No more typing reviews! Try our Samantha, our new voice AI agent.

Fortinet FortiGate vs Netgate pfSense vs Stormshield Network Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

Firewalls Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate18.3%
OPNsense10.3%
Sophos Firewall9.4%
Other62.0%
Firewalls
Firewalls Mindshare Distribution
ProductMindshare (%)
Netgate pfSense9.1%
Fortinet FortiGate18.3%
OPNsense10.3%
Other62.3%
Firewalls
Unified Threat Management (UTM) Mindshare Distribution
ProductMindshare (%)
Stormshield Network Security4.0%
Fortinet FortiGate30.5%
WatchGuard Firebox9.2%
Other56.3%
Unified Threat Management (UTM)
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
JA
Principal Cloud Architect - Software Engineer at a consultancy with 11-50 employees
Rapid VPN setup has connected offices in minutes and brings live insights for proactive issue control
What I appreciate the most about Netgate pfSense is the ease and straightforward nature of the platform. I can set up a new office in less than 10 minutes. The benefits of using Netgate pfSense are that I can set up VPNs in less than two to three minutes, and then just deploy the file across my networks, where everybody would be connected in less than an hour. The dashboards of Netgate pfSense bring all the necessary information that I need at a glance, and it is actually a live update every three to five seconds. It is spotless, and I have been able to catch issues before they hit operations.
Zsolt Jónás - PeerSpot reviewer
System Administrator at NaxoNet
Advanced GUI and layered security have supported compliance and simplified intrusion prevention
I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability solution would be beneficial because currently, if you build a high availability solution with Stormshield Network Security, you have a main device and another one is a backup device. The HA can switch between them, but it would be good to have a master-master solution, not just a master-slave one. I could set a URL that I can call to update the DNS record. Currently, Stormshield Network Security devices support DynDNS, which is not a usual feature request from a server environment. I have my own solution instead of DynDNS because I don't prefer it, so I have my own service for that. However, the GUI does not support using a custom service instead of DynDNS. I had to solve it in the console on Stormshield Network Security device, but it would be much better if it was reachable on the GUI. I had to figure out a trick for the IPsec configuration. In the IPsec config, we have to provide the remote side's IP address, but it's always changing. This means that an office, for example a company that has an office but without a fixed IP address, cannot be used with IPsec VPN.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features of the solution are SD-WAN, filtering testing applications, web filtering, and the new VPN."
"Onboarded three times more customers without adding firewall hardware, cut network expansion capital expenses by roughly 40 percent through VDOM consolidation, reduced vulnerability remediation costs by about 60 percent thanks to automated FortiGuard updates, shortened policy-deployment time by over 50 percent, freeing up 10 plus hours of engineering effort weekly, and achieved payback on the initial FortiGate investment within 9 months via increased tenancy revenue and lower OPEX."
"I appreciate the ease of use, ease of setup, and the different abilities it has; I have been very pleased with it over SonicWall, the interface of Fortinet FortiGate is a lot easier to use and more robust, plus their VPN option is much better."
"It is a one box solution, which covers most of the edge device’s requirements."
"The impact of SD-WAN on the network performance has been significant."
"The interface is very user-friendly and I like it very much."
"The solution is pretty expensive, but it provides great value to our organization."
"The most valuable feature of this solution is Quota."
"The ability to utilize the features instead of having to pay a license fee for every single thing that you want to use on a firewall is valuable. A lot of other companies give you a firewall out of the box that has very basic functionality, whereas pfSense gives you all the good features, and if you want to have more advanced features, you can pay a fee."
"Its scalability is a strong point."
"One of the advantages of pfSense is that it is very easy to work with. It is a very good open-source solution, and it works really well. pfSense provides a complete package. For some features, it could be the first solution in the world. It is a very good alternative in the market for a firewall solution. You don't need to go to Cisco or other brands with expensive firewalls. pfSense also allows us to offer some support services."
"Remote access with two-factor authentication was a big one for us. Pulling in things like Endpoint NG to monitor traffic has been quite helpful. The pfBocker has been good. It helps us limit who's trying to bash away at access to the systems."
"I really enjoy the flexibility of the interface setup configuration for my network VLANs; it is very easy to configure and set, and when I am doing multi-inputs with internet providers coming in, it is very easy to manage and set up with very little effort."
"If you want to protect your home network, and don't want to invest in a firewall, pfSense will do the job."
"The quality of support is great."
"The solution's web interface is very feature-rich and well-supported."
"Ease of use is the best feature of the product."
"The multi-layered security approach of Stormshield Network Security is a good one and has helped with compliance."
"Easily manageable in a variety of environments."
"Stormshield is pretty robust, compared to other products like Fortinet, as you get more security with Stormshield and spend less money."
"A very robust product."
"Customer service is very good, because of their presales support helping me with initial setup I decided to go with NetASQ in the first place, and support after the sale has been equally good as well."
"Stormshield is a very strong firewall and very easy to configure and maintain."
"The most valuable features of this solution are the URL filtering database, which is great and contains all internet categories, the highly scalable interface that I can turn into what I want including hybrid, bridge, or router mode, the security with no back doors that is more secure than other solutions, and the hardware performance that is also better than others."
 

