Fortinet FortiSOAR Reviews

I have been working in my field for almost four years, but right now I am not using it because my current company is not using Fortinet FortiSOAR.

I appreciate Fortinet FortiSOAR because it is an overall good system for identifying and checking vulnerabilities, as well as for identifying threats and providing responses.

Fortinet FortiSOAR has good integration with the SIEM and the SOAR. This good integration is more helpful for us to respond to incidents and to capture them, identify the reasons, and respond accordingly.

The analytics capabilities of Fortinet FortiSOAR provide good analysis, helping to identify the root cause, mitigate threats, and secure our environment from present and future threats.

Threat intelligence sharing in Fortinet FortiSOAR has helped our organization stay ahead of threats, including against DDoS attacks.

The effectiveness of Fortinet FortiSOAR playbooks is that they minimize the mean time to response and MTTR, and I think more automation is required to improve the response time.

I am working with the Dynamic Case Management feature, and it is dynamic. The Dynamic Case Management feature is more helpful for us to get real-time anomalies and identify the threats. It also assists in real-time response, so it is helpful.

Fortinet FortiSOAR has to be updated on the recent threats. Threats are changing, and it has to be updated to meet the AI-based threats that are out there. Therefore, it should have the capability to address AI threats.

I have been using Fortinet FortiSOAR for almost four years, but currently, I am not using it.

As for my experience, I have worked with Fortinet FortiSOAR within the last twelve-month period.

I have had good support from third-party services from Fortinet.

I would rate the technical support of Fortinet around nine, so it is very good.

Positive

The deployment of Fortinet FortiSOAR is not that easy, but it is acceptable, comparatively, and I am getting good support for the implementation.

The process took almost around a few days.

Around four people took part in the deployment. There were four engineers involved.

Right now, I have moved to a new environment, so I do not see any immediate requirements regarding return on investment or cost reductions.

The product is expensive, but it is a value-for-money product. It is a good product to invest in, eventually securing your environment and helping to protect against untoward security incidents. In that way, it is wise to invest in this kind of product.

I am not sure about the management regarding Fortinet FortiSOAR. I would rate this review a nine overall.

I may use Fortinet FortiSOAR for various use cases, particularly phishing, enrichment, and automation because our target is our L1 analyst. Most of our daily work has shifted to SOAR. Analysts no longer need to check IDs or reach customers to validate login attempts or password issues. Everything is now managed. Most of the work for L1 is automated through Fortinet FortiSOAR. They can close incidents validated with users or customers, close tickets, block IPs, isolate machines, and run scans with antivirus because we integrate with multiple security controls.

The most valuable functionalities of Fortinet FortiSOAR currently include AI integration with ChatGPT. However, we need more fine-tuning for ChatGPT, especially when creating connectors. With AI, we can create playbook workflows by simply entering a prompt, which then creates the playbook, and the connectors cover most products on the market.

The solution enables automation of daily tasks for L1 analysts. Analysts can efficiently manage incident validation, ticket closure, IP blocking, machine isolation, and antivirus scans through integration with multiple security controls.

Additional fine-tuning on ChatGPT could be added. This is the only area requiring improvement, with no other concerns identified.

I have been working with Fortinet FortiSOAR for more than one year.

I do not experience any glitches or latency issues with Fortinet FortiSOAR. The solution is 100% stable.

The scalability of Fortinet FortiSOAR is sufficient for our needs.

Maintenance for Fortinet FortiSOAR is very easy, and the support is excellent. If any issue arises, they immediately join the call and begin providing support. On a scale from 1 to 10, where one is bad and ten is good, I would rate their support a 10.

Positive

The installation and deployment of Fortinet FortiSOAR is very easy because it provides multiple solutions including Docker, standalone, and OVA.

Regarding pricing, licensing, and setup costs for Fortinet FortiSOAR, the value proposition depends on your business size. In a small business, it might be considered expensive, but for enterprise or larger companies, it is reasonably priced or considered affordable.

