No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Stormshield Network Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 15, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Unified Threat Management (UTM)
1st
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
591
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st)
Check Point Cloud Firewall ...
Ranking in Unified Threat Management (UTM)
4th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
167
Ranking in other categories
Firewalls (8th), Managed Security Services Providers (MSSP) (1st), Software Defined WAN (SD-WAN) Solutions (5th), Cloud and Data Center Security (6th), WAN Edge (3rd)
Stormshield Network Security
Ranking in Unified Threat Management (UTM)
13th
Average Rating
7.8
Reviews Sentiment
5.4
Number of Reviews
18
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2026, in the Unified Threat Management (UTM) category, the mindshare of Fortinet FortiGate is 26.6%, down from 36.8% compared to the previous year. The mindshare of Check Point Cloud Firewall (formerly CloudGuard Network Security) is 4.6%, up from 1.1% compared to the previous year. The mindshare of Stormshield Network Security is 4.0%, up from 3.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Unified Threat Management (UTM) Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate26.6%
Check Point Cloud Firewall (formerly CloudGuard Network Security)4.6%
Stormshield Network Security4.0%
Other64.8%
Unified Threat Management (UTM)
 

Featured Reviews

Abhinandan Yadav - PeerSpot reviewer
Network Security Engineer at a consultancy with 51-200 employees
Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches
Users report stability issues in certain versions, which requires regular updates. Real-world attacks have also highlighted the need for urgent patching of vulnerabilities.Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.
Viral Shaa - PeerSpot reviewer
IT Security Analyst at Eos Energy Enterprises, Inc.
Cloud security has unified hybrid policies and now protects critical energy workloads continuously
I would say Check Point Cloud Firewall (formerly CloudGuard Network Security) is valuable due to its hybrid cloud security features. It offers granular policy management across the on-premises and cloud environments, giving administrators consistent control for configuration drift. We need to change the policy and the inbound and outbound traffic settings, indicating what traffic must be blocked or allowed, and this capability with Check Point provides significant input into our security strategy. Check Point Cloud Firewall (formerly CloudGuard Network Security) provides unified security management across both hybrid clouds and on-premises environments. Unified security management affects my security operations positively, as we maintain critical systems on the cloud that require strong security and air gap networks. This cloud-native routing and policy installation helps close gaps in protecting critical applications and environments from exposure to the public cloud. From an administrator's perspective, Check Point Cloud Firewall (formerly CloudGuard Network Security) enhances our organization with clearer and more intuitive logging, making decisions easier to understand without deep investigation. In the CloudGuard UI, I can see which threats have triggered alerts, and this information is available on the unified dashboard that provides details of the threat analysis upon alert. As a small team, we log into the console to check specific alerts for high or low network usage or machine shutdowns. If needed, I tune the configuration policy, and the visualizing tools with reporting functionality simplify tracking changes made on the firewall, including the relevant source IP or device names. We ingest logs into our SIEM for detailed oversight, which allows us to monitor any administrative changes. Check Point Cloud Firewall (formerly CloudGuard Network Security) has significantly reduced our organizational risk. We clearly understand our threat landscape and the associated risks. Onboarding the CloudGuard solution directly into our cloud environment has significantly lowered the risks throughout the network and it is easy to launch. When we assess our security posture with third-party assessments, we gain granular visibility into our network pre- and post-CloudGuard installation, showing how we have addressed significant risks and secured vulnerabilities.
Zsolt Jónás - PeerSpot reviewer
System Administrator at NaxoNet
Advanced GUI and layered security have supported compliance and simplified intrusion prevention
I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability solution would be beneficial because currently, if you build a high availability solution with Stormshield Network Security, you have a main device and another one is a backup device. The HA can switch between them, but it would be good to have a master-master solution, not just a master-slave one. I could set a URL that I can call to update the DNS record. Currently, Stormshield Network Security devices support DynDNS, which is not a usual feature request from a server environment. I have my own solution instead of DynDNS because I don't prefer it, so I have my own service for that. However, the GUI does not support using a custom service instead of DynDNS. I had to solve it in the console on Stormshield Network Security device, but it would be much better if it was reachable on the GUI. I had to figure out a trick for the IPsec configuration. In the IPsec config, we have to provide the remote side's IP address, but it's always changing. This means that an office, for example a company that has an office but without a fixed IP address, cannot be used with IPsec VPN.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Its stability is the most valuable."
"The FortiGate Next-Generation Firewall is always updating. For example, if there is a big attack, they fix it in their firmware. They release new firmware with the necessary patches to address the vulnerabilities."
"Its usability is good. We can easily navigate the system, and we have a very good user experience."
"I find that Fortinet FortiGate is pretty easy to use and integrated, offering many features in one box at a decent price compared to other enterprise vendors."
"Customers keep on improving their licenses. The solution remains scalable and flexible. On-premises deployments may have some limitations. However, cloud deployments offer a high degree of flexibility."
"The most valuable feature of FortiGate Next Generation Firewall is its SD-WAN."
"Our project needs to link two sides through the internet. One of these was in Cairo and the other in another city. We used FortiGate as the integrating solution between the two locations, i.e. the Fortinet 30E & 100E."
"The solution is very user-friendly."
"The URL filtering provides a lot of added value compared to the Azure Firewall."
"We find all the features valuable, particularly the firewall, application control, URL filtering, and HTTPS detection."
"The technical support is excellent and they always responded when we had an issue."
"A unique architecture makes this product stand out from other solutions."
"The solution's most valuable feature is scalability. We can increase the number of CPUs, memory, and firewall throughput easily. Using CloudGuard Network Security for managing cloud firewall rules is considered easier than using the normal security groups provided by Azure or AWS."
"The network security has positively affected our confidence in secure cloud deployments and mitigation."
"Check Point pioneered this product, so don't look anywhere else if you are looking for a stable and scalable product with top-notch security blades."
"It is dynamic and agile, and its features and utilities continuously improve and evolve."
"Filters and URL filtering helped us to optimize our bandwidth."
"This product has improved the way our organization functions."
"The features I find most valuable is the backup inspection, the filtering, and the load balancing, and I am also impressed by the antivirus feature that gives us two controls over the viruses - one is from the parameter and one on the endpoint."
"Fortinet, Dell SonicWall and Check Point because these products offer a wide range of features that are not available with Netasq."
"The multi-layered security approach of Stormshield Network Security is a good one and has helped with compliance."
"I like that it works fine. Stormshield is a very good solution."
"The solution has improved my organization because I can see what traffic is happening and I can use it to block and prevent attacks."
"Stormshield is a very strong firewall and very easy to configure and maintain."
 

