FortiSIEM is a highly scalable multi-tenant Security Information and Event Management (SIEM) solution that provides real-time infrastructure and user awareness for accurate threat detection, analysis and reporting. FortiSIEM first discovers the infrastructure including devices, applications, users in physical/virtual, on-premise / cloud environments and auto-populates a Configuration Management Database (CMDB).

FortiSIEM can collect various data such as logs, traffic flows, performance metrics, configuration changes and correlates them in real-time to detect security and performance issues. FortiSIEM has built-in integrations with the Fortinet portfolio and support for hundreds of third-party devices and applications for data collection, external threat intelligence sources, ticketing systems.

FortiSIEM has a purpose-built architecture that can scale collection, real-time correlation and reporting by incrementally adding virtual appliances without any downtime.