I serve as both a reseller and customer of Fortinet FortiSOAR. The solution is suitable for all types of businesses from small to enterprise. The integration capability of Fortinet FortiSOAR deserves a rating of 10. It can be integrated with any system, and we have the capability for custom connectors. Even if Fortinet FortiSOAR doesn't have a specific connector, you can easily create a custom connector using AI. Simply provide your requirements or solution needs, and Fortinet FortiSOAR will create the connector, enabling integration with any application.

My final rating for Fortinet FortiSOAR would be 10 out of 10, where one is bad and ten is good.

Usually, FortiSOAR is used for some of our security operation tasks where it is necessary to ascertain the integrity of threat vectors and then take action against them. In addition, we automate other processes within our security operations procedure through FortiSOAR.

FortiSOAR is really effective, providing us with significant savings on operational costs by reducing the number of SOC analysts we need to employ. Thanks to its automation capabilities, operational cost is reduced.

The playbook and the dashboard of FortiSOAR are really informative. The scheduling for our SOC team's shifts is very important in terms of shift management.

The ease of playbook creation on FortiSOAR needs improvement. Creating a playbook is more like coding or developing, which is not as straightforward as with other tools where you can preconfigure by clicking and dragging.

I have been working with FortiSOAR for four years.

I have no complaints about its stability. It is stable, and I would rate it as eight out of ten.

I would rate its scalability as eight out of ten.

I have consulted Fortinet support, and I think they are good. I would rate their support as eight out of ten.

Positive

The setup of FortiSOAR is medium in difficulty. It is not difficult, yet not so easy either. On a scale from one to ten, I would rate the setup as seven.

FortiSOAR is not expensive, and it provides value by reducing operational costs.

FortiSOAR is a good tool, and I recommend it for its effectiveness. The only issue I have is with the playbook development; otherwise, every other aspect of the tool is stable and effective.

I'd rate the solution eight out of ten.

Right now, I am building the playbook for SOC. So mainly, my used case is about trying to alleviate some of the workload from manual tasks to automated using playbook implementations on the portal side,

When it comes to automation, if I am sending an alert to the customer before sending an alert, I check if the IP authentication is done, and check with the other integrations, like the EDR or antivirus tools, and then send the email.

Generally, the tool helps just automating a lot of manual load or repetitive tasks. The tool allows me to have a lot of time to spend on other very important things in my company.

The most valuable feature of the solution is the threat intelligence management that is built inside the product. The tool is also useful for threat management and incident management. The tool is able to ingest a lot of IoCs and keep the data for a while, owing to the tool's threat intelligence management capabilities. Instead of having to check with some other integrations all of the time, I only have to check once and have the existing data inside Fortinet FortiSOAR that provides the information, which reduces the cost of API.

The tool is a double-edged sword. From my perspective, Fortinet FortiSOAR's engineering side is very flexible. Whatever my customer requests, Fortinet FortiSOAR is capable of providing that. In terms of the learning curve on how to play with Fortinet FortiSOAR, it becomes very difficult. The learning curve is very high. Though the tool offers high flexibility, it is very hard to get what you want. I learned to use the tool by myself. I do not see myself as a very well competent person with the product. Right now, I rely a lot on my principal engineer to deal with the development part.

For the future, I can't see any areas in the tool where I can suggest improvement since the product is already very flexible. The product is able to deliver my customers' requests.

Fortinet FortiSOAR is very user-friendly for the end users. Things can get very difficult for the engineering or developer side. The product can redesign the interface to develop the playbook and all of the data on all of the components. The tool's user interface is an area of concern where improvements are needed.

I have been using Fortinet FortiSOAR since April 2024. I am a user of the solution. I use FortiSOAR 7.4.3.

Previously, we had some stability issues because of some version a client wanted. Stability-wise, I rate the solution a six out of ten.

It is a scalable solution. Scalability-wise, I rate the solution a seven out of ten.

The tool has a high availability feature, so it is capable of performing active-active and active-passive configurations. For active-passive configurations, we have to manually switch from the hot site to the warm site, which can cost us some business time.

Only two people use the tool. Our company is a very small IT company.

The solution's technical support is very quick to respond. I rate the technical support an eight out of ten.

Positive

The product's initial setup phase is very easy.

If ten is easy, I rate the product's initial setup phase as a seven out of ten.

