Huawei NGFW vs Stormshield Network Security comparison

Huawei and Stormshield are both solutions in the Unified Threat Management (UTM) category. Huawei is ranked #13 with an average rating of 7.4, while Stormshield is ranked #12 with an average rating of 9.0. Additionally, 66% of Huawei users are willing to recommend the solution, compared to 85% of Stormshield users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Nov 7, 2024

Stormshield Network Security and Huawei NGFW are competitors in the network security field. Huawei NGFW tends to have the upper hand due to its advanced threat detection and integration capabilities.

Features: Stormshield Network Security offers advanced firewalling capabilities with customizable object groups and rules, a valuable Stormshield Analyzer for data collection and reporting, and robust antivirus controls at both the parameter and endpoint levels. Huawei NGFW provides a scalable interface, effective URL filtering, and comprehensive intrusion detection and prevention with IPS and cloud sandboxing.

Room for Improvement: Stormshield could enhance its user interface and scalability to handle larger environments more seamlessly and improve compatibility with third-party applications. Huawei NGFW might benefit from simplifying its complex features, enhancing support across more geographic regions, and ensuring faster response times from its customer support.

Ease of Deployment and Customer Service: Stormshield Network Security is known for its straightforward configuration and responsive customer support, making it accessible for different infrastructures. Huawei NGFW, while offering an extensive library of support resources and documentation, can have a more complex deployment process. Nevertheless, its technical support is excellent and offers in-depth assistance.

Pricing and ROI: Stormshield is considered cost-effective with transparent pricing, offering a solid return on investment through its reliable features. Huawei NGFW might require a higher initial investment but provides advanced functionalities that justify its cost for organizations looking for extensive integration and innovation, potentially yielding better ROI for those valuing cutting-edge technology.

To learn more, read our detailed Huawei NGFW vs. Stormshield Network Security Report (Updated: April 2025).

Buyer's Guide

Huawei NGFW vs. Stormshield Network Security

April 2025

Download the complete report

Helped 850,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

Muhammad-Nadeem

Lead Network Security Engineer at PTA

A scalable and easy-to-setup product that can be used to configure different policies for specific users

In other next-generation firewalls, if you are creating virtual systems, they will create separate hardware resources for different virtual systems. Other products will create a different routing table when we create a routing protocol. In Huawei, the routing table, control plan, and data plan will share the resources. Every virtual system should have separate resources, routing tables, and hardware resources. We have created multiple segments and virtual systems, and we don't want one segment to communicate with another. The product must divide the virtual firewalls with different utilization systems. The hardware, routing switch, and security bundle should be separate and different. The solution does not have sandboxing features. It should provide a sandboxing solution. It should also work on zero-day attacks. The solution should be comparable with the products provided by Palo Alto, Check Point, and Cisco.

Read full review

Benjamin

Network Engineer at ACS2I

The intrusion detection system helps our organization by automatically detecting and responding to potential threats

The tool's most valuable feature is its dashboard, which helps you manage different aspects of a single page. The intrusion detection system helps our organization by automatically detecting and responding to potential threats. It operates similarly to Darktrace, which detects and responds automatically based on the security rules you apply. Initially, you configure everything to block, and then you can whitelist specific items as needed.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is user friendly, and has all the features you need."

"The FortiGate controls the user's activities and maximizes my bandwidth use overall."

"It's super reliable. I don't think I've ever had a reliability issue with it."

"Valuable features include the Web Application Firewall, and it even has DLP (data leak prevention)."

"The wireless control is helpful."

"Fortinet FortiGate is stable. It's used across all the countries, this is the way most multinationals run their system."

"The most valuable features of Fortinet FortiGate are the ease of use and the UI. It has always provided me with what I needed. I have no need for additional costs that other solutions have, such as Sophos."

"The most valuable feature is the ease of use."

More Fortinet FortiGate pros

"We have found the initial setup to be straightforward."

"I like that the initial setup is straighforward. It's also a scalable solution."

"The user interface is very, very good."

"The operational management dashboard is easy to use for the customers."

"We make use of the new data center, specifically the containerized data center which is built and reviewed by Huawei, including all the device's infrastructure."

"One of the best things about Huawei NGFW is its ability to integrate Azure solutions. Every year, we can add new features to the firewall. The key advantage is the integration across the entire network, so it doesn't work in isolation. For example, we can manage everything with features like the secret manager or analytic IDs. The solution is straightforward. It can also detect intrusions."

"The solution's initial setup process is easy."

"The UI is quite good."

More Huawei NGFW pros

"The most valuable features are the IPS, the firewall function, and the price."

"Our organization's main concern is stability, and this is a stable solution."

"Ease of use is the best feature of the product."

"The scalability of the solution is good."

