Fortinet Lacework FortiCNAPP
Fortinet Inc.External reviews
382 reviews
from
External reviews are not included in the AWS star rating for the product.
Great tool to help secure your cloud environment with a small security team
What do you like best about the product?
Lacework is very easy to deploy and they provide good documentation to do so. Their Customer Success team is very friendly, available and open to customer feedback and requests. I suggested a couple of UI/feature improvements during our monthly call and they were quickly implemented into the platform. It's also useful as a one-stop for a lot of security needs (container image scanning, compliance reports, CloudTrail, etc.)
What do you dislike about the product?
The CloudTrail event search sometimes leaves things to be desired. We end up using the default CloudTrail console to find what we're looking for. It's important to take a look at the documentation detailing the "secret sauce" behind the events that are generated following the smart baselining of your environments. You might expect some things to generate events but the engine has a different opinion. You can write your own queries using the Lacework Query Language to generate events based on what you think is important but that kind of defeats the purpose if you expect a fully "no rule writing" experience.
What problems is the product solving and how is that benefiting you?
Lacework provides a nice UI to address most of your security needs (compliance, events, container scanning, etc.) It's very useful when you have a security team that is on the smaller side.
Very good
What do you like best about the product?
It works well and the UI is pretty good. They are actively developing and improving it.
What do you dislike about the product?
Email alerts could use some work - they are inconsistent.
What problems is the product solving and how is that benefiting you?
Lacework found a bunch of security issues in our accounts.
Lacework: A review
What do you like best about the product?
Very informative and detailed - easy to use
What do you dislike about the product?
High price of logging - implementation could be easier
What problems is the product solving and how is that benefiting you?
Compliance with certifications and Security
Lacework is a great tool for implementing a secure cloud environment
What do you like best about the product?
We're able to identify vulnerabilities and scan our cloud environments according to an automated schedule. They provide helm charts for deploying the lacework agent as a daemonset. They provide cloud formation templates for deploying. IaC options for deployment are great.
What do you dislike about the product?
The reports that you can run using the tool do not typically have remediation steps to perform. It's also my personal opinion there are too many critical vulnerabilities that could be classified as medium or low.
Include remediation steps in the report.
Include remediation steps in the report.
What problems is the product solving and how is that benefiting you?
Lacework is helping us scan our cloud infrastructure and provides CIS benchmark reports on the state of our infrastructure. The lacework agent reports when our EC2s need package updates.
Compliance Summary feature is useful when it comes to reshaping our AWS security assessment process
What do you like best about the product?
Before using Lacework, our legacy tools weren't able to keep up with the on-demand changes & handling various CSPM involved. Event categorization effectively identifies each event timeline and summary so that we obtain operational visibility while working with these changes. We can also add exceptions in our vulnerabilities dashboard and all items present in the exception list can be exported as CSV based on customer demands.
What do you dislike about the product?
At the initial stage, we had difficulties in setting up branch protection rules for our GitHub repository. Later we came to understand how we can enforce workflows for performing multiple pull requests which made it easy to regulate branch protection rules. Gradually we are learning its compliance features to coexist with the requests given by our clients.
What problems is the product solving and how is that benefiting you?
Lacework offers automated anomaly detection with which we get instantly notified about any irregular events in our AWS environment. We establish fine-tuning rules which aid in accurately alerting us whenever there are challenges in business critical events. We can also utilize its codeless approaches to remove our rule-writing elements which consume a lot of time & has high possibilities of misconfigurations.
It just makes my work easier
What do you like best about the product?
Just the fact that I can have Infrastructure as Code Security, Vulnerability Management and Posture and Compliance in one single console makes my job easier as we can take faster decisions when time is critical.
What do you dislike about the product?
So far I haven't found issues in the product, but for sure I'll find something in the future. Installation that it's usually one of the downsides of getting new security products was in fact pretty simple.
What problems is the product solving and how is that benefiting you?
We rapidly identify issues related to vulnerabilities, compliance and especially when we are attacked, even when we scan our entire cloud infrastructure, in several cloud accounts.
Experienced user of Lacework
What do you like best about the product?
Polygraph, ML learning of baseline. Dashboard, filters is the one i like the most. i use excel and Splunk with lacework. it on par with competitors such as Prisma Cloud
What do you dislike about the product?
Data download time, bad reporting - still need a lot of time in excel to create meaningful remediation. improve reporting, improve the report section and dashboard
What problems is the product solving and how is that benefiting you?
container vulnerability, visibility into container vulnerability and runtime events. It has saved us valuable time on a daily basis. This has saved us time and resources
It's user friendly but certain details are unknown
What do you like best about the product?
Can correlate the event tickets with other events for investigation purposes.
A new feature Reports is useful to look into specific behavior and monitor and assessing is great
A new feature Reports is useful to look into specific behavior and monitor and assessing is great
What do you dislike about the product?
IP address naming convention should be changed. Vulnerability details aren't accurate
What problems is the product solving and how is that benefiting you?
We are using Lacework for Behavior analytics-related events for our cloud services. Now I have started looking into reports in detail
Recommendations to others considering the product:
Make use of the tool at maximum and request for any feature update for the company to grow and helpful for organizations
Lacework Review
What do you like best about the product?
I like how lacework helps me quickly identify anomalies in our environment, and find compliance issues.
What do you dislike about the product?
Most of the display information in is jason form. I would like more readable understandable information.
What problems is the product solving and how is that benefiting you?
Scanning for vulnerabilities, find compliance issues, and anomaly detection.
Lacework Review
What do you like best about the product?
The user interface is very clean and straight to the point. The GUI is easy to navigate through. There are different privileges for users. I also like how we can link to alerts and create reports.
What do you dislike about the product?
Tickets have to be filed through support. Documentation for policies and standards is not 100% complete. Creating custom alerts is not very straightforward and cannot be done through the GUI.
What problems is the product solving and how is that benefiting you?
Problems that I am solving through Lacework include security monitoring of multiple hosts, compliance alerts, and obtaining details for multiple systems on one platform. The benefits include a central service for security information for the company and details on compliance standards and policies.
showing 181 - 190