FortiSOAR

What differentiates FortiSOAR from other similar products?

The interesting thing about this tool is that it automates many steps in security incident response procedures. The necessity to focus only on threats and exclude repetitive task made my security team work more effectively using FortiSOAR – threat response time is significantly less.

What is your favorite aspect of this product?

In my opinion, the best thing about FortiSOAR is navigation and work on it since they used simple and more comprehensible interface. Even for those who have no significant knowledge about cybersecurity, this instrument is going to be easy to use. In addition, those in Fortinet enjoy warm technical support, they are always willing to support you if there are any issues or questions that you may wish to ask.

What do you dislike most about this product?

In what I least prefer about FortiSOAR its installation is slightly complicated at the starting point other than that running the software is a cakewalk.

What recommendations would you give to someone considering this product?

In conclusion, I would like to see FortiSOAR adopted by any organization that seeks to get the best out of its security team and at the same time work towards enhancing the organizations cyber security posture. It is my sincere hope that this software assisted me as much as I am absolutely confident it will assist you too.

What differentiates FortiSOAR from other similar products?

Great integration and still improving day by day.

What is your favorite aspect of this product?

The fact that the playbook designer is focused on the "no-code" philosophy; this way there is a lot less probability that there are errors encountered when the playbook is ran. The war room feature might be a game-changer in case of an IR, really nice way to concentrate everything in one spot.

What do you dislike most about this product?

The "no-code" logic, is a pro but it can also be a con. Maybe FortiSOAR is too focused on this aspect and leaving behind scripting with python for further customization. Don't get me wrong, there is a scripting section, however it should not be left behind. Something that might bring confusion to someone approaching to fortiSOAR for the first time is the data collected from the FortiSIEM: on the fortisiem an "offense" is called "incident" while when pushed on FortiSOAR it becomes an "Alert" which then can be escalated to an "Incident". In my humble opinion the naming convention should be reviewed.

What recommendations would you give to someone considering this product?

It's a great product, and it's quickly improving. So if your company is considering purchasing a SOAR this might suit your needs.

What differentiates FortiSOAR from other similar products?

Extensive Functionality: Offers a wide range of features including case management, playbook automation, threat intelligence integration, and reporting. Flexibility: Supports various security tools and platforms, enabling integration with existing security infrastructure. Ease of Use: Intuitive interface and pre-built playbooks simplify configuration and deployment. Scalability: Adapts to organizations of various sizes and security needs. FortiSecurity Fabric Integration: Provides native integration with other Fortinet security products for enhanced visibility and control. Cost-Effective: Competitive pricing compared to some competitors.

What is your favorite aspect of this product?

Case Management: Centralized platform for managing and tracking security incidents. Playbook Automation: Automates repetitive tasks and workflows based on pre-defined playbooks. Threat Intelligence Integration: Integrates with various threat intelligence feeds to enrich incident investigation. Reporting and Analytics: Provides detailed reports and dashboards for security analysis and decision-making. Vulnerability Management: Integrates with vulnerability management tools for automated remediation. Asset Management: Tracks and manages security assets across the organization.

What do you dislike most about this product?

Initial Setup Complexity: Can be complex to set up and configure, especially for large deployments. Limited Customization: While offering pre-built playbooks, advanced users might desire more in-depth customization options. Potential Alert Fatigue: Extensive features might lead to alert fatigue if not properly configured and managed. Limited Threat Intelligence Integration: Some users report limited integration with specific threat intelligence feeds.

What recommendations would you give to someone considering this product?

FortiSOAR is a competent SOAR platform offering a good balance of features and ease of use at a competitive price point. However, consider the potential drawbacks, such as initial setup complexity and limited customization, before making a decision. Remember, compare it to other SOAR solutions based on your specific needs and security infrastructure.