The solution is deployed on an on-premises model.

The solution can be deployed in not more than an hour.

The tool helped me save 40 percent in terms of time.

Against Fortinet FortiSOAR, I had evaluated Logpoint. I started using Fortinet FortiSOAR after I changed my company.

Right now, my use case does not involve any AI.

I would say that one needs to have very good training before using FortiSOAR. It was very difficult for me to build the playbook. It is better to learn how to use the tool.

I rate the tool a nine out of ten.

We are using FortiSOAR for case management. We also have Forti Fabric in our environment and have been using FortiGate firewalls for many years. 

The best compatibility for a SIEM solution that was recommended to us was Fortinet as it is highly compatible with our security devices, like FortiGate Firewalls. 

We use FortiSOAR to generate automated responses against cyber incidents in our cyberspace. We utilize various playbooks for actions like disabling network cards, user IDs, or computer accounts, triggering security policies over the firewall, or executing PowerShell scripts to protect our digital assets.

Keeping in view the compatibility with Fortinet products, we chose FortiSOAR for case management. It generates automated responses for cyber incidents.

The most fascinating aspect of FortiSOAR is its modern and simple to understand and operate dashboards. We have previously used resilient QRadarSOAR. However, the main thing that differentiates these two products is the modern dashboards. They are convenient, easy to understand, easy to operate, and offer comprehensive graphical depictions. 

The GUI of FortiSOAR is very attractive, and this is its core strength. We use it to manage cases and generate automated responses against cyber incidents. It integrates well with Fortinet products and facilitates seamless incident response.

FortiSOAR needs to improve the response time for executing playbooks. Compared to IBM Resilient, the execution time for playbooks is slower. 

Additionally, FortiSOAR should include more ready-to-use APIs and integrate more vendors easily. Resilient has a larger database in this respect. Furthermore, FortiSOAR could expand its readily available integrations for better usability.

We have been working with FortiSOAR for almost a year.

On a scale from one to ten, I would give the stability of FortiSOAR a seven.

FortiSOAR is scalable. When integrated with Fortinet devices, I would rate its scalability as nine out of ten. For integration with other devices, I would rate it seven or eight.

Their online technical team provides good support, responding in a timely and helpful manner. In Pakistan, there are limited technical resources available on the ground, so we rely on online support. Fortinet takes care to maintain its reputation through good technical assistance.

Positive

We previously used IBM Resilient. LogRhythm is another competitor that offers a unified solution combining SIEM and SOAR capabilities. The decision to switch was influenced by FortiSOAR's compatibility with Fortinet products and its enhanced graphical dashboards.

The installation and configuration of FortiSOAR are easy to understand yet may be considered a bit lengthy. The integration of Forti products is smooth, however integrating heterogeneous products requires more technical resources.

FortiSOAR is considered costly, and I would rate its pricing at three out of ten, where one is high and ten is low.

The main competitor for small companies is LogRhythm. For medium and large enterprises, IBM Resilient is a significant competitor.

If purchasing both SIEM and SOAR solutions is not feasible, I would recommend acquiring FortiSOAR since it can integrate directly with all your digital assets, providing essential capabilities even without a SIEM solution. As for an overall rating, I would give FortiSOAR an eight out of ten.

Fortinet FortiSOAR is a platform that allows you to orchestrate a lot of different solutions to automate response and follow all the incidents you are tracking between all your devices and the data collected.

The most valuable feature of Fortinet FortiSOAR is the number of available connectors and the simplicity to start to automate. You can use some playbooks that are already created on the platform.

Fortinet FortiSOAR should add more documentation for some use cases. Since the nature of the platform is wide, you can create a lot of things. However, it would be great if there were more tutorials explaining some use cases and instructing how to achieve different goals. At least in Latin America, that's the main improvement we want to see.

I rate Fortinet FortiSOAR ten out of ten for stability.

If you have enough resources, scaling the solution is super easy. I rate Fortinet FortiSOAR a nine out of ten for scalability. At least two people are using the solution in our organization.

Fortinet FortiSOAR's initial setup is super easy. It takes less than an hour to deploy the solution.

