Fortinet FortiSIEM Reviews

Name: Fortinet FortiSIEM
Brand: Fortinet
Rating: 3.8 (73 reviews)

3.8 out of 5

73 reviews
82% willing to recommend

2,341 followers

What is Fortinet FortiSIEM?

FortiSIEM (formerly AccelOps 4) provides an actionable security intelligence platform to monitor security, performance and compliance through a single pane of glass.

Get the Fortinet FortiSIEM Buyer's Guide and find out what your peers are saying about Fortinet FortiSIEM, Wazuh, Splunk Enterprise Security and more!

Fortinet FortiSIEM is the #8 ranked solution in top Security Information and Event Management (SIEM) solutions. PeerSpot users give Fortinet FortiSIEM an average rating of 7.6 out of 10. Based on the analysis of the 73 most recent Fortinet FortiSIEM reviews, the overall sentiment is positive, with a sentiment score of 6.7. Fortinet FortiSIEM is most commonly compared to Wazuh: Fortinet FortiSIEM vs Wazuh. Fortinet FortiSIEM is popular among the large enterprise segment, accounting for 54% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 17% of all views.

Helped 824,053 peers since 2012

Featured reviews

HamedWasel

Senior Network Security Engineer at Orange

FortiSIEM needs to expand its integration with third-party vendors. I don't know if Forcepoint has been added, but there were limited resources for integrating Forcepoint solutions when we implemented FortiSIEM. It integrates well with other Fortinet products and solutions from established cybersecurity companies like Palo Alto but doesn't integrate with some of the newer vendors. I would also like to see FortiSIEM add more of the features available in FortiSOAR. You need to buy two separate solutions to get these features, but they should all be available in one product.

Read full review

Babar Shahbaz

Head of Product Management (Cloud & Digital) at Pakistan Telecommunication Company Limited

Fortinet has a unique model, which they call MSSP, managed services security partner. They select a telco in a country, partner with them, and offer them the certification track. We are an MSSP partner in Pakistan. FortiSIEM and FortiSOAR, their overall solutions that are there for threat mitigation, visibility, control, et cetera, is well integrated. We like the integration of all of these Fortinet platforms together. Everything is integrated well, and we are able to sell that as a service to our customers. There's a VR feature that is basically segmenting these firewalls, these security devices. Using that feature, we can make a network slice for each and every enterprise customer. All of the infrastructure is deployed in our data center, yet customer uses it as if it is their own.

Read full review

Haiyang Lu

System Engineer - Security at a educational organization with 1,001-5,000 employees

The challenge I face with Fortinet FortiSIEM is the lack of support. I need to figure out many things by myself. Getting support for the solution is very hard. The support person is pretty good and nice. I need to go through the professional service channel for more professional support. Since my company cannot pay for professional services, I have to figure many things out myself. For example, I have to figure out the best approach to design an architecture to fit into my environment. Then, I will go through the standard support channel to get confirmation from tech support, but they cannot help. I will return to the sales channel and try to get the right architecture for our environment approved. Fortinet FortiSIEM is a new product, and Fortinet only supports one or two people. Fortinet FortiSIEM is not a mature solution. Fortinet should educate existing customers about new features that can help them. Like Microsoft products, Fortinet should provide training or teaching material on YouTube. Fortinet provides free training on its website, but sometimes going through the whole course takes too long. I hope Fortinet improves this part. Fortinet should provide 30 minutes or an hour-long webinars where we can learn lots of new things. Without this information, customers have to try to figure out things by themselves. Many smart engineers can do that, but they may not have enough resources or time to do it.

Read full review

Fortinet FortiSIEM mindshare

As of December 2024, the mindshare of Fortinet FortiSIEM in the Security Information and Event Management (SIEM) category stands at 3.2%, down from 3.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

PeerAnalyst reports

Type	Title	Date
Category	Security Information and Event Management (SIEM)	Dec 21, 2024	Download
Product	Reviews, tips, and advice from real users	Dec 21, 2024	Download
Comparison	Fortinet FortiSIEM vs Splunk Enterprise Security	Dec 21, 2024	Download
Comparison	Fortinet FortiSIEM vs Wazuh	Dec 21, 2024	Download
Comparison	Fortinet FortiSIEM vs Microsoft Sentinel	Dec 21, 2024	Download

Title	Rating	Mindshare	Recommending
Wazuh	3.7	16.4%	79%	45 interviews Add to research
Splunk Enterprise Security	4.2	11.2%	93%	301 interviews Add to research

Valuable Features

Fortinet FortiSIEM is valued for its security notifications, granular monitoring, automation, and integration capabilities. It offers customizable dashboards, advanced analytics, user behavior analysis, and comprehensive event correlation. Users appreciate its ability to handle logs, seamless integration with Fortinet products, and scalability. The platform's flexible reporting, ease of use, and ability to support SOC and NOC operations enhance its appeal. It also features robust anomaly detection, threat intelligence integration, and cost efficiency.

"Fortinet FortiSIEM is highly scalable. I would rate its scalability nine out of ten."
"It provides extensive logging and record-keeping for internal networks, cloud applications, and services as well as perimeter physical network security."
"The most fascinating aspect of FortiSIEM is its integration with the MITRE ATT&CK framework."

