FortiSOAR

What differentiates FortiSOAR from other similar products?

The interesting thing about this tool is that it automates many steps in security incident response procedures. The necessity to focus only on threats and exclude repetitive task made my security team work more effectively using FortiSOAR – threat response time is significantly less.

What is your favorite aspect of this product?

In my opinion, the best thing about FortiSOAR is navigation and work on it since they used simple and more comprehensible interface. Even for those who have no significant knowledge about cybersecurity, this instrument is going to be easy to use. In addition, those in Fortinet enjoy warm technical support, they are always willing to support you if there are any issues or questions that you may wish to ask.

What do you dislike most about this product?

In what I least prefer about FortiSOAR its installation is slightly complicated at the starting point other than that running the software is a cakewalk.

What recommendations would you give to someone considering this product?

In conclusion, I would like to see FortiSOAR adopted by any organization that seeks to get the best out of its security team and at the same time work towards enhancing the organizations cyber security posture. It is my sincere hope that this software assisted me as much as I am absolutely confident it will assist you too.

What differentiates FortiSOAR from other similar products?

Great integration and still improving day by day.

What is your favorite aspect of this product?

The fact that the playbook designer is focused on the "no-code" philosophy; this way there is a lot less probability that there are errors encountered when the playbook is ran. The war room feature might be a game-changer in case of an IR, really nice way to concentrate everything in one spot.

What do you dislike most about this product?

The "no-code" logic, is a pro but it can also be a con. Maybe FortiSOAR is too focused on this aspect and leaving behind scripting with python for further customization. Don't get me wrong, there is a scripting section, however it should not be left behind. Something that might bring confusion to someone approaching to fortiSOAR for the first time is the data collected from the FortiSIEM: on the fortisiem an "offense" is called "incident" while when pushed on FortiSOAR it becomes an "Alert" which then can be escalated to an "Incident". In my humble opinion the naming convention should be reviewed.

What recommendations would you give to someone considering this product?

It's a great product, and it's quickly improving. So if your company is considering purchasing a SOAR this might suit your needs.

What differentiates FortiSOAR from other similar products?

Its extensive collection of pre-built connectors and playbooks sets it apart from competing programs. It is the perfect option for enterprises with different security ecosystems, since these connectors enable easy integration with a variety of security technologies and apps. Security teams can automate repetitive activities with FortiSOAR, enabling quicker responses to threats. This is especially useful in the high-speed threat environment of today, where every second matters.

What is your favorite aspect of this product?

The platform is user-friendly and accessible to both seasoned security professionals and those who are new to security orchestration. Because of its simplicity, security automation may be implemented more quickly and with a smaller learning curve. It serves as a single point of contact for information on security incidents and gives a comprehensive picture of the organization's security posture. Decision-making is made easier as a result, and security activities are run more effectively overall.

What do you dislike most about this product?

Enhancing its integration capabilities with a wider range of security tools and technologies, however, will give security teams even more thorough control and automation, strengthening cyber defense measures.

What recommendations would you give to someone considering this product?

The automated features reduce response times, and the centralized view of security problems improves situational awareness. These advantages lead to increased operational effectiveness and security. I automated the phishing incident investigation and response using FortiSOAR. We were able to quickly evaluate the seriousness of phishing emails and initiate automated countermeasures thanks to the platform's prepared playbooks. This reduces the possibility of phishing attacks while also saving time.