Cons

"There are SD-WAN network monitoring, SD-WAN features, Industrial Databases, Internet of Things, Detection, etc., however, we do have not licenses for those features. We thought that if you bought a product, you should have all of the features it offers."
"In the scenarios coming from Sophos, it has not."
"I believe one area that could be improved in Fortinet FortiGate is posturing, specifically for remote VPN users, as there are OS-based limitations I encountered with only Windows; adding domain restrictions for VPN access would make it more competitive and useful."
"Pricing for it is a bit high. It could be cheaper."
"It should have been scalable, but it is not quite so; there are limitations, and I find it very difficult to give connectivity simultaneously on concurrent connections, so I have to deprive my faculties, my staff, or my students of certain functions."
"I mostly do administration, and I found Cisco to be the hardest major firewall manufacturer to deal with, with Fortinet FortiGate being the second hardest for me."
"Fortinet should improve its software, as we are seeing lots of firmware versions generated for each vulnerability issue. It becomes difficult for us to keep updating the firmware frequently due to bugs."
"The support costs and licensing are sometimes so expensive."
"I think the initial setup of Check Point CloudGuard Network Security can be simpler; onboarding could be more intuitive for new cloud teams, and it could also have more flexible custom reporting and better documentation examples."
"Lacks the ability to integrate with other security solutions."
"The solution’s technical support, DNS security and training could be improved."
"The convergence time between cluster members is still not perfect. It's far away from what we get in traditional appliances. If a company wants to move mission-critical applications for an environment to the cloud, it somehow has to accept that it could have downtime of up to 40 seconds, until cluster members switch virtual IP addresses between themselves and start accepting the traffic. That is a little bit too high in my opinion. It's not fully Check Point's fault, because it's a hybrid mechanism with AWS. The blame is 50/50."
"The initial deployment using the ARM template in Azure was straightforward, but migrating to Terraform added complexity, although we managed to make it work."
"The documentation has been rough. Being able to do it yourself can be hit or miss given the constraints of the documentation."
"From the policy optimization point of view, they can do better. This is not just for CloudGuard. CloudGuard is one little piece managed by Check Point. They can also integrate a third-party policy management solution to improve that. For example, Tufin is focused on policy optimization and management."
"I would like to see a step-by-step initial installation of the firewall. That would be really helpful. Like in Oracle appliances, when you start it asks you, what's your current IP address? An initial setup should be a step by step and intuitive process. You click on "begin," it asks you some simple questions. You fill in the blanks - your current IP address, what you want to do, you want to set up a site to site VPN, for example, that kind of thing. That would be the smartest thing to have."
"The pricing of this solution needs to be decreased."
"Improvement is needed in terms of the technical support of the manufacturer."
"The technical support for this solution in Poland is not good."
"Being more cost effective. I went with a pair of Watchguard M300 recently when buying a new firewall cluster for our own use because it was way cheaper than NetASQ/Stormshield N700 while being faster, and it offers true multi-master firewall clustering if needed."
"The pricing is increasing, and I would say it is a bit expensive."
"Support is always an issue because they're constantly busy."
"A more user-friendly interface would be helpful."
"Not all the fields are activated yet and we were informed that it will take at least one month."
 