Room for Improvement

Fortinet FortiSIEM requires better licensing options and ease of configuration. The interface needs simplification and dashboards should be more user-friendly. Users find the integration with third-party platforms challenging and desire more robust documentation. There's a need for improved support services and patch management. Performance enhancements in terms of data retrieval speed and stability are essential. Users also seek more advanced AI capabilities and flexibility in report generation and alert customization.

"The built-in APIs in Fortinet FortiSIEM are somewhat lacking and could be improved for better integration with external ITSM products."
"The built-in APIs in Fortinet FortiSIEM are somewhat lacking and could be improved for better integration with external ITSM products."
"FortiSIEM is a bit resource-hungry, so work should be done on hardware resource utilization to consume less hardware."

ROI

Organizations have observed a return on investment from Fortinet FortiSIEM. Some utilize it to support clients and gain investment returns, while others note significant security improvements. Many receive positive feedback and continued payments from clients who see the value in investing. However, some do not closely monitor ROI, viewing it as an operational cost instead. Overall, Fortinet FortiSIEM is considered beneficial for enhancing security and providing investment returns by numerous users.

Pricing

Fortinet FortiSIEM presents a flexible pricing model, offering both perpetual and subscription licenses, making it competitive compared to other SIEM solutions. Its cost-effectiveness varies by market, with many finding it affordable, especially when considering bundled features. However, complexity in calculating costs arises due to its events-per-second model. For optimal savings, longer-term licensing is recommended. Costs can escalate with increased data sources and additional module usage, yet many users regard it as cheaper than major competitors like Splunk.

"If one is cheap and ten is expensive. I rate the tool's price as an eight out of ten. Compared with Splunk or Oracle, Fortinet is cheap."
"The tool is really expensive. For what the tool does for our team, the price is fair."
"Fortinet FortiSIEM is not an expensive solution."

Popular Use Cases

Fortinet FortiSIEM is primarily used for network and security monitoring, analyzing logs, integrating with firewalls, and detecting threats. Users utilize it for real-time threat detection, compliance reporting, and visibility across networks by aggregating and analyzing data. It is deployed both on-premise and in the cloud to manage infrastructure, protect against cyber threats like DDoS and ransomware, and support threat intelligence. Fortinet FortiSIEM aids in anomaly detection and security event management for various industries.

Service and Support

Customer service for Fortinet FortiSIEM receives positive remarks, praised for being prompt and helpful. However, some express frustration with licensing processes. Technical support is noted for being responsive and knowledgeable, though some find it slow and complicated to reach appropriate personnel. There's acknowledgment of improvement, with many finding the assistance effective, though others see room for better response times and resource availability, particularly for complex issues. Technical personnel are respected for their expertise.

Deployment

Many users found Fortinet FortiSIEM's initial setup complex due to configuration and network considerations, while others described it as straightforward with proper support and documentation. Performance issues were a concern during deployment. Initial familiarity challenges were noted, but once overcome, clarity improved. Users noted that deployment time varied significantly depending on network size and complexity, often requiring days to weeks. Overall, experiences ranged from quick installations to needing extended planning and tech expertise.

Scalability

Fortinet FortiSIEM is generally scalable, with most users experiencing ease in scaling both vertically and horizontally. However, some users encounter challenges due to architectural limitations and licensing constraints. Many appreciate its capacity to scale efficiently in large enterprises, while a few note it may be costly for extensive scaling. Some users report needing additional training for optimal scalability outcomes, and others mention issues when managing large numbers of security events.

Stability

Fortinet FortiSIEM is often described as stable and reliable. Users report minimal issues and praise its stability during use. However, some encountered bugs during updates, requiring patches. A few mentioned challenges when integrating third-party vendors. Many rate Fortinet FortiSIEM highly in stability, mentioning its ability to stabilize after unexpected issues. Users find it dependable, with occasional minor bugs that don't affect performance significantly. It's considered a solid choice for maintaining stability in environments.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Fortinet FortiSIEM Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

Government

Manufacturing Company

Retailer

University

Educational Organization

Comms Service Provider

Energy/Utilities Company

Healthcare Company

Construction Company

Real Estate/Law Firm

Non Profit

Legal Firm

Insurance Company

Media Company

Outsourcing Company

Hospitality Company

Recreational Facilities/Services Company

Wholesaler/Distributor

Performing Arts

Pharma/Biotech Company

Transportation Company

Consumer Goods Company

Logistics Company

Marketing Services Firm

Compare Fortinet FortiSIEM with alternative products

Learn more about Fortinet FortiSIEM

Companies around the world use FortiSIEM for the following use cases:

Threat management and intelligence that provide situational awareness and anomaly detection
Alleviating compliance mandate concerns for PCI, HIPAA and SOX
Managing “alert overload”
Handling the “too many tools” reporting issue
Addressing the MSPs/MSSPs pain of meeting service level agreements

Fortinet FortiSIEM was previously known as FortiSIEM, AccelOps.

Product Video

Fortinet FortiSIEM customers

FortiSIEM has hundreds of customers worldwide in markets including managed services, technology, financial services, healthcare, and government. Customers include Aruba Networks, Compushare, Port of San Diego, Cleveland Indians, Infoblox, Healthways, and Referentia.