VIDEO: Fortinet FortiSIEM Review: Key features, Pros And Cons, And Product Alternatives

fortissim is a security information and event management or sim software system from the cyber security software company fortinet if you're in the market for a sim solution you'll want to consider fortisim but if you're just starting your search we can help use our product selection tool at technologyadvice.com to get a free list of sim software recommendations click the link in the description below to get started forda sim is a sim platform that lets socs scan assets for data detect threats and respond to incidents built for scalability fortisim supports multi-tenancy letting mssps manage all of their clients from a single graphical user interface the system also uses artificial intelligence to establish baselines and detect anomalous behavior through its ueba feature notably fortissim can help break down silos between socs and nocs by collecting data from a variety of sources and analyzing all of that data in one system pricing for fortissim is quote based the system does not offer a free trial but you can request a demo from the company's website fortissim is available as hardware appliances virtual machines or in the public cloud through amazon web services fortisim comes with a number of features to help you manage security functions one distinguishing feature of ford assim is its ability to scan a wide variety of assets including assets that aren't typically under the management of socs the system comes with built-in support for a number of vendor apis and security systems and it works quickly with log data once you've connected assets fortisim starts collecting logs parsing normalizing indexing and storing them for analysis if you want to make changes to a parser after adding a system you can modify it from the user interface and redeploy without losing data a relatively new feature of fortissim is ueba or user entity and behavior analytics this allows fortisim to monitor both human and non-human processes as well as machine entities specifically the system collects data on the user process device resource and behavior to monitor for unusual and potentially threatening behavior this feature works for endpoints when they are on and off an organization's network a powerful capability at a time when more and more organizations are embracing a remote or hybrid working model when fortissim detects a threat it sends notifications using a policy-based incident framework like many sim solutions fortism takes a risk-based approach meaning threats that the system identifies as posing a greater risk are prioritized over threats that pose a lower risk for incident response analysts can use the built-in ticketing system and set triggers to automatically deploy a remediation script when certain incidents occur fortisim is a top rated product but it still comes with its pros and cons one of the biggest pros of fortissim might be its monitoring and alerting capabilities fordism can collect data on devices traditionally managed by both socs and nocs and it also comes with a remote management feature customers have also praised fordism for easy deployment and good user experience however some customers note that while fortisim offers a good amount of functionality it also comes with a steep learning curve others have also reported high costs and a complex sales cycle it's a good idea to get multiple quotes before choosing a sim solution if you're interested in ford assim you might also want to consider ibm qradar log rhythm exabeam and splunk still not sure if fortissim is right for you use our product selection tool at technologyadvice.com to get a free list of sim software recommendations click the button on the left to get started you

This transcript was generated automatically from the video's captions and may contain errors.