"I like how you can configure the rules. There is the task for the rules and a task for the network configuration. It also provides SMD filtering, and it can be integrated with the active directory for the users, their mission, and the VPN configuration. We are here in Sudan, and Stormshield didn't work in Sudan for more than a decade. Stormshield is a very strong firewall and very easy to configure and maintain. I am just working with the firewall solution, and we don't have any other solutions like endpoint solutions or something like that."

"The tool's most valuable feature is its dashboard, which helps you manage different aspects of a single page. The intrusion detection system helps our organization by automatically detecting and responding to potential threats. It operates similarly to Darktrace, which detects and responds automatically based on the security rules you apply. Initially, you configure everything to block, and then you can whitelist specific items as needed."

"A very robust product."

"Easily manageable in a variety of environments."

More Stormshield Network Security pros

Cons

"I would like to see a more intuitive dashboard."

"It does not have key authentication for admin access."

"Palo Alto has a feature called WildFire Analysis that is unavailable in FortiGate. WildFire is better than a sandbox because it can address zero-day threats and vulnerabilities. It can immediately identify zero-day threats from the cloud."

"They should make the rule sets more understandable for the end user. When you're trying to explain to somebody how a computer network is secured, sometimes it's difficult for an end user or customer to understand. If there was a way to make the terminology more accessible to the end user, the set up could be easier. They should translate the technical jargon to an easily relatable and understandable conversation for the end user, the customer, that would be brilliant. Particularly in an environment where the IT structure is audited regularly, there's always pressure from the auditor to up the standards and up the security and you get your USCERT's that come out and there's a warning about this and the customer will want to lock out so much and when you apply it they run into issue where they can't search the internet or print to their remote office. Of course they can't print to your remote office, they just locked it up. They should make the language more understandable for the customer. If there's a product out there that made the jargon understandable to John Q. Public, I would buy that."

"The main aspect of FortiGate that could be improved is load balancing. Our management team does not want to buy another appliance for only load balancing."

"Cisco Meraki products are rising very quickly in the cloud and the connected era. Meraki products offer much better ROI, upgradability, and manageability."

"The product does need better support in the cloud environment. It's not exactly cloud-native right now."

"The solution lacks sufficient filtering."

More Fortinet FortiGate cons

"There needs to be more security equipment for the solution."

"Wi-Fi scanning and Wi-Fi analysis would be useful features to include in the future."

"Huawei also need to improve spam techniques and add a web application firewall. Currently, Huawei does not have a built-in web application firewall (WAF) like Fortinet does."

"Huawei should improve their threat intelligence."

"The solution isn't cheap. It's market price."

"One issue we've encountered with Huawei NGFW is that after using a firewall for two or three years, we need to replace it. The new firewalls often have more features and better memory or throughput. However, sometimes, they lack some features that the old ones had."

"One issue is integration. Huawei can't detect Indicators of Compromise (IoC). I can get a lot of information about security, but can't automatically input the EP, domain URL, and file hashes I get from Hackersworld into my blocklist."

"The solution does not have sandboxing features."

More Huawei NGFW cons

"This solution has a big problem with web filtering and it needs to be improved."

"With Stormshield, there are difficulties joining things, and it can be complex depending on the architecture."

"It could be better if it were more user-friendly. It's too complicated for us to use it. The price could be better as well."

"Stormshield Network Security is quite expensive."

"The filtering configuration could be better. We have some difficulties with the filtering configuration and the filter extension. It's not that easy. It's not that straightforward. In the next release, I would like to see a reporting system. Stormshield doesn't have any tutorials on how to do the configuration and things like that. They just have documentation on the website. If you want to configure, for example, Cisco or Fortinet, you can find tutorials on YouTube. They show you how to configure the features, and so on. In Stormshield, there is nothing on social media or the internet on how to configure different things. The lack of documentation or the lack of material makes it difficult for others to adopt this solution."

"The SD card could be more secure."

"Improvement is needed in terms of the technical support of the manufacturer."

"The biggest issue was their support department was not able to help us, then everything stops. This is a no-go area for me."

More Stormshield Network Security cons

Pricing and Cost Advice

"The pricing of the solution is very competitive."

"It is more affordable than Check Point and Palo Alto. Another thing is that all the features and the OS remain the same irrespective of the size of the device. Pricing-wise, Fortinet typically provides one-year support with the firewall appliance. There is also an option for three years which is how their licensing works."

"At the time we bought them, I was satisfied with their pricing; I don't know how the new pricing will be."

"Work through partners for the best pricing."

"Price-wise, it's at a good price point for our market."

"It scales well if you know what to buy from a physical box standpoint. They seem to offer something for every level."

"By default, they give SD-WAN along with the firewall. They don't have separate licensing for the SD-WAN functionality. However, they have security licenses that are sold separately on a subscription basis. Customers can consume these security features to protect their users from internet traffic."

"The license of Fortinet FortiGate should be reduced."

More Fortinet FortiGate pricing and cost advice

"Licensing fees are billed on an annual basis."

