

IBM Security QRadar and Fortinet FortiAnalyzer are both significant players in the cybersecurity analytics market. QRadar holds an edge in data correlation and integration, while FortiAnalyzer is strong in reporting and log management.
Features: QRadar offers strong data enrichment, comprehensive use case creation, and excellent event filtration and device integration. FortiAnalyzer shines in robust reporting, centralized log management, and comprehensive network analytics.
Room for Improvement: QRadar could enhance custom action scripting, improve SOAR capabilities, and address false positive reductions. FortiAnalyzer might improve interoperability with non-Fortinet devices and enhance user interface customization.
Ease of Deployment and Customer Service: QRadar provides versatile deployment options across on-premises and hybrid environments, though its support may be slow for low-priority cases. FortiAnalyzer supports similar environments with reliable deployment and generally praised customer service.
Pricing and ROI: QRadar is perceived as costly due to licensing complexity, but offers beneficial ROI. FortiAnalyzer, while also expensive, offers competitive pricing when bundled with other Fortinet products, providing substantial value in security visibility.
The impact of the tool is low when the functionalities are inaccessible due to resource consumption.
Fortinet is highly efficient for moderate deployments and provides a secure platform for medium-sized networks and data centers.
I have seen a return on investment with Fortinet FortiAnalyzer due to its competitive pricing and straightforward licensing model based on the amount of log data processed per day.
With SOAR, the workflow takes one minute or less to complete the analysis.
AWS gives the chance to implement a solution out of the box with use cases that are already in IBM Security QRadar.
Investing this amount was very much worth it for my organization.
Customer service and support for Fortinet FortiAnalyzer are quite helpful and responsive.
Technical support is good, and I rate it ten out of ten.
The support service is very slow and incompetent.
They assist with advanced issues, such as hardware or other problems, that are not part of standard operations.
Support needs to understand the issue first, then escalate it to the engineering team.
The support is really good; for instance, if a critical ticket is submitted, you will get paged right away as it gets logged, and their analyst will look into it, letting you know as soon as possible so you can work on it.
Fortinet FortiAnalyzer is scalable, especially for the VM versions, as additional space can be provisioned from the servers as needed.
FortiAnalyzer is a scalable product.
It typically handles three to five years of expansion effectively.
For EPS license, if you increase or exceed the EPS license, you cannot receive events.
We faced some CPU consumption issues, which caused the machine to slow down and required a restart of FortiAnalyzer.
It remains stable during implementation for one or two years.
It provides a reliable solution for managing network-wide data.
On cloud, you don't see any disconnections or instability.
I think QRadar is stable and currently satisfies my needs.
The product has been stable so far.
When licensing, each device is licensed separately, such as the firewall, which can become expensive.
This would help in analyzing various security incidents and events more effectively by delivering a handful of relevant logs instead of thousands.
Enhanced deep inspection features would make troubleshooting easier.
We receive logs from different types of devices and need a way to correlate them effectively.
If AI-related support can suggest rules and integrate with existing security devices like MD, IPS, this SIM can create more relevant rules.
IBM Security QRadar does not support Canvas, so we had to create custom scripts and workarounds to pull logs from Canvas.
Its licensing model is based on the amount of log data processed per day, making it more cost-effective compared to QRadar, which is EPS and device-based.
In terms of pricing, FortiAnalyzer is not expensive.
In the Indian market, Fortinet's pricing is very competitive, allowing us to win most of our deals.
Splunk is more expensive than IBM Security QRadar.
It was costly mainly because of the value you can get right now compared to other solutions.
It depends on how much you want to spend.
The advanced analytics capabilities aid in threat detection by providing visibility into indicators of compromise.
The most valuable feature of Fortinet FortiAnalyzer is its ability to simplify and display logs clearly, providing details like which IPs are accessing the system, the destination, and the policies applied.
The log management is useful as we have connected around two hundred eighty-five walls and around fifteen to twenty plus firewalls with Fortinet FortiAnalyzer, making it highly beneficial compared to logging into each individual firewall.
Recently, I faced an incident, a cyber incident, and it was detected in real time.
IBM Security QRadar gives the opportunity to improve the time to market of the releases with a great evaluation of cybersecurity breaches.
Compared to ArcSight, Splunk, or any other SIEM tools where you need their processing language such as structured query language, SPL, and in Sentinel there is KQL query languages, IBM Security QRadar doesn't require reliance on query languages.
| Product | Mindshare (%) |
|---|---|
| IBM Security QRadar | 4.6% |
| Fortinet FortiAnalyzer | 1.4% |
| Other | 94.0% |


| Company Size | Count |
|---|---|
| Small Business | 57 |
| Midsize Enterprise | 22 |
| Large Enterprise | 31 |
| Company Size | Count |
|---|---|
| Small Business | 93 |
| Midsize Enterprise | 39 |
| Large Enterprise | 107 |
Fortinet FortiAnalyzer offers comprehensive report generation and log management to enhance threat analysis and user activity insights. It integrates with Fortinet products for centralized management, featuring robust security and real-time data capabilities.
FortiAnalyzer enables detailed threat analysis and in-depth insights into user activities, integrating seamlessly with Fortinet's suite for centralized network management. Its robust security features, real-time data processing, and customizable dashboards make it efficient for IT environments. Users benefit from predictive analytics, enhancing network visibility and cybersecurity operations. It is known for ease of deployment and a scalable, user-friendly interface. However, there are desires for better third-party integration, enhanced AI capabilities, and improved technical support. Users seek more intuitive documentation and improved cost-efficiency.
What are FortiAnalyzer's Most Important Features?FortiAnalyzer is utilized in diverse industries such as banking, medical organizations, and service providers. It is employed for security diagnostics, network traffic analysis, and incident management. Organizations utilize its capabilities for enhanced visibility, threat detection, and performance monitoring across cloud-based and on-premises setups.
IBM Security QRadar offers real-time threat detection, data correlation, and integration with third-party solutions, providing a user-friendly interface, scalability, and extensive reporting capabilities for SIEM needs.
IBM Security QRadar is designed for comprehensive security monitoring in diverse environments, aiding sectors like telecom and finance with advanced threat detection and breach management. It aggregates data and analyzes user behavior, while its customizable and out-of-the-box rules deliver robust security insights and vulnerability management. The platform seeks enhancements in integration, performance, and user interface, with a focus on AI and cloud service compatibility.
What are the most important features of IBM Security QRadar?Telecom, finance, and cloud-based industries implement IBM Security QRadar for threat detection, compliance, and security monitoring. It is deployed for log collection and correlation, user behavior analytics, and ensuring secure data transfer and incident management, focusing on compliance and anomaly detection.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.