Description: 1-100 POINT FORTISIEM IOC SVC
FortiSiem Indicator of Compromise Service – Subscription license renewal (1 year) – 1-100 points – for P/N: FSM-2000F, FSM-3500F, FSM-500F
Fortinet has developed an architecture that enables unified and cross-correlated analytics from diverse information sources including logs, performance metrics, SNMP traps, security alerts and configuration changes. FortiSiem essentially takes the analytics traditionally monitored in separate silos from – SOC and NOC – and brings that data together for a more holistic view of the threat data available in the organization. Every piece of information is converted into an event which is first parsed and then fed into an event-based analytics engine for handling real-time searches, rules, dashboards and ad-hoc queries.
Key Selling Points
Unified, real-time, network analytics
Single IT pane of glass
Cloud scale architecture