
Fortinet FortiAnalyzer 3100G Appliance
Unified Data Lake, Visibility, and Automation
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Click here to jump to more pricing!
Please Note: All Prices are Inclusive of GST
Overview:
FortiAnalyzer provides deep insights into advanced threats through Single-Pane Orchestration, Automation & Response for your entire attack surface to reduce risks and improve your organization’s overall security.
Integrated with Fortinet’s Security Fabric, FortiAnalyzer simplifies the complexity of analyzing and monitoring new and emerging technologies that have expanded the attack surface, and delivers end-to-end visibility, helping you identify and eliminate threats.
Advanced Threat Detection & Correlation allows Security & Network teams to immediately identify and respond to network security threats across the infrastructure.
Automated Workflows & Compliance Reporting provides customizable dashboards, reports and advanced workflow handlers for both Security & Network teams to accelerate workflows & assist with regulation and compliance audits.
Scalable Log Management collects logs from FortiGate, FortiClient, FortiManager, FortiSandbox, FortiMail, FortiWeb, FortiAuthenticator, Generic syslog and others. Deploy as an individual unit or optimized for a specific operation and scale storage based on retention requirements.
Key Features
Security Fabric Analytics
- Event correlation across all logs and real-time anomaly detection, with Indicator of Compromise (IOC) service and threat detection, reducing time-to-detect
Fortinet Security Fabric integration
- Correlates with logs from FortiClient, FortiSandbox, FortiWeb, and FortiMail for deeper visibility and critical network insights
Enterprise-grade high availability
- Automatically back-up FortiAnalyzer DB’s (up to 4 node cluster) that can be geographically dispersed for disaster recovery
Security automation
- Reduce complexity and leverage automation via REST API, scripts, connectors, and automation stitches to expedite security response
Multi-tenancy and administrative domains (ADOMs)
- Separate customer data and manage domains leveraging ADOMs to be compliant and operationally effective
Flexible deployment options & archival storage
- Supports deployment of appliance, VM, hosted or cloud. Use AWS, Azure or Google to archive logs as a secondary storage
Features:
Security Operations Center (SOC)
FortiAnalyzer’s SOC management center helps secure your overall network by providing actionable views of log and threat data. Protect your network, web sites, applications, databases, servers and data centers, and other technologies, with centralized monitoring, awareness of the threats, events and network activity, using predefined and customized dashboards delivered through a single-pane-of-glass interface for easy integration into your Security Fabric.
Incident Detection & Response
FortiAnalyzer’s Automated Incident Response capability improves Management & Analytics with a focus on event management and identification of compromised endpoints. Improved default and custom event handlers can be used to detect malicious and suspicious activities on the spot. Integration of events with the FOS automation framework for automated actions such as endpoint quarantine or blacklist IPs. Incident detection and tracking, as well as evidence collection and analysis, are streamlined through integration with ITSM platforms, helping to bridge gaps in your Security Operations Center and reinforce your Security Posture.
Event handlers enable quick detection, automated correlation and connected remediation with incident management to simplify log analysis and threat identification across your Fortinet Security Fabric. Create event handlers for FortiGate, FortiCarrier, FortiCache, FortiMail, FortiManager, FortiWeb, FortiSandbox devices, and syslog servers. Define what messages to extract from logs and display in events and send alerts for event handlers via email address, webhook, SNMP community, or syslog server.
Indicators of Compromise
The Indicators of Compromise (IOC) summary shows end users with suspicious web usage compromises. It provides information such as end users’ IP addresses, hostname, group, OS, overall threat rating, a Map View, and a number of threats that you can drill down to view the details. Analysts can re-scan historical logs for threat hunting, and identify threats based on new intelligence. To generate the Indicators of Compromise, FortiAnalyzer checks web filter, DNS and traffic logs of each end-user against its threat database. When a threat match is found, a threat score is given to the end-user. FortiAnalyzer aggregates the threat scores of an end-user and gives its verdict of the end user’s overall Indicators of Compromise. The Indicators of Compromise summary is produced through logs from the FortiGate devices and FortiAnalyzer subscription to FortiGuard to keep its local threat database synced with the FortiGuard threat database.
Reports
FortiAnalyzer provides 39+ built-in templates that are ready to use, with sample reports to help identify the right report for you. You can generate custom data reports from logs by using the Reports feature. Run reports on-demand or on a schedule with automated email notifications, uploads and an easy to manage calendar view. Create custom reports with the 300+ built-in charts and datasets ready for creating your custom reports, with flexible report formats include PDF, HTML, CSV, and XML.
SD-WAN Monitoring
SD-WAN Dashboards enable customers to instantly see the benefit of applying SD-WAN across multiple WAN interfaces with Event handlers to detect SD-WAN alerts for real-time notification & action. History graphs for WAN link health monitoring: Jitter, Latency and Packet Loss Critical & High severity SD-WAN alerts. New Secure SD-WAN report provides an Executive summary of important SDWAN metrics, detailed charts and history graphs for SD-WAN link utilization by applications, latency, Packet Loss, Jitter changes and SD-WAN performance statistics.
Log Forwarding for Third-Party Integration
You can forward logs from a FortiAnalyzer unit to another FortiAnalyzer unit, a syslog server, or a Common Event Format (CEF) server. The client is the FortiAnalyzer unit that forwards logs to another device. The server is the FortiAnalyzer unit, syslog server, or CEF server that receives the logs. In addition to forwarding logs to another unit or server, the client retains a local copy of the logs. The local copy of the logs is subject to the data policy settings for archived logs. Logs are forwarded in real-time or near real-time as they are received. Forwarded content files include: DLP files, antivirus quarantine files, and IPS packet captures.
