As part of the Fortinet Security Fabric, FortiAnalyzer provides security fabric analytics and automation to provide better detection and response against cyber risks.
N/A
Trellix Intelligent Sandbox
Score 7.1 out of 10
N/A
Trellix Intelligent Sandbox (formerly McAfee Advanced Threat Defense) enables organizations to detect advanced, evasive malware and convert threat information into immediate action and protection. It includes additional inspection capabilities that broaden detection and expose evasive threats. Integration between security solutions—from network and endpoint to investigation—enables instant sharing of threat information across the environment, enhancing protection and investigation. Deployment…
FortiAnalyzer is well-suited for deployment in large organizations characterized by substantial traffic volumes and extensive user bases, facilitating the acquisition of detailed logs and comprehensive dashboards. Nevertheless, in my opinion, its utility may be comparatively limited for smaller organizations, where the firewall alone can provide a sufficient overview of the network traffic.
It is suited for people who are looking to secure their PCs from malware attacks. There is also email threat prevention where it will detect unwanted mails which come through our inbox. The sandbox feature comes in handy when you want to test new applications that will prevent it spreading to multiple systems in an environment if it is malicious. It has good customer support for all our technical queries. Since pricing is quite high, small-scale organizations can't afford it.
FortiAnalyzer is easy to deploy are ready to use right out of the box. The user interface is intuitive and the reporting engine is very customizable however most of the 'canned' reports are usable right away. It is easy to add firewalls under management and event correlation happens immediately. FortiAnalyzer is a great log aggregator for all of your firewalls and then upload meaningful data to a SEIM.
Personally, I have only called our internal IT team about needing changes to permissions, not McAfee itself, but our IT team can make the changes though it seems to take them longer than I would think it needs to take. As someone who administers a different program, with different permissions, I would feel they should be able to make the exceptions faster and easier.
FortiAnalyzer is significantly cheaper and a better value for the money especially if you have FortiGate firewalls in the datacenter or in the cloud. FortiAnalyzer manages physical, virtual, and cloud firewalls in a single pane of glass providing a wholistic enterprise view of your security landscape. Compliance reporting comes built-in with the most popular reports ready at a click of a button. FortiAnalyzer is a great aggregation point before uploading logs to a SEIM / SOC tool.
McAfee brand is used, mcafee antivirus scan, mcafee drive encryption, mcafee DLP, mcafee cloud proxy. He Kaspersky at the corporate level and used his admin dashboard is a bit rough. I recommend mcafee since the graphical environment is very friendly with the administrator. We selected it because at the administration level it is more comfortable, support for end users is very easy, the administration console can create roles and segregate permissions.