FortiAnalyzer vs. HCL BigFix

FortiAnalyzer is well-suited for deployment in large organizations characterized by substantial traffic volumes and extensive user bases, facilitating the acquisition of detailed logs and comprehensive dashboards. Nevertheless, in my opinion, its utility may be comparatively limited for smaller organizations, where the firewall alone can provide a sufficient overview of the network traffic.

Incentivized

BigFix is well suited for patch review and deployment, but there are key features that can definitely be improved. An example is that if a specific patch is deployed, but a cumulative update that contains that patch is not deployed, the system still shows the patch as outstanding or not implemented. Another area for improvement is the customization of BigFix. The tool has many uses and can be extremely helpful, but the amount of knowledge required to customize the solution is significant and customized scripts or "fixlets" need to be created. If common things could be pre-packaged and provided to the customer community, it would allow for an easier deployment and use of the tool.

Incentivized

• Custom dashboard
• VPN traffic monitoring
• Internet traffic monitoring
• Users behavior analysis
• Integrate well with the FortiGate firewall
• Log analysis

Incentivized

• Custom patch packages are easy to set up and allows for use with a repository.
• Asset management by use of agents is simple and allows for user assignment by the device.
• Reporting has a large variety of templates.

Incentivized

• Administrative Domains and Software Versions are difficult to maintain
• managing different FortiOS versions gets complicated quite easily
• Administrative Domains must be well architected from the beginning

Incentivized

• No console for macOS
• No easy setup UI for macOS users
• Patching can be complicated if you don't understand relevance
• Patching can be complicated it you don't understand scripting
• Could be better in helping with CIS Benchmarks

Incentivized

FortiAnalyzer is easy to deploy are ready to use right out of the box. The user interface is intuitive and the reporting engine is very customizable however most of the 'canned' reports are usable right away. It is easy to add firewalls under management and event correlation happens immediately. FortiAnalyzer is a great log aggregator for all of your firewalls and then upload meaningful data to a SEIM.

Incentivized

While some support calls are quickly responded to, many times our engineers have been pointed to collaborative web sites such as Bigfix.me for solutions or the option of engaging professional services has been proposed. While this may seem like a good way to drive business, it is not seen as efficient a support process as could be provided to the customer base.

Incentivized

FortiAnalyzer is significantly cheaper and a better value for the money especially if you have FortiGate firewalls in the datacenter or in the cloud. FortiAnalyzer manages physical, virtual, and cloud firewalls in a single pane of glass providing a wholistic enterprise view of your security landscape. Compliance reporting comes built-in with the most popular reports ready at a click of a button. FortiAnalyzer is a great aggregation point before uploading logs to a SEIM / SOC tool.

Incentivized

We have significantly enhanced our ability to patch desktops, including laptops, desktop, cloud, virtual machines and other mobile devices used by end-users. BigFix's endpoint management functionality allows us to seamlessly patch a wide range of operating systems, such as Windows, MacOS, ChromeOS, and Linux systems, ensuring comprehensive patch management across IT infrastructures. We have established a track record of delivering secure and hassle-free patching solutions to our clients

• we were able to retire 3 legacy security tools in favor of FortiAnalyzer
• Automate 155 security tasks and reporting
• one click compliance reporting for PCI-DSS
• Enterprise security governance
• Visualize the security landscape
• Eliminate and or prune unnecessary rules
• Tune overly permissive rules for tighter security

Incentivized

• Overall, the product helps achieve the security posture mandated by HIPAA for our organization.
• It is a decent inventory management solution, and provides IT leaders with useful information for decision making.

Incentivized