Check Point NGFW vs Stormshield Network Security comparison

Check Point NGFW vs. Stormshield Network Security

Download the complete report

Helped 849,686 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

Manikandan Kannan

Head of Technology at Techfruits

Streamlined management through dual-interface configuration capabilities with excellent support

We use Check Point NGFW for security purposes. Our clients use it for security reasons, as mentioned during the call The most valuable feature is the availability of two consoles. In the normal GA login, I can create interfaces and configure interface IPs, while in the SmartConsole, I manage the…

Read full review

Ben_Ben

Network Engineer at ACS

The intrusion detection system helps our organization by automatically detecting and responding to potential threats

The tool's most valuable feature is its dashboard, which helps you manage different aspects of a single page. The intrusion detection system helps our organization by automatically detecting and responding to potential threats. It operates similarly to Darktrace, which detects and responds automatically based on the security rules you apply. Initially, you configure everything to block, and then you can whitelist specific items as needed.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The notable features that I have found most valuable are that it includes the antivirus, and also IPS, and even SD-WAN."

"The feature I like most is the SD-WAN. It allows you to manage more than one ISP at the same time. And there is a high-availability mode, so if one of your ISPs is down, you still have a backup."

"LinkGreat firewall capabilities"

"Whenever we raise a complaint with FortiGate, their response and resolution times are minimal."

"Fortigate is very scalable to serve our customers' needs. We have scaled already from fifty to more than a hundred instances of Fortinet FortiGate. Around 20 staff are required for deployment and maintenance, mostly engineers."

"FortiGate firewalls are user-friendly, and I like the security profiling features."

"Layer-3 firewall and routing are the most valuable features."

"Its user interface is good, and it is always working fine."

More Fortinet FortiGate pros

"The solution's technical support is fine."

"It improves user productivity and frees up system resources."

"Configuration and deploying are easy."

"It's really simple to set up."

"The activation of additional features is very easy and well documented."

"It is a very friendly platform and easy to configure."

"Within the organization, the inspection of packages has given us great help in detecting traffic that may be a threat to the institution."

"In addition to the different security features that Check Point security solutions have, their integration with other technologies makes the security environment a complete security type."

More Check Point NGFW pros

"It's an easy, straightforward management platform to use."

"A very robust product."

"Easily manageable in a variety of environments."

"The tool's most valuable feature is its dashboard, which helps you manage different aspects of a single page."

"I like that it works fine. Stormshield is a very good solution."

"The tool's most valuable feature is its dashboard, which helps you manage different aspects of a single page. The intrusion detection system helps our organization by automatically detecting and responding to potential threats. It operates similarly to Darktrace, which detects and responds automatically based on the security rules you apply. Initially, you configure everything to block, and then you can whitelist specific items as needed."

"I can see what traffic is going on. I can easily block any programs from attacks."

"Ease of use is the best feature of the product."

More Stormshield Network Security pros

Cons

"Technical support could be better. You don't always get the level of help you need right away."

"In some cases, its initial setup could be hard for customers."

"The solution is very expensive."

"Some of the features in the graphical user interface do not work, which requires that we used the command-line-interface."

"FortiGate can improve its token system, as it requires a purchase before use."

"We would like to see better pricing."

"The inability to scale the FortiAnalyzer to match our growth necessitates the purchase of new hardware."

"Their software support needs improvement. I would prefer to have better support for bug fixes. Sometimes, we open a ticket, and it is very difficult to get a solution. Specifically, we are not at all happy with their support for load balancing."

More Fortinet FortiGate cons

"The improvement could come from better monitoring of traffic data in and out of the firewall."

"With the increase of volume of traffic, the required resource/hardware to properly run goes up. Therefore, the hardware engineering to architecture flow has to be more efficient."

"The product or services can be improved from the cost and the pricing perspective."

"One of my issues with Check Point is the stability. There have been too many bugs, over the years, when I compare them with other vendors. Their QA team should do better work before releasing their GA versions."

"Check Point needs to work on hardware problems also."

"Check Point NGFW Firewall requires frequent updates to build more user-friendly dashboards."

