Fortinet FortiSIEM vs SolarWinds NPM comparison

Cancel
You must select at least 2 products to compare!
Microsoft Logo
31,886 views|17,713 comparisons
92% willing to recommend
Fortinet Logo
7,231 views|3,991 comparisons
80% willing to recommend
SolarWinds Logo
15,197 views|8,289 comparisons
92% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Fortinet FortiSIEM and SolarWinds NPM based on real PeerSpot user reviews.

Find out in this report how the two Security Information and Event Management (SIEM) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Fortinet FortiSIEM vs. SolarWinds NPM Report (Updated: May 2020).
771,157 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The machine learning and artificial intelligence on offer are great.""Sentinel enables us to ingest data from our entire ecosystem. In addition to integrating our Cisco ASA Firewall logs, we get our Palo Alto proxy logs and some on-premises data coming from our hardware devices... That is very important and is one way Sentinel is playing a wider role in our environment.""The native integration of the Microsoft security solution has been essential because it helps reduce some false positives, especially with some of the impossible travel rules that may be configured in Microsoft 365. For some organizations, that might be benign because they're using VPNs, etc.""Microsoft Sentinel provides the capability to integrate different log sources. On top of having several data connectors in place, you can also do integration with a threat intelligence platform to enhance and enrich the data that's available. You can collect as many logs and build all the use cases.""The automation feature is valuable.""The connectivity and analytics are great.""The ability of all these solutions to work together natively is essential. We have an Azure subscription, including Log Analytics. This feature automatically acts as one of the security baselines and detects recommendations because it also integrates with Defender. We can pull the sysadmin logs from Azure. It's all seamless and native.""It is able to connect to an ever-growing number of platforms and systems within the Microsoft ecosystem, such as Azure Active Directory and Microsoft 365 or Office 365, as well as to external services and systems that can be brought in and managed. We can manage on-premises infrastructure. We can manage not just the things that are running in Azure in the public cloud, but through Azure Arc and the hybrid capabilities, we can monitor on-premises servers and endpoints. We can monitor VMware infrastructure, for instance, running as part of a hybrid environment."

More Microsoft Sentinel Pros →

"Both the collecting logs and duo correlation are valuable features for us.""AccelOps can handle a lot of data and it's just so important to true monitoring. Also, I can create a lot of rules to detect anything I like.""We have found the most important features in Fortinet FortiSIEM to be the correlation, file utility check, latest file, and hash changes. These features are important for us.""One of the most valuable features is that we can combine SOC and NOC operations in the same tool. We can provide NOC and SOC services in the same tool for two separate teams. There are plenty of third-party solutions that integrate with FortiSIEM. All these solutions already have a ready integration, and we have the possibility to create a custom connector for these solutions. Its reports are also very good.""We like the integration of all of these Fortinet platforms together. Everything is integrated well, and we are able to sell that as a service to our customers.""The solution is easy to use and user-friendly.""Easy alert setup which enables different alerts in different categories.""The event correlation is pretty robust. The GUI is pretty good."

More Fortinet FortiSIEM Pros →

"The solution ranks as one of the top five monitoring tools.""There are a lot of options for customization of the dashboard, alerts, and reports.""We had some interfaces where the SFP Ports were having some problems after a while. We found which of the SFP Ports was having the error and changed it, so the bandwidth become okay.""The most valuable feature is the graphical user interface.""It gives us a map of the network setup and one console to see the entire network.""The initial setup is easy.""It is very extensible with 'SWQL' and APIs to where we are beginning to integrate it with network automation.""SolarWinds is reasonably priced."