"The price of the license of this solution is high."

"Huawei is priced lower than most competitors."

"When you compare the price with other products, it's quite cost-effective. But the problem is always after, let's say, two years or three years later because they are not able to provide updates or patches very quickly."

"The solution isn't cheap. It's market price."

"Huawei is 30% cheaper than Arista."

"The solution is inexpensive."

"I believe that we are entitled to a one-year extension on our licensing."

More Huawei NGFW pricing and cost advice

"The SN200 series costs between $500 USD and $600 USD per year, whereas the SN700 series costs approximately $1,000 annually."

"The pricing could be better."

"We bought a three-year license, and we renew it whenever it expires. The price could be better. It's always very expensive."

"We chose Stormshield for its price, as the Azure firewall was too expensive."

"The price of this solution and the price of support are ok."

"For mid-sized companies, they sell their appliances for good prices."

"I think the price is good."

See which vendors are best for you

Use our free recommendation engine to learn which Unified Threat Management (UTM) solutions are best for your needs.

See recommendations

850,028 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

20%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Computer Software Company

17%

Financial Services Firm

Manufacturing Company

Comms Service Provider

Computer Software Company

23%

Comms Service Provider

17%

Government

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about Huawei NGFW?

The solution's implementation is pretty easy.

See all answers

What is your experience regarding pricing and costs for Huawei NGFW?

The pricing is quite cheap compared to other NGFWs like Palo Alto or Cisco.

See all answers

What needs improvement with Huawei NGFW?

Huawei should improve their threat intelligence. They need to have a more diversified platform and continuously updat...

See all answers

What do you like most about Stormshield Network Security?

Ease of use is the best feature of the product.

See all answers

What is your experience regarding pricing and costs for Stormshield Network Security?

We pay for the quality we receive.

See all answers

What needs improvement with Stormshield Network Security?

The product must improve its pricing.

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 22% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 13% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 5% of the time

More Fortinet FortiGate Competitors

Cisco Secure Firewall vs Huawei NGFW

Compared 14% of the time

Palo Alto Networks NG Firewalls vs Huawei NGFW

Compared 6% of the time

Fortinet FortiOS vs Huawei NGFW

Compared 5% of the time

Check Point NGFW vs Huawei NGFW

Compared 5% of the time

Sophos XGS vs Huawei NGFW

Compared 4% of the time

More Huawei NGFW Competitors

Netgate pfSense vs Stormshield Network Security

Compared 17% of the time

WatchGuard Firebox vs Stormshield Network Security

Compared 7% of the time

OPNsense vs Stormshield Network Security

Compared 6% of the time

Palo Alto Networks NG Firewalls vs Stormshield Network Security

Compared 6% of the time

Sophos XG vs Stormshield Network Security

Compared 5% of the time

More Stormshield Network Security Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

April 2025

Download Fortinet FortiGate product report

Buyer's Guide

Huawei NGFW

April 2025

Download Huawei NGFW product report

Buyer's Guide

Stormshield Network Security

April 2025

Download Stormshield Network Security product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

Huawei USG Firewalls, USG9500 Series, USG6600 Series, USG6300 Series

NETASQ Firewalls

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Huawei's Next-Generation Firewall (NGFW) is a cutting-edge security solution designed to protect networks from advanced threats. With its advanced threat detection and prevention capabilities, the Huawei NGFW ensures the highest level of network security.

The product offers comprehensive security features, including intrusion prevention, application control, and URL filtering, to safeguard against a wide range of cyber threats. The NGFW also provides deep packet inspection and advanced threat intelligence, enabling real-time threat detection and response.

With its high-performance architecture, the Huawei NGFW delivers fast and efficient security without compromising network performance. It is easy to deploy and manage, thanks to its intuitive user interface and centralized management platform.

The NGFW also supports flexible deployment options, including virtualization and cloud integration, making it suitable for various network environments.

Huawei

NETASQ's integrated intrusion prevention engine uses protocol conformity analysis, application filtering and antivirus analysis to inspect authorized traffic flows and strengthen application security. NETASQ enables you to establish and configure user-based security policies, giving you greater control over which network resources each user is authorized to access.

Stormshield

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

KMITL, Peking University

ACESUR group, Ministry of Education Oman, Anios Laboratories, Zain, DLM Location

Buyer's Guide

Huawei NGFW vs. Stormshield Network Security

April 2025

Free Report: Huawei NGFW vs. Stormshield Network Security

Find out what your peers are saying about Huawei NGFW vs. Stormshield Network Security and other solutions. Updated: April 2025.

DOWNLOAD NOW

850,028 professionals have used our research since 2012.

See our Huawei NGFW vs. Stormshield Network Security report.

See our list of best Unified Threat Management (UTM) vendors and best Firewalls vendors.

We monitor all Unified Threat Management (UTM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.