"It depends whether the problem is known to Check Point. If they are aware there is a problem, quite often it will then depend on which tech you finally land on if it's easier or harder to get to the root cause. The last issue was in India so that was pretty bad. It's easier if you get directly through to Tel Aviv or Ottawa, but you can't choose. Once they know what the issue is, it's pretty good. It pretty much depends on the engineer that you get. There are pretty good engineers and there are many engineers who are at just the starter level at Check Point who are not really into the stuff. Sometimes it's hard, sometimes it's easy, depending on the problem and the tech engineer you get."

"During my initial level implementation of check Point NGFW, I faced issues troubleshooting. The problem was with its command line."

More Check Point NGFW cons

"It could be better if it were more user-friendly. It's too complicated for us to use it. The price could be better as well."

"The product must improve its pricing."

"This solution has a big problem with web filtering and it needs to be improved."

"Stormshield Network Security is quite expensive."

"Improvement is needed in terms of the technical support of the manufacturer."

"The filtering configuration could be better. We have some difficulties with the filtering configuration and the filter extension. It's not that easy. It's not that straightforward. In the next release, I would like to see a reporting system. Stormshield doesn't have any tutorials on how to do the configuration and things like that. They just have documentation on the website. If you want to configure, for example, Cisco or Fortinet, you can find tutorials on YouTube. They show you how to configure the features, and so on. In Stormshield, there is nothing on social media or the internet on how to configure different things. The lack of documentation or the lack of material makes it difficult for others to adopt this solution."

"This is not a next-generation firewall."

"A more user-friendly interface would be helpful."

More Stormshield Network Security cons

Pricing and Cost Advice

"Fortinet is reasonable in pricing and licensing. Overall, FortiGate is affordable. The licensing fee can be a little high, depending on the budget for your project."

"The Indian market is different than the European and American markets. When you compare they need to be a bit more aggressive on pricing."

"Its pricing is good. The advantages of Fortinet FortiGate over its competitors include good pricing and meeting our requirements at a lower cost."

"Compared to Palo Alto, which we have used in the past, pricing and licensing are okay."

"They are very competitive, but we like to have the factory warranty taken care of."

"The price is highly competitive when compared to other brands that offer similar functionality."

"FortiGate's pricing falls within the mid-range when compared to other leading firewall solutions."

"On a scale of one being cheap and ten being expensive, I rate the tool's price as an eight."

More Fortinet FortiGate pricing and cost advice

"The price is on the higher side."

"Check Point NGFW is much cheaper than other platforms, including Palo Alto. Its scalability, especially with the Maestro solution, is a big advantage. If you're looking for good security at a reasonable price with a good return on investment, I believe Check Point NGFW is the way to go."

"They sell it in one box. In that one box, they sell Antivirus and Threat Prevention. They have everything, so we are not required to purchase additional IPS hardware for it."

"Check Point is competitively priced; however, there is an additional charge for the Annual Maintenance Contract (AMC) and it is easy to understand."

"There are three types of licensing: Threat Prevention, NGTP, and Next Generation Threat Extraction. Before, it used to be you would just enable the license of whatever blade you wanted to buy. Nowadays, Threat Prevention would be sufficient for most clients, so I would think people would go for the NGTP, license which includes all the blades."

"The technology itself is impressive, but I find the pricing a bit on the higher side."

"It is quite an expensive product, although security is a top priority."

"When comparing the price of Check Point NGFW to other solutions it's difficult to compare because even though everything is included in the Fortinet price, there are large differences between the models. You need to go to a quite expensive Fortinet firewall to receive the same throughput and functionality as in a Check Point firewall. In the end, they are quite similar in price, Fortinet might be a bit cheaper."

More Check Point NGFW pricing and cost advice

"The SN200 series costs between $500 USD and $600 USD per year, whereas the SN700 series costs approximately $1,000 annually."

"We chose Stormshield for its price, as the Azure firewall was too expensive."

"We bought a three-year license, and we renew it whenever it expires. The price could be better. It's always very expensive."

"The price of this solution and the price of support are ok."

"The pricing could be better."

"For mid-sized companies, they sell their appliances for good prices."

"I think the price is good."

See which vendors are best for you

Use our free recommendation engine to learn which Unified Threat Management (UTM) solutions are best for your needs.

See recommendations

849,686 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

20%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Educational Organization

56%

Computer Software Company

Financial Services Firm

Government

Computer Software Company

23%

Comms Service Provider

17%

Government

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

How does Check Point NGFW compare with Fortinet Fortigate?

I have experience on both from Disti and channel experience. Please find below my comments (nothing new as such). -Ch...