More SolarWinds NPM Pros →

Cons
"The built-in SOAR is not really good out-of-the-box. The SOAR relies on logic apps and you almost need to have some kind of developer background to be able to make these logic apps. Most security people cannot develop anything...""They need to work with other security vendors. For example, we replaced our email gateway with Symantec, but we couldn't collect these logs with Azure Sentinel. Instead of collecting these logs with Azure Sentinel, we are collecting them on Qradar. We couldn't do it with Sentinel, which is a problem for us.""When we pass KPIs to the governance department, there's no option to provide rights to the data or dashboard to colleagues. We can use Power BI for this, but it isn't easy or convenient. They should just come up with a way to provide limited role-based access to auditing personnel""If you're looking to use canned queries, the interface could be a little more straightforward. It's not immediately intuitive regarding how you use it. You have to take a canned query and paste it into an operational box and then you hit a button... They could improve the ease of deploying these queries.""Its documentation is not so simple. It is easy for somebody who is Microsoft certified or more closely attached to Microsoft solutions. It is not easy for those who are working on open-source platforms. There isn't a central point where everything is documented, and there is no specific training or certification.""We are invoiced according to the amount of data generated within each log.""The playbook development environment is not as rich as it should be. There are multiple occasions when we face problems while creating the playbook.""Documentation is the main thing that could be improved. In terms of product usage, the documentation is pretty good, but I'd like a lot more documentation on Kusto Query Language."

More Microsoft Sentinel Cons →

"The dashboard needs to improve.""There is no proper guide for integration or configuration.""The biggest thing that could be better is a quicker response to support cases.""It lacks a "wizard" that shows a particular user's activity or particular circumstance. I think the interface is intimidating because there's so much information there.""We need to see incident reports about the event log, without events from the administrator or through human interaction.""With FortiSIEM, the issue has to do with the ways we can generate a report. It's not as flexible compared to that with other SIEM tools, like Splunk.""FortiSIEM is not a market leader in the SIEM space.""I would like to see easier implementation in the future."

More Fortinet FortiSIEM Cons →

"Consolidation of platforms would provide a smoother experience.""SolarWinds could offer more support and insights for a broader range of devices. Currently, it focuses on routers, switches, and some load balancers. However, it lacks an out-of-the-box dashboard for monitoring firewalls and some other modern network security devices. We have to customize it a lot.""A feature I would ask for is for them to have this solution available for Linux systems instead of Windows.""The root cause analysis and installation faults are not clear.""It would be good to have high security.""The reporting is good, but I want it to be a little easier when creating custom reports. The reports are all on the website now, but it takes some know how to get some to display the way you would like.""The solution is not always good with new features, so it's take a long time.""The product is scalable, but at a cost. Extra modules have to be purchased for each extra server. The initial set up isn't complex, but will require someone who is experienced with the network monitoring system"

More SolarWinds NPM Cons →

Pricing and Cost Advice
  • "It comes with a Microsoft subscription which the customer has, so they don't have to invest somewhere else."
  • "It is a consumption-based license model. bands at 100, 200, 400 GB per day etc. Azure Sentinel Pricing | Microsoft Azure"
  • "Good monthly operational cost model for the detection and response outcomes delivered, M365 logs don't count toward the limits which is a good benefit."
  • "I have had mixed feedback. At one point, I heard a client say that it sometimes seems more expensive. Most of the clients are on Office 365 or M365, and they are forced to take Azure SIEM because of the integration."
  • "It is kind of like a sliding scale. There are different tiers of pricing that go from $100 per day up to $3,500 per day. So, it just kind of depends on how much data is being stored. There can be additional costs to the standard license other than the additional data. It just kind of depends on what other services you're spinning up in Azure, or if you're using something like Azure log analytics."
  • "I am just paying for the log space with Azure Sentinel. It costs us about $2,000 a month. Most of the logs are free. We are only paying money for Azure Firewall logs because email logs or Azure AD logs are free to use for us."
  • "Sentinel is a bit expensive. If you can figure a way of configuring it to meet your needs, then you can find a way around the cost."
  • "Azure Sentinel is very costly, or at least it appears to be very costly. The costs vary based on your ingestion and your retention charges."
  • More Microsoft Sentinel Pricing and Cost Advice →

