FortiAnalyzer is a log analytics tool. Our company has around 600 to 700 people.
You can also download premade reports on the portal, but the user experience could be better
Pros and Cons
- "FortiAnalyzer helps us discover what's happening on the network."
- "They could always improve the interface and the user experience."
What is our primary use case?
What is most valuable?
FortiAnalyzer helps us discover what's happening on the network.
What needs improvement?
They could always improve the interface and the user experience.
For how long have I used the solution?
I have used FortiAnalyzer for four or five years.
Buyer's Guide
Fortinet FortiAnalyzer
March 2026
Learn what your peers think about Fortinet FortiAnalyzer. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
885,286 professionals have used our research since 2012.
What do I think about the stability of the solution?
I rate FortiAnalyzer eight out of 10 for stability.
What do I think about the scalability of the solution?
Scalability is irrelevant to me because we have a small setup. One analyzer is enough for me.
How was the initial setup?
Setting up FortiAnalyzer isn't complex and takes two or three hours. They have a prebuilt OVA we can deploy using Ansible. Next, we configure FortiGate to send the logs to the FortiAnalyzer. You can also download premade reports on the portal.
What's my experience with pricing, setup cost, and licensing?
You pay an annual license based on the volume of logs per day.
What other advice do I have?
I rate FortiAnalyzer seven out of 10.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Chief Technology Officer at Litmus
Can be used by institutions whose data needs to be on-premises and not in the cloud
Pros and Cons
- "I have found incident management and also identifying new threats, analyzing the network traffic, and finding out the issues with the network traffic such as any security issues to be valuable. I also like the compliance reports."
- "I have found incident management and also identifying new threats, analyzing the network traffic, and finding out the issues with the network traffic such as any security issues to be valuable."
- "One thing we struggled with FortiAnalyzer was integration with SIEM. We also had issues with the new threats and APTs. There were false positives, so we needed to have some ratings related to false positives."
- "One thing we struggled with FortiAnalyzer was integration with SIEM."
What is our primary use case?
Most of our clients are banking and financial institutions, so their data doesn't go to the cloud as such. Their data is on-premises only. Some of our clients can go to the cloud to save the price and do management, administration, and so on, but then most of our clients, use on-premises FortiAnalyzer.
How has it helped my organization?
Fortianalyzer helped us to manage fortigate devices and update them from central location.
What is most valuable?
I have found incident management and also identifying new threats, analyzing the network traffic, and finding out the issues with the network traffic such as any security issues to be valuable. I also like the compliance reports.
It is a very stable and scalable solution.
What needs improvement?
One thing we struggled with FortiAnalyzer was integration with SIEM. We also had issues with the new threats and APTs. There were false positives, so we needed to have some ratings related to false positives.
It is easy to set up is you have FortiGate firewalls. We tried setting up with other devices, and I don't think it supports other firewalls or other devices. If it did, then it would have been great because we would have been able to use FortiAnalyzer for hybrid environments with different OEM firewalls.
If we can have an intelligent analysis system which will detect false positives and detect the exact problem, it would be great. If FortiAnalyzer can integrate with FortiSIEM and give us threat reports, that will also help because then I won't need to have another tool or another dashboard which I need to look out for.
For how long have I used the solution?
I've been using it for four years.
What do I think about the stability of the solution?
It is a very stable product, and we have had no issues at all.
What do I think about the scalability of the solution?
It is easy to scale; there are no challenges.
How are customer service and support?
The technical support is good. Most of the time, when we escalate the tickets the second line of support, FortiGate support, has been very good. The first line might take up time, but the second line of support resolves the case quite quickly.
Which solution did I use previously and why did I switch?
Yes we used checkpoint for our organisation , but it was a complex system to manage, we expect a firewall to be a simple device to avoid complexity.
How was the initial setup?
The initial setup is quite simple with FortiGate devices. So, if you have FortiGate firewalls, it is quite easy to set up. Once Fortinet FortiAnalyzer is configured, then the only thing we need to do is to monitor it.
What's my experience with pricing, setup cost, and licensing?
When you compare with other firewall vendors, FortiAnalyzer is quite competitive in pricing. They are very aggressive as well.
Which other solutions did I evaluate?
Yes we did evaluate paloa alto , but it went into backburner due cost factor.
What other advice do I have?