Considering all the features of Fortinet FortiSOAR, I think it has a good price. Other solutions like Palo Alto are more expensive than Fortinet FortiSOAR.

The most important thing about handling Fortinet FortiSOAR is that you need to know a lot of programming. Here in Latin America, we don't have a lot of training in Spanish to use this solution, which makes it more difficult to learn how to use it.

Overall, I rate Fortinet FortiSOAR a nine out of ten.

We use the solution for financial services. Usually, we recommend or resell the tool after the client has already purchased a network visibility solution. Fortinet FortiSOAR will help automate the process and minimize human errors.

Fortinet FortiSOAR is a very interactive and user-friendly solution. The tool makes everything clear, and users know where to look if they want anything. It has a very wide support in documentation and resources.

The solution’s pricing could be improved.

I know that Fortinet already has an ROI calculator inside FortiSOAR. I also know that Fortinet has already integrated an AI. It would be really good if the client could see the ROI beforehand.

My current company is a reseller for Fortinet. We usually do installations as technical support. We once worked with the solution, and it was only a deployment.

Fortinet FortiSOAR is a very stable solution. So far, our clients have not raised any issues or complaints and are really happy with the product.

The solution's scalability is very good. We have more than 500 customers for Fortinet FortiSOAR.

Fortinet FortiSOAR has many online resources, support, and very rich documentation.

The solution’s initial setup was not very complex.

Users have to pay a yearly subscription fee for the solution. Fortinet FortiSOAR's pricing is fair compared to other products like Palo Alto Cortex. Since Africa is struggling with foreign exchange, the solution is pretty expensive there.

Integration was not an issue with Fortinet FortiSOAR. I would recommend the solution to other users. I'm based in Ethiopia, and the Fortinet team is always there to accommodate and help us with presales, after-sales, deployment, and any kind of support.

A lack of cybersecurity professionals in the global sector makes Fortinet FortiSOAR a critical tool for the financial sector, such as banking. The solution's AI (artificial intelligence) features have been very useful.

Overall, I rate the solution eight and a half or nine out of ten.

The most valuable component of the solution is its playbook feature. The product allows for automation in case any incidents happen by allowing the policy to be pushed to Juniper, Cisco, Palo Alto, including any other router for firewall without any issues.

The UI design of the solution needs to be changed since it can get difficult for a newbie to operate. For experts, there is a need to polish the product's UI more intelligently. UI is not that good in all Fortinet products. The UI needs to be made more interactive and user-friendly. Came to know from the product's support team about some ongoing improvements being made in the product's UI.

I have been using Fortinet FortiSOAR for six months. My company's customers use Fortinet FortiSOAR. My company has a partnership with Fortinet.

Stability-wise, I rate the solution a nine out of ten.

It is a scalable solution.

Scalability-wise, I can recommend the product's cloud version to smaller businesses, while the product's on-premises version can be recommended to enterprise-sized businesses owing to the confidentiality aspect. When one needs to deal with security issues and security orchestration, one can go for Fortinet FortiSOAR.

When you face a critical issue, Fortinet's technical support team takes time to resolve that issue. I rate the technical support an eight out of ten.

The implementation phase of the product was not tough or difficult.

The implementation phase can be completed in two to three months.

Two or three engineers are needed for the product's deployment.

The solution is deployed on-premises.

If you compare Fortinet FortiSOAR's price with the prices of the market leader, Palo Alto, then it can be considered a cheaper product.

Fortinet FortiSOAR is a good product, especially when compared to F5 WAF.

Palo Alto is the best option available in the market, but it is expensive.

Palo Alto is a very mature product when compared to Fortinet FortiSOAR. Palo Alto has the network capacity to offer products like a firewall and other network devices that can be integrated easily into an organization's environment. Palo Alto also has the capacity to provide an analysis of SOAR and playbooks, which is something even Fortinet has, and it has reached a maturity level of 90 percent.

My company's customers who use Fortinet FortiSOAR are satisfied with the product.

Before proceeding with the implementation part, it is important for Fortinet FortiSOAR's potential users to do the required analysis, especially a gap analysis, to understand your requirements. You should not go for the implementation phase without knowing the product and its exact requirements since you may encounter a lot of difficulties later on.