  • "Please be cheaper and more simplified."
  • "We bought the perpetual license, so we own the product, but there is a three-year support renewal fee for that."
  • "Pricing is acceptable for more than 90% of our customers, as they normally get discounts."
  • "Its price can be better. We are Fortinet partners, so we can get discounts, but its price can be an issue at the beginning for others. There is a licensing scheme for every case. There are three licensing schemes that we can choose from."
  • "The price of Fortinet FortiSIEM is a lot less when compared to other solutions."
  • "They have a yearly subscription."
  • "The solution is available for both, perpetual and subscription licenses."
  • "Manageable, however would be better as pay as you go versus CapEX."
  • More Fortinet FortiSIEM Pricing and Cost Advice →

  • "I’d suggest that people be aware that licensing has tiers."
  • "Excluding the costs of running VMs and physical blade servers, our licensing costs run around US$200,000/year for over 60 polling engines."
  • "I think that the cost has risen, but the functionality and versatility is way above other products."
  • "The licensing model is such that you can purchase only what you need; and then grow into the next level by paying only the difference in price and the associated maintenance costs."
  • "The price points are more than competitive when compared to other vendors."
  • "I believe the original setup cost was around $3500 with an annual cost of around $1200-$1500 to renew the support license. This would bring the average day-to-day cost of around $5-$6 over three years."
  • "You have to license it per year, for the support. You don't really need to have support once you've already set it up. Once you install SolarWinds, you can skip on the licensing. It will still work."
  • "The pricing needs to be improved. It is too high. One full engine costs around $10 000, which is why we don't have high availability right now."
  • More SolarWinds NPM Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
    771,157 professionals have used our research since 2012.
    Comparison Review
    Anonymous User
    I have researched a quite a few network monitoring tools which can be used for various monitoring purposes of not only the servers, but the intermediate routers as well. There are majorly three types of these softwares. Ones which are completely open-source, you can do almost anything you want using these, but they require quite some expertise before you can use them. Then there are the ones that are not open source, the enterprise softwares and cost you some money, but on the other hand, they are extremely easy to set-up and learn. You can have them up and running in a matter of minutes. And then there are those which are completely cloud based. They can be free of cost or charge some money depending on the software. The good thing about these is that you don’t have to install any extra software, and it can be managed completely online but then again these have limited features and you cannot exploit them to the full extent as you can do with the open-source and to some extent the enterprise software, so I won’t suggest you to use these, because these are generally not the complete solutions and require other support software to achieve the same. Below I have listed the outstanding pros and cons of the various Network analyzers that you can look into Nagios Pros: Nagios offers an extensive set of collector plug-ins that allows users to gather performance and availability data from a broad range of operating systems, including  Windows and Netware Nagios… Read more →
    Questions from the Community
    Top Answer:Yes, Azure Sentinel is a SIEM on the Cloud. Multiple data sources can be uploaded and analyzed with Azure Sentinel and… more »
    Top Answer:It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for… more »
    Top Answer:We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is… more »
    Top Answer:Real-time monitoring makes life quite easy for me.
    Top Answer:The price is competitive. We can scale based on the licensing. It is an annual CapEx.
    Top Answer:Network detection and response is a separate product. That's how I ended up with Wazuh. I'm looking for something to… more »
    Top Answer:It actually depends on the exact purpose or kind of devices (network devices, servers, something else). Some tools are… more »
    Top Answer:From my point of view, SolarWind is the best tool.
    Top Answer:We are partners with SolarWinds and we sell a lot of Network management to large enterprises also because of… more »
    Comparisons
    Also Known As
    Azure Sentinel
    FortiSIEM, AccelOps
    Solarwinds Network Performance Monitor, SolarWinds Network Bandwidth Analyzer
    Learn More
    Overview