If you have critical objects to protect or critical data to protect, then you should go for FortiAnalyzer.
On a scale from one to ten, I would rate Fortinet FortiAnalyzer at eight.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
Fortinet FortiAnalyzer
March 2026
Learn what your peers think about Fortinet FortiAnalyzer. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
885,286 professionals have used our research since 2012.
Security Solutions Architect at a manufacturing company with 1,001-5,000 employees
User-friendly and easy to set up with good logging
Pros and Cons
- "Logging is the best feature."
- "Logging is the best feature, and I like how everything is integrated with the FortiGate devices, FortiAuthenticator, and other fabric devices, giving you all the login information details and great user connectivity, while being easy to set up, stable, scalable, and very user-friendly."
- "We would like to do the reporting, logging, and administration of all the public devices and all the IoT devices. We wish to add the switches, and routers from different vendors, so it's not a vendor-specific diagnostic solution."
- "The fact that it only works with FortiGate devices is quite unfair."
What is our primary use case?
Most importantly, it is for the administration of Forti fabric devices and reporting of Forti fabric, and being able to generate reports. It's for logging. All 40 fabric devices are able to send logs to FortiAnalyzer. Basically, the use cases are for administration, reporting, and logging.
What is most valuable?
Logging is the best feature.
I like how everything is integrated with the FortiGate devices, FortiAuthenticator, and other fabric devices. You're able to see all the login details for the administration of FortiGate. It offers great user connectivity using that Fortinet embodiment of the user. It gives you all those login information details.
It's easy to set up.
The solution is stable.
It can scale well.
It's very user-friendly.
What needs improvement?
The fact that it only works with FortiGate devices is quite unfair. We would like to do the reporting, logging, and administration of all the public devices and all the IoT devices. We wish to add the switches, and routers from different vendors, so it's not a vendor-specific diagnostic solution.
For how long have I used the solution?
I've been using the solution for four years now.
What do I think about the stability of the solution?
The product is 100% stable. I haven't found any issues with FortiAnalyzer. It's reliable.
What do I think about the scalability of the solution?
Depending on the licenses you procure, the number of devices, and the storage space that you have, to be able to attain those logs and reports, the solution can scale.
How are customer service and support?
Support is great. Usually, when you call on them, they are right on time, and they'll be able to assign an engineer for remote session support.
How would you rate customer service and support?
Positive
How was the initial setup?
Setting the solution up is pretty easy. It's just a matter of integrating with the Fortinet public devices. FortiGate will start sending logs and then reports to FortiAnalyzer.
Once it is set up, the solution is easy to maintain.
What's my experience with pricing, setup cost, and licensing?
I'm not sure about the exact licensing costs.
What other advice do I have?
I'm working with the latest version of the solution.
We've done on-premises and cloud deployments.
Usually, clients who don't have SIEM or Nag solutions find FortiAnalyzer quite effective as it's going to give them identification of the user activity reports on different IO devices and the usage of devices. It gives you visibility of your entire infrastructure.
I'd recommend the solution. It's very user-friendly.
I'd rate the solution eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Implementer
Section Head, Enterprise Solutions & SI Management at HGC Global Communications Limited
Good performance, reliable, but interface could improve
Pros and Cons
- "The most valuable feature of Fortinet FortiAnalyzer is its performance."
- "The most valuable feature of Fortinet FortiAnalyzer is its performance."
- "Fortinet FortiAnalyzer could improve the user interface, and the experience of users receiving the reports and tracking could be better."
- "Fortinet FortiAnalyzer could improve the user interface, and the experience of users receiving the reports and tracking could be better."
What is our primary use case?
We are using Fortinet FortiAnalyzer for the managing surface for our customers. We are a service provider and we are focusing on providing a service to our customers.
What is most valuable?
The most valuable feature of Fortinet FortiAnalyzer is its performance.
What needs improvement?
Fortinet FortiAnalyzer could improve the user interface, and the experience of users receiving the reports and tracking could be better.
For how long have I used the solution?
I have been using Fortinet FortiAnalyzer for approximately three years.
What do I think about the stability of the solution?
Fortinet FortiAnalyzer is stable.
How are customer service and support?
The support from Fortinet FortiAnalyzer is good.
How was the initial setup?
The initial setup of Fortinet FortiAnalyzer is fine. There is a lot of browsing and a lot of hierarchy that you need to have a particularly good understanding of in order to track the right things that you want to select.