The product's functionalities are good. We only require technical support when we face an issue with the solution in our organization.

I rate the overall product a nine out of ten.

The primary use case for our clients is deploying automatization component of FortiSOAR to help mitigate breaches or attacks without human error. The solution automates everything using the playbooks and pre-deployed response mitigation scenarios. Companies that can use this product may have an infrastructure team but may not be able to attract IT security talent. FortiSOAR helps them minimize human errors. I would say that this is most important and beautiful thing you can have in cybersecurity right now.

FortiSOAR's most valuable feature is its ability to correlate the products and vendors that do not have a native interconnection between them.

There is quite a bit of room for improvement with FortiSOAR's tech support. 

I have been using FortiSOAR for the last year. It's brand new product. The product was published globally only about a year and a half ago. I got my first FortiSOAR project about a year ago.

On a scale of one to five, with one being not stable at all and five being very stable, I give FortiSOAR a five for stability. 

FortiSOAR is really easy to scale up or scale down.

Fortinet's tech support overall is not great when they are at their best.

Neutral

The initial setup is really difficult. To deploy, you need to have a huge amount of knowledge between multiple different technologies. You also need knowledge of domain controllers, data center architecture, network security, classic network components, cloud services, and more. You need to know pretty much whole system. Only then can you provide nice and useful playbooks that will automatically mitigate accounts being compromised or ongoing attacks between different technologies. It is not user friendly and it is not really easy to configure.

Deployment would typically begin with the enumeration of whole system. We visualize all the elements of the system and ask questions like: How many identity providers are there? How many network components are there? Do these components have APIs enabled or not? How can the solution reach towards all these components and make adjustments and execute commands? It is important to deeply understand how the IT system is constructed. 

After that enumeration period, we will start making connectors and then sending some commands towards them in specific cases. The second and third stages entail optimizing and fine tuning everything in one giant ecosystem. The last part is redefining the playbooks, which will mitigate attacks.

The process outlined above takes just over a month. In cybersecurity, time is critical. If you take too long to deploy, you are basically leaving yourself open for an attack. Companies mostly buy security solutions after they have been breached or while they are under some sort of attack. This puts a lot of stress on the person implementing because the customer will always want it done ASAP. Therefore, in normal circumstances, a month for deployment is okay when you have time for some strategical thinking. But, you don't have that kind of time if your company is currently under attack.

Most complex deployments will involve multiple teams from across the comany. You will always have one person from the network side, one person from DC side, one person from admin, and one person for external services. This will add up to seven people in most cases. 

The good news is that FortiSOAR is not hard to maintain. If you prepared well and deployed strong initially, then maintenance will take half an hour every other week, not more than that. A single person can do it. 

The product pays for itself nicely, but the issue is that you cannot sell that straight away. It is fairly new technology and people are not aware of the benefits that it gives. One a scale of one to five, with one being no ROI and five being excellent ROI, I give FortiSOAR a three.

On a scale of one to five, with one being very affordable and five being very expensive, I would give FortiSOAR a three. 

There are no hidden fees or external trade feeds. You do not have to deal with anything besides the license itself and support. 

The licensing is flexible. You can buy a subscription-based license on a yearly basis or you can buy a perpetual license that will never expire.

If a company already has multiple different teams covering things like networking, the data center, and SaaS services, and they are missing the one big link between, then FortiSOAR is the perfect solution for them. But, if the organization's maturity is low, I could recommend they use a solution like FortiSOAR as it requires a large amount of knowledge to run. There is not a single use case for FortiSOAR, but developed companies are best suited for a solution like this.

However, as far as FortiSOAR itself is concerned, there is not much space for improvement. You can connect it to pretty much anything, which is the most important feature of this product.

We use the product for security. 

Fortinet FortiSOAR should improve its analysis. 

I have been working with the solution for three years. 

I rate the product's stability a nine out of ten. 

I rate the tool's scalability an eight out of ten. 

We have deployed Fortinet FortiSOAR on the cloud, and installation was easy. 

Fortinet FortiSOAR is expensive. 

I rate the product a nine out of ten.