    Microsoft Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution that lets you see and stop threats before they cause harm. Microsoft Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for alert detection, threat visibility, proactive hunting, and threat response. Eliminate security infrastructure setup and maintenance, and elastically scale to meet your security needs—while reducing IT costs. With Microsoft Sentinel, you can:

    - Collect data at cloud scale—across all users, devices, applications, and infrastructure, both on-premises and in multiple clouds

    - Detect previously uncovered threats and minimize false positives using analytics and unparalleled threat intelligence from Microsoft

    - Investigate threats with AI and hunt suspicious activities at scale, tapping into decades of cybersecurity work at Microsoft

    - Respond to incidents rapidly with built-in orchestration and automation of common tasks

    To learn more about our solution, ask questions, and share feedback, join our Microsoft Security, Compliance and Identity Community.

    FortiSIEM (formerly AccelOps 4) provides an actionable security intelligence platform to monitor security, performance and compliance through a single pane of glass.

    Companies around the world use FortiSIEM for the following use cases:

    • Threat management and intelligence that provide situational awareness and anomaly detection
    • Alleviating compliance mandate concerns for PCI, HIPAA and SOX
    • Managing “alert overload”
    • Handling the “too many tools” reporting issue
    • Addressing the MSPs/MSSPs pain of meeting service level agreements

    SolarWinds NPM is a network monitoring solution that enables you to detect, diagnose, and resolve network performance issues and outages quickly and efficiently. The solution is a powerful tool that can help you increase service levels, reduce downtime with multi vendor network monitoring, simplify the management of complex network devices, improve operational efficiency, and much more.

    SolarWinds NPM Features

    SolarWinds NPM has many valuable key features. Some of the most useful ones include:

    • Increased scalability
    • Fault, performance, and availability monitoring
    • Dynamic network discovery and mapping
    • Cross-stack network data correlation
    • Customizable topology
    • Dependency-aware intelligent alerts
    • Intelligent maps
    • Automated capacity forecasting, alerting, and reporting
    • Logical and physical network monitoring
    • Monitor Azure vNet gateway visibility

    SolarWinds NPM Benefits

    There are several benefits to implementing SolarWinds NPM. Some of the biggest advantages the solution offers include:

    • Comprehensive monitoring for advanced network devices: With SolarWinds NPM, you can gain insight into the health and performance of your load balancers, Cisco ASA and Palo Alto Networks, firewalls, and Cisco Nexus switches.
    • Hardware health monitoring: SolarWinds NPM makes it easy for you to monitor, alert, and report on key device metrics, including power supply, fan speed, and temperature.
    • Customizable performance and availability reports: With this feature, you can choose from more than 100 templates to schedule and also generate custom network performance reports.

    Reviews from Real Users

    Below are some reviews and helpful feedback written by PeerSpot users currently using the SolarWinds NPM solution.

    PeerSpot user Andrew N., Senior Network Engineer at Element Critical, says, “The "Performance Analyzer" feature is the solution's most valuable aspect. It's able to do the bounded graphs of all the interface stats, from errors to broadcasts and to current traffic. With a click of a button you're able to, in one interface, look at historical data for those items.” He also adds, “From the troubleshooting point of view, just having that peace of mind is great. And, The solution is extremely stable. We haven't had any issues in that regard. We haven't had issues with bugs, glitches, or crashes."

    Daniel S., Systems and Data Warehouse Supervisor at MMSD, mentions, “The alerting and usage tracking is a valuable feature because it alerts us when we're getting near capacity on disk space, network utilization or processor utilization. It helps us manage our capacity and enables us to be proactive.”

    A Senior Vice President and CIO at a financial services firm explains, “As we look to add more servers to our virtual environment and to understand the impact, the solution allows us to dig into the historical charts related to capacity planning. It also gives us visibility of spikes and allows us to track down the reasons for their occurrences. So too, it makes room for potential processes that have gotten hung or runaway and to know when it's time to reboot a server or service.”