What's my experience with pricing, setup cost, and licensing?
There is a license needed to use this solution.
What other advice do I have?
My advice to others is they have to assess well what kind of specific function or what kind of solution they are looking for.
I recommend this solution to others, but it depends on their usage.
I rate Fortinet FortiAnalyzer a seven out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
IT Specialist at ELTEK Multimedia
Good documentation, a nice interface and a simple setup
Pros and Cons
- "It's a very stable product."
- "The initial setup is easy; it's a very stable product that we can scale, with generally good support, pretty good documentation, and an interface I like."
- "Their pricing model is not the best and needs work."
- "Their pricing model is not the best and needs work."
What is our primary use case?
Our customers are working with this product in their companies.
I haven't really played around with it so much. Basically, we're just doing log reviews, and that's it.
What is most valuable?
The initial setup is easy.
It's a very stable product.
We can scale the product as well.
Support has been good in general.
It offers pretty good documentation.
I like the interface they offer.
What needs improvement?
I'm a reseller and integrator.
I can't really tell if anything is missing. Maybe we'll find something in the future, however, I'm not sure at the moment.
Their pricing model is not the best and needs work.
It would be nice if there were more third-party integration capabilities.
For how long have I used the solution?
I've been using the solution for six months. It hasn't been that long.
What do I think about the stability of the solution?
Like all Fortinet products, it is pretty stable. There are no bugs or glitches. It doesn't crash or freeze.
What do I think about the scalability of the solution?
The solution is scalable and expandable. It's not an issue at all.
We have three people working on it in our organization.
How are customer service and support?
Technical support is fairly good. I haven't really needed to call support just yet.
Which solution did I use previously and why did I switch?
Our company is a Fortinet supplier. We don't deal with other solutions.
How was the initial setup?
It's an easy initial setup. The implementation is not overly complex. The deployment is pretty fast and only takes two or three hours.
What's my experience with pricing, setup cost, and licensing?
I'm not a fan of the licensing system in general. I don't like their pricing model.
What other advice do I have?
I'd rate the solution nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Senior Manager at Technometrics Limited
Stable and scalable solution, but the technical support could be better
Pros and Cons
- "We have the most data visibility."
- "We have the most data visibility with this solution."
- "The user interface could be a bit more user-friendly."
- "The user interface could be a bit more user-friendly, and they could have more robust support."
What is our primary use case?
We have the most data visibility with this solution.
What needs improvement?
The user interface could be a bit more user-friendly, and they could have more robust support. The support does not respond quickly. They should be able to solve the problems in one or two days, but sometimes it takes time. They constantly ask for logs, and it takes time.
For how long have I used the solution?
We have been using this solution for three years, and we are using the latest version. It is deployed on-premises and cloud. It gets all the logs in a single platform because we have multiple sites.
What do I think about the stability of the solution?
The stability is good. I rate it an eight out of ten.
What do I think about the scalability of the solution?
For cloud, the solution is always scalable. We have about ten customers using Fortinet FortiAnalyzer.
How are customer service and support?
I rate the technical support a five out of ten.
How was the initial setup?
The initial setup was not complex.
What other advice do I have?
I rate this solution a seven out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Project Manager at a tech services company with 51-200 employees
Enriches visibility for security solutions
Pros and Cons
- "FortiAnalyzer's best feature is centralized log analysis. It's based on SQL database, so I can fully customize my report, chart-wise and log-wise, and can create as many reports as I want without any limit."
- "FortiAnalyzer's best feature is centralized log analysis; it's based on an SQL database, so I can fully customize my report, chart-wise and log-wise, and can create as many reports as I want without any limit."
- "FortiAnalyzer's price could be lower."
- "FortiAnalyzer's price could be lower, but it is cheaper than competitors like Palo Alto, Forcepoint, or Sophos."
What is our primary use case?
I mainly use FortiAnalyzer to centralize logs from multiple devices and generate local reports. It can work in two operation modes: as a collector only or an analyzer.
How has it helped my organization?
FortiAnalyzer has enriched the visibility for all our security solutions.
What is most valuable?
FortiAnalyzer's best feature is centralized log analysis. It's based on SQL database, so I can fully customize my report, chart-wise and log-wise, and can create as many reports as I want without any limit. It also has an important feature called Indicators of Compromise, an artificial intelligence feature that detects and alerts you when there is a breach in your entity.