Which would you recommend - Azure Firewall or Check Point NGFW?

Azure Firewall is easy to use and provides excellent support. Valuable features include integration into the overall ...

What do you like most about Check Point NGFW?

Check Point NGFW provides essential security, featuring no-obligation access for secure connections, strong intrusion...

What do you like most about Stormshield Network Security?

Ease of use is the best feature of the product.

What is your experience regarding pricing and costs for Stormshield Network Security?

We pay for the quality we receive.

What needs improvement with Stormshield Network Security?

The product must improve its pricing.

Sophos XG vs Fortinet FortiGate

Comparisons

Compared 22% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 13% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

Fortinet FortiOS vs Fortinet FortiGate

Compared 2% of the time

More Fortinet FortiGate Competitors

Palo Alto Networks NG Firewalls vs Check Point NGFW

Compared 13% of the time

Sophos XG vs Check Point NGFW

Compared 9% of the time

Netgate pfSense vs Check Point NGFW

Compared 9% of the time

Cisco Secure Firewall vs Check Point NGFW

Compared 6% of the time

Sophos XGS vs Check Point NGFW

Compared 5% of the time

More Check Point NGFW Competitors

Netgate pfSense vs Stormshield Network Security

Compared 17% of the time

WatchGuard Firebox vs Stormshield Network Security

Compared 7% of the time

OPNsense vs Stormshield Network Security

Compared 6% of the time

Palo Alto Networks NG Firewalls vs Stormshield Network Security

Compared 6% of the time

SonicWall NSv vs Stormshield Network Security

Compared 2% of the time

More Stormshield Network Security Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Check Point NGFW

Download Check Point NGFW product report

Stormshield Network Security

Download Stormshield Network Security product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

Check Point NG Firewall, Check Point Next Generation Firewall

NETASQ Firewalls

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Check Point NGFW provides comprehensive firewall protection, managing VPNs, and securing network perimeters with advanced threat prevention techniques. It's widely used to protect businesses, data centers, and ensure secure traffic management.

Check Point NGFW offers robust security for companies, delivering security features like threat prevention, URL filtering, and intrusion prevention across both layer 3 and layer 7. It supports remote access, web filtering, application control, and safeguards against malware, botnets, and zero-day attacks. With its intuitive management console, deep packet inspection, centralized management capabilities, and sophisticated threat detection, Check Point NGFW enhances network security and productivity. The system integrates seamlessly with other technologies and provides real-time monitoring, detailed reporting, and automated policy management. Additionally, its setup is straightforward, it scales well, and offers comprehensive logging.

What are the key features?

VPN capabilities: Ensures secure remote access and encrypted communications.
Intuitive management console: Simplifies administration with an easy-to-use interface.
Application control: Provides extensive control over applications running on the network.
Deep packet inspection: Examines data packets in detail to detect and prevent threats.
Intrusion prevention system: Protects against unauthorized access and attacks.
Centralized management: Manages all security policies and devices from one location.
Automated policy management: Reduces administrative tasks through automation.
Advanced threat detection: Identifies sophisticated threats in real-time.
Real-time monitoring: Continuously monitors network traffic and security events.
Easy setup and scalability: Simplifies deployment and scales with business needs.

What are the benefits?

Enhanced security: Provides comprehensive protection against a range of cyber threats.
Increased productivity: Simplifies security management, allowing IT teams to focus on other tasks.
Improved visibility: Detailed reporting and monitoring provide insights into network activity.
Reduced risk: Automated threat detection and policy management mitigate potential risks.
Cost efficiency: Consolidates multiple security functions, reducing the need for additional solutions.

Check Point NGFW is implemented in industries like finance, healthcare, and retail, where protecting sensitive data and ensuring compliance are critical. Its advanced security features and ease of management make it suitable for large enterprises and data centers, ensuring reliable and secure network operations.

Check Point Software Technologies

NETASQ's integrated intrusion prevention engine uses protocol conformity analysis, application filtering and antivirus analysis to inspect authorized traffic flows and strengthen application security. NETASQ enables you to establish and configure user-based security policies, giving you greater control over which network resources each user is authorized to access.

Stormshield

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Control Southern, Optimal Media

ACESUR group, Ministry of Education Oman, Anios Laboratories, Zain, DLM Location

Check Point NGFW vs. Stormshield Network Security