Analyzer-Collector Mode
You can deploy in Analyzer mode and Collector mode on different FortiAnalyzer units and make the units work together to improve the overall performance of log receiving, analysis, and reporting. When FortiAnalyzer is in Collector mode, its primary task is forwarding logs of the connected devices to an Analyzer and archiving the logs. The Analyzer offloads the log-receiving task to the Collector so that the Analyzer can focus on data analysis and report generation. This maximizes the Collector’s log receiving performance.
Multi-Tenancy with Flexible Quota Management
Time-based archive/analytic log data policy per Administrative Domain (ADOM), automated quota management based on the defined policy, and trending graphs to guide policy configuration and usage monitoring.
Specifications:
FAZ-3100G | FAZ-3510G | FAZ-3700G | |
---|---|---|---|
Capacity and Performance | |||
GB/day of Logs | 3000 | 5000 | 8300 |
Analytic Sustained Rate (logs/sec)* | 42,000 | 60,000 | 100,000 |
Collector Sustained Rate (logs/sec)* | 60,000 | 90,000 | 150,000 |
Devices/VDOMs (Maximum) | 4000 | 10,000 | 10,000 |
Max Number of Days Analytics** | 30 | 35 | 60 |
Options | |||
FortiGuard IOC and Outbreak Detection Service | |||
Security Automation Service | |||
Enterprise Bundle | |||
Hardware Bundle | |||
OT Security Service | |||
Security Rating and Compliance Service | |||
Hardware Specifications | |||
Form Factor | 3 RU Rackmount | 4 RU Rackmount | 4 RU Rackmount |
Total Interfaces | 2x GE RJ45, 2x 25GE SFP28 | 2x 10GbE RJ45, 2x 25GbE SFP28 | 2x 10GE RJ-45 + 2x 25GE SFP28 |
Storage Capacity | 64 TB (16 x 4TB) 3.5" SAS SED HDD + 3.84 (2x 1.92TB) 2.5" NVMe SSD | 96TB (24x 4TB) + 7.68TB (2x 3.84TB) | 240TB (60x 4TB) 3.5" HDD + 19.2TB (6x 3.2TB) NVMe SSD |
Usable Storage (After RAID) | 56 TB | 84 TB | 224 TB |
Removable Hard Drives | |||
RAID Levels Supported | RAID 0/1, 1s/5, 5s/6, 6s/10/50/60 | ||
RAID Type | Hardware / Hot Swappable | Hardware / Hot Swappable | Hardware / Hot Swappable |
Default RAID Level | 50 | 50 | 50 |
Redundant Hot Swap Power Supplies | |||
Trusted Platform Module (TPM)*** | |||
Dimensions | |||
Height x Width x Length (inches) | 5.2 x 17.2 x 25.5 | 7 x 17.2 x 27.5 | 7 x 17.2 x 30.2 |
Height x Width x Length (cm) | 13.0 x 44.0 x 65.0 | 17.8 x 43.7 x 69.9 | 17.8 x 43.7 x 76.7 |
Weight | 69.6 lbs (31.57 kg) | 65 lbs (29.5 kg) | 118 lbs (53.5 kg) |
Environment | |||
AC Power Supply | 100-127V~/10A, 200-240V~/5A | 100-127V~/10A, 200-240V~/5A | 2000W AC**** |
Power Consumption (Avg/Max) | 395 W / 510 W | 983 W / 1278 W | 850 W / 1423.4 W |
Heat Dissipation | 1740.19 BTU/h | 3424 BTU/h | 4858 BTU/h |
Operating Temperature | 32°F to 104°F (0°C to 40°C) | 32°F to 104°F (0°C to 40°C) | 50°F to 95°F (10°C to 35°C) |
Storage Temperature | -4°F to 158°F (-20°C to 70°C) | -4°F to 167°F (-20°C to 75°C) | -40°F to 158°F (-40°C to 70°C) |
Humidity | 5%–95% (non-condensing) | 5%–95% (non-condensing) | 8%–90% (non-condensing) |
Forced Airflow | Front to Back | Front to Back | Front to Back |
Operating Altitude | Up to 13,123 ft (4000 m) | Up to 10,000 ft (3048 m) | Up to 7400 ft (2250 m) |
Compliance | |||
Safety Certifications | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
** is the max number of days if receiving logs continuously at the sustained analytics log rate. This number can increase if the average log rate is lower.
*** Gen2 refers to hardware that has been upgraded since initial release.
****3700G must connect to a 200V - 240V power source.
Documentation:
Download the Fortinet FortiAnalyzer Series Datasheet (PDF).
Pricing Notes:
- All Prices are Inclusive of GST
- Hardware plus FortiCare Premium and FortiAnalyzer Enterprise Protection
Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (Indicators of Compromise Service, SOC Subscription license, and FortiGuard Outbreak Detection service) plus term of contract - Enterprise Protection (FortiCare Premium plus Indicators of Compromise Service, SOC Subscription license, and FortiGuard Outbreak Detection service)
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (Indicators of Compromise Service, SOC Subscription license, and FortiGuard Outbreak Detection service) - FortiCare Premium Support
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades - FortiCare Elite Support
FortiCare Premium Support with FortiCare Elite Ticket Handling. - Prices are for one year of Premium RMA support. Usual discounts can be applied.
- Annual contracts only. No multi-year SKUs are available for these services.
- Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
- Pricing and product availability subject to change without notice.
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote