I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability solution would be beneficial because currently, if you build a high availability solution with Stormshield Network Security, you have a main device and another one is a backup device. The HA can switch between them, but it would be good to have a master-master solution, not just a master-slave one. I could set a URL that I can call to update the DNS record. Currently, Stormshield Network Security devices support DynDNS, which is not a usual feature request from a server environment. I have my own solution instead of DynDNS because I don't prefer it, so I have my own service for that. However, the GUI does not support using a custom service instead of DynDNS. I had to solve it in the console on Stormshield Network Security device, but it would be much better if it was reachable on the GUI. I had to figure out a trick for the IPsec configuration. In the IPsec config, we have to provide the remote side's IP address, but it's always changing. This means that an office, for example a company that has an office but without a fixed IP address, cannot be used with IPsec VPN.
The filtering configuration could be better. We have some difficulties with the filtering configuration and the filter extension. It's not that easy. It's not that straightforward. In the next release, I would like to see a reporting system. Stormshield doesn't have any tutorials on how to do the configuration and things like that. They just have documentation on the website. If you want to configure, for example, Cisco or Fortinet, you can find tutorials on YouTube. They show you how to configure the features, and so on. In Stormshield, there is nothing on social media or the internet on how to configure different things. The lack of documentation or the lack of material makes it difficult for others to adopt this solution.
Owner at a tech services company with 1-10 employees
Real User
Sep 21, 2020
I'd like to see an improvement in the design of the product. Improvement is also needed in terms of the technical support of the manufacturer, they're not very responsive when it comes to technical support. They're also not very active on presales. Those are the main issues. I'd like to see a strengthening of the ransomware component. The former version that we have has no ransomware on it. The reporting also needs improvement so that we can receive it in several languages. We leave some of the equipment with customers and monitor security for them. Each month we have to pull a report and most of the time, some of the languages are not available so it also requires translation.
CEO & Founder at a manufacturing company with 10,001+ employees
Real User
Jun 8, 2020
Many products are in front of the firewall and anybody can pick them up and the firewall will crash. It requires protection of the software and the SD card to avoid that kind of damage. I don't feel the SD card is particularly secure.
The technical support for this solution needs to be improved. This is not a next-generation firewall. The VPN portal needs to be improved, although it functions. This solution does not have support for a sandbox.
Network Engineer at a tech services company with 201-500 employees
Reseller
Oct 24, 2019
The pricing of this solution needs to be decreased. Authentication needs to be improved. If any user out of my domain wants to authenticate, he can't because the captive portal is not compatible with many browsers, like Google Chrome. This is a big problem that we are having with the captive portal. It needs to be improved. Also, security policy needs to be more straightforward and easier. In the next release, I would like to see the Security Policy simplified. It has a few features, like, Filter-NAT, URL filtering, and SSL filtering, but it would be nice if there were a way to combine the features in one tab or to create a setup wizard for this option. I would like to create a Filer-NAT rule to decrypt or to block some sites with HTTPS and HTTP. I think that there is a way to combine them using a wizard to create the rule.
Since I have only been using this solution for a month, I haven't noticed anything yet that needs to improve. So far I can only say that the pricing could be better. But it is a trusted company belonging to Airbus, so it has a good reputation. One thing, though, is that not all the fields are activated yet and we were informed that it will take at least one month. That's the only issue we have faced until now. So this issue should be fixed in the nearest future, because one cannot just buy a hundred appliances if you have to wait to activate all the features while you paid the full amount. So I don't know why that is the case, but the technical team said that it's the norm.
This solution has a big problem with web filtering and it needs to be improved. There is a shortage of instructional videos and information on how to configure Stormshield. More YouTube How-To videos should be created.
Technical Director Europe at a tech services company with 1-10 employees
Reseller
Jun 30, 2019
The main area of this product that has room for improvement is pricing. Stormshield Network Security is quite expensive. For me, what they currently have with features is enough. Maybe because I use a quite old interface of this, the price and a more user-friendly interface could be improved.
IT Manager at a retailer with 1,001-5,000 employees
Real User
Aug 21, 2018
* Better management of high availability features * Application awareness to a higher degree * VPN throughputs: Stromshield needs a higher throughput on some models. When you build VPN tunnels between firewalls, the throughputs on the VPN tunnels are pretty limited. * They could improve their support.