Pricing and Cost Advice

"As far as I'm aware, in our case, it's just a yearly pricing arrangement with no additional licensing costs."
"Setup cost may be not so low, as you expect, because it depends on different factors, but TCO for 5 years may pleasantly surprise you."
"Work through partners for the best pricing."
"Price-wise, it's at a good price point for our market."
"Its price is reasonable. They have a clear pricing policy. It is not complicated by the number of VPN users at a time. We know what the price is. The yearly subscription for the security license is rather high, but it is all included for whatever number of users you have and the kind of functions you need."
"Our licensing costs are on a yearly basis."
"The support subscription for the solution is annual. You are paying for support and there are two levels of support, professional and advanced."
"Its price is normal. If I compare it with other vendors, such as Palo Alto, it's normal. Palo Alto is expensive."
"You get charged only for what resources you choose and how much traffic actually passes through the firewall, which in turn saves a lot of money."
"I quite like the way they priced it. It is very reasonable."
"We have a pretty good partnership with Check Point. We have a global subscription and agreement. They give us a pretty good corporate discount."
"Every project needs different pricing. I believe that when we talk with the particular guys, we will find a price for the customer. They are flexible in terms of that because we need to be flexible, and we have many companies who are aggressive with discounts."
"The tool's pricing is not cheap."
"It is the most expensive part of the product. There is a lot of room for improvement. Security comes with a price, but it is still a big chunk just for the service."
"CloudGuard Network Security's pricing is fine."
"We got discounts on pricing."
"The price of this solution and the price of support are ok."
"We chose Stormshield for its price, as the Azure firewall was too expensive."
"I think the price is good."
"The SN200 series costs between $500 USD and $600 USD per year, whereas the SN700 series costs approximately $1,000 annually."
"The pricing could be better."
"We bought a three-year license, and we renew it whenever it expires. The price could be better. It's always very expensive."
"For mid-sized companies, they sell their appliances for good prices."
report
Use our free recommendation engine to learn which Unified Threat Management (UTM) solutions are best for your needs.
896,510 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
10%
Comms Service Provider
10%
Manufacturing Company
9%
Financial Services Firm
7%
Outsourcing Company
10%
Computer Software Company
9%
Financial Services Firm
9%
Manufacturing Company
7%
Comms Service Provider
16%
Computer Software Company
12%
Manufacturing Company
10%
Financial Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business368
Midsize Enterprise135
Large Enterprise193
By reviewers
Company SizeCount
Small Business71
Midsize Enterprise41
Large Enterprise79
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise5
Large Enterprise2
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?
We have encountered a few subscription-based licensing models for the virtual gateway and security enablement. We hav...
What needs improvement with Check Point CloudGuard Network Security?
I find troubleshooting a bit challenging with Check Point Cloud Firewall (formerly CloudGuard Network Security); one ...
What is your primary use case for Check Point CloudGuard Network Security?
My usual use cases for Check Point Cloud Firewall (formerly CloudGuard Network Security) involve onboarding as an ene...
What needs improvement with Stormshield Network Security?
I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability sol...
What is your primary use case for Stormshield Network Security?
I already use Stormshield Network Security, and I am now looking for a new solution. I am already working with Storms...
What advice do you have for others considering Stormshield Network Security?
The pricing is increasing, and I would say it is a bit expensive. Palo Alto and others are much more expensive, but S...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security
NETASQ Firewalls
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Physicians Choice Laboratory Services, Helvetica Insurance
ACESUR group, Ministry of Education Oman, Anios Laboratories, Zain, DLM Location
Find out what your peers are saying about Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Stormshield Network Security and other solutions. Updated: May 2026.
896,510 professionals have used our research since 2012.