    Dinesh N., Digital Innovation at Bobcat Company, states, “The best part of the solution is the sharing display. It gives a general public ID wherein everyone can link to a public display. That's a good feature.”


    Fazal A., Implementation & Support Specialist at 360Factors, comments, “We have configured multiple alerts for our network devices, including routers and switches, so that we are notified if any interface goes down. In the event an interface goes down, we have multiple reports that include availability monitoring, network uptime monitoring, and network downtime monitoring. These reports are on multiple schedules such as the end of the day, end of the last business day of the week, monthly, and quarterly. This gives us the ability to provide reports to our management and let them know the performance of our network.”

    Sample Customers
    Microsoft Sentinel is trusted by companies of all sizes including ABM, ASOS, Uniper, First West Credit Union, Avanade, and more.
    FortiSIEM has hundreds of customers worldwide in markets including managed services, technology, financial services, healthcare, and government. Customers include Aruba Networks, Compushare, Port of San Diego, Cleveland Indians, Infoblox, Healthways, and Referentia.
    Microsoft, Federal Express, Hewlett-Packard, and MasterCard
    Top Industries
    REVIEWERS
    Financial Services Firm22%
    Computer Software Company11%
    Manufacturing Company8%
    Comms Service Provider8%
    VISITORS READING REVIEWS
    Computer Software Company16%
    Financial Services Firm10%
    Government9%
    Manufacturing Company7%
    REVIEWERS
    Comms Service Provider21%
    Financial Services Firm12%
    Computer Software Company10%
    Media Company10%
    VISITORS READING REVIEWS
    Computer Software Company16%
    Government9%
    Comms Service Provider9%
    Financial Services Firm7%
    REVIEWERS
    Computer Software Company12%
    Comms Service Provider12%
    Financial Services Firm11%
    Healthcare Company9%
    VISITORS READING REVIEWS
    Educational Organization51%
    Computer Software Company7%
    Government5%
    Manufacturing Company5%
    Company Size
    REVIEWERS
    Small Business33%
    Midsize Enterprise21%
    Large Enterprise47%
    VISITORS READING REVIEWS
    Small Business25%
    Midsize Enterprise16%
    Large Enterprise59%
    REVIEWERS
    Small Business41%
    Midsize Enterprise25%
    Large Enterprise34%
    VISITORS READING REVIEWS
    Small Business30%
    Midsize Enterprise17%
    Large Enterprise52%
    REVIEWERS
    Small Business33%
    Midsize Enterprise18%
    Large Enterprise49%
    VISITORS READING REVIEWS
    Small Business12%
    Midsize Enterprise56%
    Large Enterprise32%
    Buyer's Guide
    Fortinet FortiSIEM vs. SolarWinds NPM
    May 2020
    Find out what your peers are saying about Fortinet FortiSIEM vs. SolarWinds NPM and other solutions. Updated: May 2020.
    771,157 professionals have used our research since 2012.

    Fortinet FortiSIEM is ranked 9th in Security Information and Event Management (SIEM) with 65 reviews while SolarWinds NPM is ranked 4th in Network Monitoring Software with 147 reviews. Fortinet FortiSIEM is rated 7.6, while SolarWinds NPM is rated 8.2. The top reviewer of Fortinet FortiSIEM writes "It's cheaper than other solutions with the same features but lacks integration with many third-party vendors". On the other hand, the top reviewer of SolarWinds NPM writes "High-level, comprehensive, and proactive monitoring in a user-friendly interface". Fortinet FortiSIEM is most compared with IBM Security QRadar, Splunk Enterprise Security, Wazuh, LogRhythm SIEM and ThousandEyes, whereas SolarWinds NPM is most compared with Zabbix, PRTG Network Monitor, ManageEngine OpManager, ThousandEyes and Entuity. See our Fortinet FortiSIEM vs. SolarWinds NPM report.

    We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.