Stormshield Network Security offers comprehensive protection with features like backup inspection, scalable interface, and load balancing, suitable for network security management.Stormshield Network Security is designed for organizations requiring reliable IT infrastructure protection, providing firewall capabilities, intrusion detection, and application control. Users find VPN support, URL filtering, and UTM functions beneficial for network management. Models like SN200 and SN910 are used...
I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability solution would be beneficial because currently, if you build a high availability solution with Stormshield Network Security, you have a main device and another one is a backup device. The HA can switch between them, but it would be good to have a master-master solution, not just a master-slave one. I could set a URL that I can call to update the DNS record. Currently, Stormshield Network Security devices support DynDNS, which is not a usual feature request from a server environment. I have my own solution instead of DynDNS because I don't prefer it, so I have my own service for that. However, the GUI does not support using a custom service instead of DynDNS. I had to solve it in the console on Stormshield Network Security device, but it would be much better if it was reachable on the GUI. I had to figure out a trick for the IPsec configuration. In the IPsec config, we have to provide the remote side's IP address, but it's always changing. This means that an office, for example a company that has an office but without a fixed IP address, cannot be used with IPsec VPN.
The product must improve its pricing.
The guidance for installations could be improved. But assistance finally was there and brilliantly filling in the few gaps.
The filtering configuration could be better. We have some difficulties with the filtering configuration and the filter extension. It's not that easy. It's not that straightforward. In the next release, I would like to see a reporting system. Stormshield doesn't have any tutorials on how to do the configuration and things like that. They just have documentation on the website. If you want to configure, for example, Cisco or Fortinet, you can find tutorials on YouTube. They show you how to configure the features, and so on. In Stormshield, there is nothing on social media or the internet on how to configure different things. The lack of documentation or the lack of material makes it difficult for others to adopt this solution.
It could be better if it were more user-friendly for us as we dont use it very often evn if we never had problems to modify setup when needed.
I'd like to see an improvement in the design of the product. Improvement is also needed in terms of the technical support of the manufacturer, they're not very responsive when it comes to technical support. They're also not very active on presales. Those are the main issues. I'd like to see a strengthening of the ransomware component. The former version that we have has no ransomware on it. The reporting also needs improvement so that we can receive it in several languages. We leave some of the equipment with customers and monitor security for them. Each month we have to pull a report and most of the time, some of the languages are not available so it also requires translation.
Many products are in front of the firewall and anybody can pick them up and the firewall will crash. It requires protection of the software and the SD card to avoid that kind of damage. I don't feel the SD card is particularly secure.
The technical support for this solution needs to be improved. This is not a next-generation firewall. The VPN portal needs to be improved, although it functions. This solution does not have support for a sandbox.
The pricing of this solution needs to be decreased. Authentication needs to be improved. If any user out of my domain wants to authenticate, he can't because the captive portal is not compatible with many browsers, like Google Chrome. This is a big problem that we are having with the captive portal. It needs to be improved. Also, security policy needs to be more straightforward and easier. In the next release, I would like to see the Security Policy simplified. It has a few features, like, Filter-NAT, URL filtering, and SSL filtering, but it would be nice if there were a way to combine the features in one tab or to create a setup wizard for this option. I would like to create a Filer-NAT rule to decrypt or to block some sites with HTTPS and HTTP. I think that there is a way to combine them using a wizard to create the rule.
Since I have only been using this solution for a month, I haven't noticed anything yet that needs to improve. So far I can only say that the pricing could be better. But it is a trusted company belonging to Airbus, so it has a good reputation. One thing, though, is that not all the fields are activated yet and we were informed that it will take at least one month. That's the only issue we have faced until now. So this issue should be fixed in the nearest future, because one cannot just buy a hundred appliances if you have to wait to activate all the features while you paid the full amount. So I don't know why that is the case, but the technical team said that it's the norm.
This solution has a big problem with web filtering and it needs to be improved. There is a shortage of instructional videos and information on how to configure Stormshield. More YouTube How-To videos should be created.
The main area of this product that has room for improvement is pricing. Stormshield Network Security is quite expensive. For me, what they currently have with features is enough. Maybe because I use a quite old interface of this, the price and a more user-friendly interface could be improved.
The pricing could be improved. For me, in terms of the solution, what they currently have is enough. A more user-friendly interface would be helpful.
* Better management of high availability features * Application awareness to a higher degree * VPN throughputs: Stromshield needs a higher throughput on some models. When you build VPN tunnels between firewalls, the throughputs on the VPN tunnels are pretty limited. * They could improve their support.