For how long have I used the solution?
I've been using FortiAnalyzer for ten years.
What do I think about the stability of the solution?
FortiAnalyzer is a very mature and stable product.
What do I think about the scalability of the solution?
FortiAnalyzer is scalable. When my organization expands in any way, I can implement a FortiAnalyzer as a collector only, it will collect the log, and I can send this to the main analyzer. If I use the virtual alert mode, this is a stackable license, so I can expand the log size or the internal hard-disc log size by purchasing a license. There is also a workaround solution, to automatically upload the old log file to shared storage and delete the old one, which gives more space in the hard drive.
How are customer service and support?
FortiAnalyzer's technical support is helpful.
How would you rate customer service and support?
Positive
How was the initial setup?
FortiAnalyzer is straightforward to implement and integrate, but a little experience is needed to generate a technical level.
What was our ROI?
We get good ROI from FortiAnalyzer.
What's my experience with pricing, setup cost, and licensing?
FortiAnalyzer's price could be lower, but it is cheaper than competitors like Palo Alto, Forcepoint, or Sophos. The basic license is available on a yearly basis, but some other licenses can be for three, six, or nine months as required. There are no hidden costs associated with this product.
What other advice do I have?
Don't just depend on the basic reports, you can get much more out of FortiAnalyzer if you know how to create customized reports from the SQL queries. I would give FortiAnalyzer a rating of eight out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. partner
Development and Innovation Manager at NSB
Good UI and customization with everything under one umbrella
Pros and Cons
- "The product can scale."
- "The stability of the product is good and it has been reliable."
- "The pricing could be better."
- "The pricing could be better."
What is our primary use case?
We are using it only for integration and getting information from FortiAnalyzer to use and analyze important events.
What is most valuable?
The stability is good.
They are able to integrate everything under one umbrella, which is nice.
The UI and customization are good right now.
The product can scale.
What needs improvement?
The pricing could be better.
We'd like integration with more providers.
The initial setup can be difficult.
For how long have I used the solution?
We've used the solution for about a year.
What do I think about the stability of the solution?
The stability of the product is good and it has been reliable. There are no bugs or glitches and it doesn't crash or freeze.
What do I think about the scalability of the solution?
The product can scale. It's simple to expand as necessary.
How are customer service and support?
I've never had to contact technical support. I cannot speak to how helpful or responsive they would be.
Which solution did I use previously and why did I switch?
We are using all the solutions from Fortinet, and FortiAnalyzer. We are planning to use FortiSIEM and FortiWeb.
How was the initial setup?
It's not too easy to set up. It can be a bit difficult. They could make it a little bit easier.
You only need two people (engineers) to handle deployment and maintenance.
What other advice do I have?
We are partners for Fortinet. So we are planning to use the FortiEDR, and then we're going to expand.
We only use FortiAnalyzer for internal purposes.
Our company is using the most up-to-date solution.
I'd advise potential users to look for a partner who knows how to handle the product and use their knowledge to give you quick training for your own people. The learning curve is not that easy.
I'd rate the solution eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
Download our free Fortinet FortiAnalyzer Report and get advice and tips from experienced pros
sharing their opinions.
Updated: March 2026
Product Categories
Log ManagementPopular Comparisons
Splunk Enterprise Security
Dynatrace
IBM Security QRadar
Elastic Security
Grafana Loki
Elastic Observability
Security Onion
Graylog Enterprise
LogRhythm SIEM
Elastic Stack
Amazon OpenSearch Service
Amazon CloudWatch
Buyer's Guide
Download our free Fortinet FortiAnalyzer Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- When evaluating Log Management tools and software, what aspect do you think is the most important to look for?
- Datadog vs ELK: which one is good in terms of performance, cost and efficiency?
- Which Windows event log monitoring tool do you recommend?
- What is the difference between log management and SIEM?
- Splunk vs. Elastic Stack
- How can Cloudtrail logs be used effectively to improve log monitoring?
- Why hot data and cold data differences in SIEM solutions are not discussed sufficiently?
- When evaluating Log Management solutions, what aspect do you think is the most important to look for?
- When evaluating Log Management solutions, what aspects do you think are the most important to look for?
- Why are Log Management tools important for companies?




















