Must Have for FortiGate Management
Pros
- Event correlation
- Real-time detection
- Compliance Reporting
- Security Tools orchestration
- Security workflow automation
- Integration with ServiceNOW
- Centralized NOC/SOC visibility
Cons
- Administrative Domains and Software Versions are difficult to maintain
- managing different FortiOS versions gets complicated quite easily
- Administrative Domains must be well architected from the beginning
Most Important Features
- log aggregation
- multi firewall visibility
- analysis of enterprise security landscape
- easy to deploy
Return on Investment
- we were able to retire 3 legacy security tools in favor of FortiAnalyzer
- Automate 155 security tasks and reporting
- one click compliance reporting for PCI-DSS
- Enterprise security governance
- Visualize the security landscape
- Eliminate and or prune unnecessary rules
- Tune overly permissive rules for tighter security
Alternatives Considered
Tufin Orchestration Suite and Splunk Enterprise Security (SIEM)
Other Software Used
Tufin Orchestration Suite, Splunk Enterprise Security (SIEM), AlgoSec
