FortiSOAR Reviews & Insights

FortiSOAR is only Security Orchestration Automation & Response tool that has extensive product capability & flexibility, tied to case management & leverage the power of Forti Security Fabric reducing the Burdon of Security operation center (SOC) team ultimately working as force multiplier for teams to response faster- vital to reducing the threat landscape for organizations .
FortiSOAR remedies alert fatigue & false positives by centralizing & aggregating alerts enriching them with add context while corelating them across a security stack to rapidly investigate . This includes custom playbook for triage process. Accelerating incident response & optimizing security operations.

Most organization with medium & maturity SOC struggle with alert fatigue & false positives with addressing alert volume is result in increasing risk of critical alerts being masked by trivial one , in this situation FortiSOAR help in case management : rapidly response in case of crises also.
FortiSOAR is designed very well where Fortinet have other stack of security component also like Fortinet NGFW & Forti SIEM etc.. Fortinet NGFW can and generate the FortiSOAR instance through FortiCloud for Customer .
However In absence of FortiFabric it require lot of connectors to work well the solution.

From ticketing to reporting and automation to orchestration we have met 99 percent of our highly customized requirements. More than 200 security products can be integrated into the platform, allowing organizations to build playbooks for various security operations. As a result, MTTR for security incidents can be reduced and ROI maximized.

It's simple to set up on a virtual machine. Infinite mini-panels of platforms, incidents, alarms, and other features can be created using the intuitive user interface. Investing in better security, visibility, and incident response is well worth the cost. It's excellent, in my opinion.

The FortiSOAR solution had a great impact on our security operations center because it allowed us to unify and integrate different security systems/platforms and create a personalized center for viewing alerts and notifications. We use it to manage assets and especially network vulnerabilities that are the most critical. We set up the dashboards to make it easy to see everything in general and also the mini-panels specified for each platform. I found the interface very user-friendly and intuitive to configure, customize and read data through dashboards and reports. Technical support is a differential because the manufacturer's engineers are very helpful, and intelligent and help to clear up configuration doubts and unknown alerts.

I recommend it to all companies with scenarios that are looking for a SOC queue management tool, vulnerabilities, assets, indicators, visualization panels with alarms and real-time notifications, and personalized reports of all the functions present in the tool. It's easy to install and configure on a VM. The interface is user-friendly and fully customizable and can even create infinite mini-panels of platforms, incidents, alarms, and other functions. The price is great and it's an investment to improve security and visibility and incident handling.