FortiSIEM Endpoint-Based-UEBA
High Performance with Simplicity

Click here to jump to more pricing!

Please Note: All Prices are Inclusive of GST

Overview:

FortiSIEM Capabilities

FortiSIEM is designed to be the backbone of your security operations team, offering capabilities to automatically build an inventory of assets, apply behavioural analytics, and rapidly detect and respond to threats. Its native multi-tenancy architecture, management features, and scalability make it a leading solution for MSSPs. FortiSIEM caters to various customer requirements through different licensing and deployment models, whether onpremise using virtual/hardware appliances or as a cloud-delivered service.

Features:

Key aspects of FortiSIEM include:

• Deployment Options: Available in Appliance, Virtual, and Cloud forms.
• Licensing Models: Each licensing model is mutually exclusive and cannot be combined with another:
  • GB Per Day: Licensed by Gigabytes per day, Agent, UEBA, and IOC.
  • Device + EPS: Licensed by Device, Endpoint, Agent, UEBA, IOC, and High Availability.
  • Cloud (SaaS): Licensed by “FortiSIEM Compute Units (FCU)”, Online Storage, and Archive Storage.
  • MSSP PAYG: Licensed by Devices, Agents, and UEBA.
• Capabilities: FortiSIEM offers a wide range of features including:
  • Event Collection and Normalization
  • Advanced Event Correlation and Compliance Monitoring and Reporting
  • Security Automation and Response, including Case Management, MITRE ATT&CK Alert Mapping, and Automated Response Actions
  • Threat Intelligence, including Indicators of Compromise (IOC)
  • Device and Application Discovery
  • Device Monitoring and Analytics
  • On-premise and Cloud Monitoring
  • Configuration Monitoring
  • Multitenant Support
• Add-on Features: Certain features like FortiSIEM Automaton Service, advanced agent-based Windows/Linux Agent monitoring, UEBA, High Availability, and Threat Intelligence can be added on.
• FortiSIEM Manager: Requires FortiSIEM version 6.5.0 or greater.

Specifications:

	CAPEX / PERPETUAL DEVICE + EPS	OPEX / SUBSCRIPTION DEVICE + EPS	GB PER DAY	FORTISIEM CLOUD SUBSCRIPTION	MSSP PAYG
Device and Application Discovery	✓	✓	✓	✓	✓
On-premise and Cloud Monitoring	✓	✓	✓	✓	✓
Configuration Monitoring	✓	✓	✓	✓	✓
Event Collection and Normalization	✓	✓	✓	✓	✓
Advanced Event Correlation	✓	✓	✓	✓	✓
Compliance Monitoring and Reporting	✓	✓	✓	✓	✓
Synthetic Transactions	✓	✓	✓	✓	✓
Performance and Availability	✓	✓	✓	✓	✓
SD-WAN / Interface Monitoring	✓	✓	✓	✓	✓
Custom Monitoring (SNMP, SQL)	✓	✓	✓	✓	✓
Netflow Analytics	✓	✓	✓	✓	✓
Case Management	✓	✓	✓	✓	✓
MITRE ATT&CK Alert Mapping	✓	✓	✓	✓	✓
Remediation Actions	✓	✓	✓	✓	✓
Two-Way Integration with FortiSOAR	✓	✓	✓	✓	✓
Multitenant Support	✓	✓	✓	✓	✓
Security Automation Service	✓	✓	✓		✓
Windows Registry Monitoring	Add-on	Add-on	Add-on	✓	Add-on
Log-based UEBA	✓	✓	✓	✓	✓
Remote Worker Monitoring	Add-on	Add-on	Add-on	✓	Add-on
Indicators of Compromise (IOC)	Add-on	Add-on	Add-on	✓	✓
Additional Events per Second (EPS)	Add-on	Add-on	N/A	N/A	Unlimited

Documentation:

Download the FortiSIEM Endpoint-Based-UEBA Data Sheet (PDF).

Pricing Notes:

• All Prices are Inclusive of GST
• Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
  Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service) plus term of contract
• Hardware plus FortiCare Premium and FortiGuard SMB Protection
  Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, SMB Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering , Antispam and FortiGate Cloud subscription service) plus term of contract
• Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
  Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service) plus term of contract
• Enterprise Protection (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and FortiCare Premium)
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service)
• SMB Protection (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam, plus FortiGate Cloud subscription and FortiCare Premium)
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, SMB Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam and FortiGate Cloud subscription service)
• Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam Service, and FortiCare Premium)
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service)
• Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Advanced Threat Protection Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct Service, Application Control)
• FortiCare Essential Support
  FortiCare Essential Ticket Handling, Hardware Replacement, Firmware and General Upgrades, Application Control
• FortiCare Premium Support
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control
• FortiCare Elite Support
  FortiCare Premium Support with FortiCare Elite Ticket Handling.
• Prices are for one year of Premium RMA support. Usual discounts can be applied.
• Annual contracts only. No multi-year SKUs are available for these services.
• Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
• Pricing and product availability subject to change without notice.