A central alarm system for all your IT, including non-Fortinet products. It collects activity from everywhere, connects the dots and raises an alert.
It discovers devices, collects logs and performance data from many vendors, and correlates events by rules and analytics. It also includes built-in compliance reports.
Inmate activity leaves traces across many systems. FortiSIEM pulls those together, so an investigator can follow a person or device across firewall, Wi-Fi, login and other vendor logs, in one timeline.
- Builds one timeline across firewall, Wi-Fi, login and application logs.
- Alerts on patterns, such as repeated attempts to bypass filters.
- Works with other vendors’ systems.
- Keeps reports for CJIS and other audits.
- Multi-vendor log collection.
- Automatic asset discovery builds an inventory.
- Correlation connects events across systems.
- Compliance reporting reduces audit work.
| Control | Priority | How this helps |
|---|---|---|
| AU-2Event Logging | P2* | Collects logs across vendors. |
| AU-6Audit Record Review, Analysis, and Reporting | P2* | Provides correlation and review. |
| AU-11Audit Record Retention | P4* | Supports log retention. |
| SI-4System Monitoring | P1 | Monitors systems continuously. |
| CA-7Continuous Monitoring | P1 | Supports continuous monitoring. |
| CM-8System Component Inventory | P1 | Discovers assets. |
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table