No more typing reviews! Try our Samantha, our new voice AI agent.

Fortinet FortiAnalyzer vs Security Onion comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiAnalyzer
Ranking in Log Management
9th
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
108
Ranking in other categories
No ranking in other categories
Security Onion
Ranking in Log Management
29th
Average Rating
7.2
Reviews Sentiment
7.1
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2026, in the Log Management category, the mindshare of Fortinet FortiAnalyzer is 1.4%, down from 1.9% compared to the previous year. The mindshare of Security Onion is 2.0%, down from 5.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
Fortinet FortiAnalyzer1.4%
Security Onion2.0%
Other96.6%
Log Management
 

Featured Reviews

Amarnath Jaiswal - PeerSpot reviewer
Senior Manager at a manufacturing company with 501-1,000 employees
Comprehensive log analysis has improved traffic monitoring and streamlined risk mitigation
Fortinet FortiAnalyzer is a very comprehensive analyzer providing detailed analyzing features and customizable reports. I can get customization and custom reports, and there are many functions available. It is very good for any organization.Log management in Fortinet FortiAnalyzer is excellent, as it stores approximately two years of logs. Using Fortinet FortiAnalyzer, I analyze vulnerability risks and threats and sort out problems accordingly. I then create policies and mitigate the risk based on my findings. I have created many customizable reports in Fortinet FortiAnalyzer. I have customized the reports to schedule them and generate reports every day that are sent to my email. I am not using any SIEMs, but Fortinet FortiAnalyzer is the best and looks like a SIEM. I did not integrate Fortinet FortiAnalyzer with any security information and event management solutions. With Fortinet FortiAnalyzer, I have streamlined the process to mitigate risks and save time to get event information on any type of threats, risks, and unwanted traffic. Risk and time are saved, and it is valuable for any organization.
HJ
Manager at teshama
Centralized threat monitoring has improved visibility but demands complex setup and configuration
The best features Security Onion offers include acting as the intrusion detection system in my organization and helping me to address traffic, logs, and events happening within the organization. Since Security Onion is an open-source system that integrates with tools like Suricata and Zeek with the ELK stack, it enables threat detection and response capabilities, delivering high-level security measures at a cost, making it suitable for businesses of varying skill levels. These integrations with Suricata and Zeek have greatly impacted our workflow and our team's effectiveness by helping us address issues such as identifying intrusions, evaluating threats, and overseeing log files. This tool is very cost-effective, making it suitable for any size of organization wanting to use it.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"t integrates within FortiGate and you can find the reports there."
"I like its simplicity."
"With Fortinet FortiAnalyzer, it is easy to get reports and read specific logs."
"Basically, you can see absolutely all activity using FortiAnalyzer."
"The feature that I have found the most valuable is to be able to see everything in our network in a single task. A single menu and the graphical bar charts that it provides to give insights are very useful. It also gives very good metrics on bandwidth utilization, CPU, and device performance. It is very simple and easy to use as well."
"Anyone who asks me about a Fortinet product, I'll give that person a thumbs-up."
"The most valuable feature of Fortinet FortiAnalyzer is its capability for analyzing and providing visually comprehensive reports, making it easier to understand the network environment."
"The ability to gather all gateway information and logs in a single location is the most valuable feature."
"Security Onion is the most mature solution in the market."
"We use Security Onion for internal vulnerability assessment."
"The most valuable feature of Security Onion for security monitoring is its ability to find infected ports."
"Security Onion has positively impacted my organization by greatly improving our security posture, making alert triage easier to handle, simplifying the analysis of threats, and decreasing the cost of threat analysis and detection."
 

Cons

"We don't need to do much to install FortiAnalyzer because it always depends on FortiGate. You need to deploy FortiGate before you install it. That's why I say that I see it as a dummy box. I don't see anything interesting in it. It's only a support structure."
"The pricing could be better. They could work to make it more competitive on the market."
"The problem is that it can´t recognize logs from FortiController blades, not even specifying it as a syslog device so this is a big lack."
"We would like to do the reporting, logging, and administration of all the public devices and all the IoT devices. We wish to add the switches, and routers from different vendors, so it's not a vendor-specific diagnostic solution."
"Pricing-wise, it is not affordable for the normal customer."
"Fortinet FortiAnalyzer is not in the cloud environment like some of the other products. There could be a possibility of extending its functionality to the cloud environment. If possible, they could have a deal with or integrate with other firewall manufacturers, like Palo Alto and Cisco, and mix the information. It is a difficult functionality. I don't know if any product in the market provides such functionality."
"We should be able to do the patch upgrades in a centralized manner. It would be good to be able to do the firmware updates from one place and at the same time."
"One of the main disadvantages is not having a direct link to the security policy when you see something in the log."
"The initial setup of the solution is a little bit difficult."
"The product is not easy to learn."
"For Security Onion, setting up and configuring the system can be quite challenging for newcomers due to the need for a grasp of networking and security concepts."
"Security Onion's user interface could be improved."
 

Pricing and Cost Advice

"The price is quite expensive. Fortinet products are very expensive. That is something which they should also look at, because if you compare Fortinet product to, say, Sophos for example, Fortinet is really high and that's the only thing which is a drawback for most users."
"The number of licenses required directly corresponds with the number of devices connected."
"It is acceptable for on-premises, but it is expensive for the cloud."
"FortiAnalyzer was in the product itself, but two years ago they split it from Fortinet. We paid the license two years ago."
"The cost and pricing should be in accordance with the calculation of log storage capacity for a time period required for historical analysis."
"The program is expensive."
"Its price is okay for us. Fortinet products are cheaper than other solutions."
"Compared to other products, the price is a little bit high."
"Security Onion is an open-source solution."
"Security Onion is a free solution."
"It is an open-source solution."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
900,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
11%
Financial Services Firm
11%
Manufacturing Company
9%
Comms Service Provider
7%
University
12%
Comms Service Provider
11%
Government
10%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business57
Midsize Enterprise22
Large Enterprise31
No data available
 

Questions from the Community

What needs improvement with Fortinet FortiAnalyzer?
I think technical support should be better. Sometimes support from Fortinet does not help with creating policies or configuration issues and directly routes to the service integrator. A little more...
What is your primary use case for Fortinet FortiAnalyzer?
I am using Fortinet FortiAnalyzer along with the analyzer for traffic monitoring and event checking. It is effective for analyzing traffic purposes.I use Fortinet FortiAnalyzer for event monitoring...
Ask a question
Earn 20 points
 

Overview

 

Sample Customers

General Directorate of Information Technology
Information Not Available
Find out what your peers are saying about Fortinet FortiAnalyzer vs. Security Onion and other solutions. Updated: June 2026.
900,747 professionals have used our research since 2012.