Cons

"The price of the solution could be cheaper."
"The support package being an additional extra, even with an enterprise package purchase, is pathetic. Though I haven't had direct experience with support, the fact that it doesn't come by default, which is very misleading compared to other brands, warrants a rating of two out of ten."
"Pricing for it is a bit high. It could be cheaper."
"I see problems with the licensing. If I have to add a new feature, we need to add a license."
"There are a lot of bugs I have found in the solution and it is difficult to upgrade. These areas need improvement."
"Some of the web policy reports could be improved."
"There can be more security in hybrid implementations. When a customer has a hybrid environment where some parts are in the cloud, we need a consistent security solution for such scenarios."
"Fortigate's hardware capacities could be improved."
"Compatibility with virtualization system (like VMWare, Proxmox and so on and so forth); in some cases, it can create conflicts with virtualized hardware, and configuration export (sometimes the XML file creates a conflict with the hardware network MAC address)."
"Sometimes there are issues with package deployment and one must refer to the forums for support."
"I would like to see different graphs available in the reporting."
"I would like to see the dashboard modernized."
"The domain blocking lists need to be improved."
"Netgate pfSense can improve by adding a different OS layer other than FreeBSD."
"The product must provide integration with other solutions."
"I have been using WireGuard VPN because it is a lot faster and more secure than an open VPN. However, in the latest version of pfSense, they have removed this feature, which is one of the main features that I need. They should include this feature."
"With Stormshield, there are difficulties joining things, and it can be complex depending on the architecture."
"Support is always an issue because they're constantly busy."
"The filtering configuration could be better. We have some difficulties with the filtering configuration and the filter extension. It's not that easy. It's not that straightforward. In the next release, I would like to see a reporting system. Stormshield doesn't have any tutorials on how to do the configuration and things like that. They just have documentation on the website. If you want to configure, for example, Cisco or Fortinet, you can find tutorials on YouTube. They show you how to configure the features, and so on. In Stormshield, there is nothing on social media or the internet on how to configure different things. The lack of documentation or the lack of material makes it difficult for others to adopt this solution."
"The product must improve its pricing."
"The pricing is increasing, and I would say it is a bit expensive."
"Not all the fields are activated yet and we were informed that it will take at least one month."
"Improvement is needed in terms of the technical support of the manufacturer."
"The filtering configuration could be better. We have some difficulties with the filtering configuration and the filter extension."
 

