheduling. If bandwidth is the key factor, I will not recommend the customer to use a FortiCloud. And even if you are using the FortiCloud, the basic free version, you have a retention log for only seven days. If you want to have a longer retention log, let's say for one year, then you need to create a subscription with FortiGate. In that case, it is better to have a FortiAnalyzer on-premise. Always try to listen to your customer.

My clients mainly use Fortinet FortiAnalyzer for the log and automation.

This solution can be deployed on-premise and on the cloud.

The most valuable features of Fortinet FortiAnalyzer are the GUI and there is automation that can be done with playbooks and mini-books.

Fortinet FortiAnalyzer can improve by introducing integration with other Fortinet solutions with automation with one interface would be helpful.

I have been using Fortinet FortiAnalyzer for approximately four years.

The stability of Fortinet FortiAnalyzer is good.

I rate the stability of Fortinet FortiAnalyzer a ten out of ten.

The solution is scalable.

This solution is suitable for all sized companies.

I rate the scalability of Fortinet FortiAnalyzer a nine out of ten.

My clients had a mixed experience with the support from Fortinet FortiAnalyzer. Some had good experiences and others had poor experiences.

I rate the support of Fortinet FortiAnalyzer a ten out of ten.

Neutral

My customers have tried Palo Alto Panorama and we only had positive feedback from Fortinet FortiAnalyzer.

The initial setup of Fortinet FortiAnalyzer is simple.

The price of Fortinet FortiAnalyzer is expensive.

I rate the price of Fortinet FortiAnalyzer a ten out of ten.

I rate Fortinet FortiAnalyzer a ten out of ten.

We primarily use the solution as a firewall and security gateway.

It is easy to configure.

The end-user finds it very easy to understand. 

It's stable and reliable.

The solution is scalable.

The initial setup is easy, and the deployment is fast. 

Technical support is generally helpful. 

I'm not sure if any features need improvement. 

They could improve the user interface a bit. The GUI could be easier to understand.

I've used the solution for four years. 

The solution is very stable. I'd rate the solution ten out of ten in terms of reliability. There are no bugs or glitches. It doesn't crash or freeze. 

It's a very scalable solution. I'd rate the ability to extend ten out of ten. It's excellent. 

We work with mostly small and medium companies. 

I haven't been directly involved with support. However, I have an understanding that they are very good. I haven't heard of any complaints. 

Positive

I'm also familiar with Check Point. I prefer Fortinet products. 

The initial setup is straightforward. I'd rate the ease of setup eight out of ten. It is quite simple. 

Deployment only takes about one week. We can handle the customer's various policies and configurations. 

It only takes one person to deploy and maintain the solution. It's easy to manage the product. The customer can self-learn the solution and manage it once it is launched. 

It is a fairly affordable solution. I'd rate the solution three or four out of ten with ten being the most expensive. It's cheap It's not costly.  

We mostly resell the solution to big and small customers. 

We're using the latest version of the solution. 

I'd recommend the solution to others. I'd recommend Fortigate products to users in general. 

I would rate the solution ten out of ten.