FortiSIEM Installation &
Deployment Services in India
FortiSIEM is powerful — but complex. A multi-node Supervisor + Worker + Collector architecture, EPS sizing mistakes, and misconfigured parsers are the top reasons SIEM deployments fail. Ogma's certified SIEM engineers have deployed FortiSIEM for banks, hospitals, and manufacturers across India. We've seen every gotcha — and we get you live in 30 days.
FortiSIEM Architecture — Getting It Right
FortiSIEM uses a distributed architecture. Getting node roles, sizing, and network connectivity wrong at the start creates performance problems that are hard to fix later.
Ogma EPS Sizing Guide
| Organisation Size | Typical EPS | Recommended Nodes |
|---|---|---|
| SMB (100–500 users) | 100–500 EPS | 1S + 1W |
| Mid Enterprise (500–2000) | 500–3K EPS | 1S + 2W + 1C |
| Large Enterprise (2000+) | 3K–10K EPS | 1S + 4W + 2–3C |
| Managed SOC / MSSP | 10K+ EPS | HA Supervisor + 8W+ |
S=Supervisor, W=Worker, C=Collector. Ogma architects the right topology before any deployment begins.
Installation Project Scope
Node Deployment & Clustering
FortiSIEM VM or hardware appliance deployment, Supervisor–Worker cluster registration, Collector agent deployment on remote sites, NTP synchronisation, and initial system health validation.
Log Source Onboarding (50 sources)
Syslog (FortiGate, Linux, network switches), WMI (Windows endpoints and servers), SNMP trap integration, and REST API connectors. Up to 50 log sources onboarded in base scope. Parsers validated post-onboarding.
Built-in Compliance Reports
Activation and scheduling of FortiSIEM's built-in compliance report templates: CERT-In, RBI Cyber Security Framework (CSF), PCI-DSS 4.0, ISO 27001, HIPAA. First reports generated and validated before handover.
AD/LDAP & CMDB Integration
Active Directory integration for user identity correlation (maps IP → username in events). CMDB auto-discovery scan to populate assets, business services, and criticality ratings. FortiGate integration for real-time threat context.
Use Case Rules & Alerts
Activation of 30 out-of-box use case rules tailored to your environment — brute force detection, privilege escalation, impossible travel, data exfiltration, malware lateral movement. Alert routing to email/webhook.
Admin Training & Handover
4-hour administrator training session covering: incident investigation, CMDB management, adding log sources, report scheduling, and parser customisation basics. As-built documentation + architecture diagram delivered.
FortiSIEM Installation Tiers
Fixed-scope professional services — excludes FortiSIEM license and hardware. Tell us your EPS and site count and we'll quote within 2 hours.
- VM deployment (on-prem VMware/Hyper-V)
- Up to 30 log sources
- CERT-In + 2 compliance reports
- AD integration + 20 use case rules
- 30-day post-go-live support
- Everything in Starter
- Up to 50 log sources (3 sites)
- All 6 compliance report templates
- CMDB auto-discovery
- 30 use case rules (tuned)
- Admin training + runbook
- Enterprise scope + HA Supervisor option
- 100+ log sources
- Multi-tenant MSSP configuration
- Custom parser development (5 parsers)
- SOAR playbook setup (5 playbooks)
- 60-day post-go-live support
Frequently Asked Questions
Get Your FortiSIEM Live in 30 Days
Share your EPS estimate, number of log sources, and compliance requirements. We'll send a detailed deployment plan and fixed-price proposal within 48 hours.