Pricing and Cost Advice

"FortiGate SWG is reasonably priced."
"We just pay a flat monthly fee to the vendor for the support."
"At the time we bought them, I was satisfied with their pricing; I don't know how the new pricing will be."
"I'll rate FortiGate's pricing a five out of ten since it is moderately priced."
"Licensing is usually on a three-year period."
"It is more affordable than Check Point and Palo Alto. Another thing is that all the features and the OS remain the same irrespective of the size of the device. Pricing-wise, Fortinet typically provides one-year support with the firewall appliance. There is also an option for three years which is how their licensing works."
"Currently, we are paying about $1,500 a month for three sites."
"It's one of the more expensive brands. The 100 series costs around $4,000. They are similar in pricing to what you might get from Cisco solutions and probably other similar ones. They're not more expensive than other similar solutions, but they're certainly not cheaper either."
"There is no license. You don't have to pay anything. It's completely free."
"I spent a couple of $1,000 on hardware, and the OS was free. A comparable firewall would cost me probably 20 grand. It saved a lot of money."
"While pfSense hardware from Netgate might have a higher upfront cost, I've had very little trouble with it. Plus, buying from them directly helps fund the software's development, making it a worthwhile investment in my eyes."
"The pricing is reasonable."
"pfSense pricing is reasonable."
"The price of pfSense seems reasonable. I pay around a hundred dollars a year for pfSense Plus, which is inexpensive for such a complex product. It's also good that they can still release a community edition. If it started to get extremely expensive to the point where it was more of an enterprise-only product that costs thousands of dollars a year or something like that, I might consider stepping down to the community edition or looking elsewhere."
"It's a very good solution, but it's a bit too expensive for private use."
"We are using its Community Edition, which is free. My company is a government school, and we don't have much budget."
"We bought a three-year license, and we renew it whenever it expires. The price could be better. It's always very expensive."
"The pricing could be better."
"We chose Stormshield for its price, as the Azure firewall was too expensive."
"The price of this solution and the price of support are ok."
"The SN200 series costs between $500 USD and $600 USD per year, whereas the SN700 series costs approximately $1,000 annually."
"I think the price is good."
"For mid-sized companies, they sell their appliances for good prices."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
885,667 professionals have used our research since 2012.
 

Comparison Review

it_user216600 - PeerSpot reviewer
Senior Technical Consultant with 51-200 employees
Jan 3, 2016
Sophos UTM vs. Fortinet FortiGate
I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Comms Service Provider
10%
Manufacturing Company
8%
Financial Services Firm
6%
Comms Service Provider
13%
Computer Software Company
12%
Manufacturing Company
7%
Educational Organization
6%
Comms Service Provider
16%
Computer Software Company
14%
Manufacturing Company
11%
Construction Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business364
Midsize Enterprise135
Large Enterprise190
By reviewers
Company SizeCount
Small Business170
Midsize Enterprise33
Large Enterprise29
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise5
Large Enterprise2
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Help me find the best open source router
You don't really specify what type of router you are looking for but if you are talking about a gateway router I reco...
How do I choose between Fortinet FortiGate and pfSense?
Fortinet’s Fortigate is a firewall solution we use and are very much satisfied with its performance. We find Fortigat...
What is the difference between PfSense and OPNsense?
Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...
What advice do you have for others considering Stormshield Network Security?
The tool is like a firewall and works well. I don't have any issue with it. I rate it an eight out of ten.
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
No data available
NETASQ Firewalls
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Nerds On Site Inc., RKC Development Inc., Expertech, Fisher's Technology, Ncisive, Consulting, CPURX, Vaughn's Computer House Calls, Imeretech LLC, Digital Crisis, Carolina Digital Phone, Technigogo Technology Services, The Simple Solution, SwiftecITInc, Rocky Mountain Tech Team, Free Range Geeks, Alaska Computer Geeks, Lark Information Technology, Renaissance Systems Inc., Cutting Edge Computers, Caretech LLC, GoVanguard, Network Touch Ltd, P.C. Solutions.Net, Vision Voice and Data Systems LLC, Montgomery Technologies, Techforce, Concero Networks, ASONInc, CPS Electronics and Consulting, Darkwire.net LLC, IT Specialists, MBS-Net Inc., VOICE1 LLC, Advantage Networking Inc., Powerhouse Systems, Doxa Multimedia Inc., Pro Computer Service, Virtual IT Services, A&J Computers Inc., Envision IT LLC, CommunicaONE Inc., Bone Computer Inc., Amax Engineering Corporation, QPG Ltd. Co., IT 101 Inc., Perfect Cloud Solutions, Applied Technology Group Inc., The Digital Sun Group LLC, Firespring
ACESUR group, Ministry of Education Oman, Anios Laboratories, Zain, DLM Location
Find out what your peers are saying about Fortinet, Netgate, Sophos and others in Firewalls. Updated: March 2026.
885,667 professionals have used our research since 2012.