Check Point NGFW vs Stormshield Network Security comparison

Check Point Software Technologies and Stormshield are both solutions in the Unified Threat Management (UTM) category. Check Point Software Technologies is ranked #1 with an average rating of 8.6, while Stormshield is ranked #13 with an average rating of 9.0. Additionally, 96% of Check Point Software Technologies users are willing to recommend the solution, compared to 85% of Stormshield users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Apr 6, 2025

Stormshield Network Security and Check Point NGFW are competing products in network security solutions. Check Point NGFW is often favored for its robust features and comprehensive security capabilities, while Stormshield Network Security is appreciated for its competitive pricing and ease of deployment.

Features: Stormshield Network Security provides integrated IPS and deep packet inspection, efficient threat management, and simplicity in mid-size deployments. Check Point NGFW offers advanced threat prevention, comprehensive policy management, versatile integration options, and detailed logging.

Room for Improvement: Stormshield Network Security could enhance its feature set for large-scale environments and improve reporting capabilities. Check Point NGFW might benefit from streamlining its learning curve, increasing user-friendliness, and further enhancing scalability options.

Ease of Deployment and Customer Service: Stormshield Network Security is praised for its straightforward deployment and responsive customer support, making it ideal for smaller IT setups. Check Point NGFW, although having a steeper learning curve, provides extensive resources and support for large-scale deployments, focusing on scalability.

Pricing and ROI: Stormshield Network Security is considered cost-effective with a quicker ROI for smaller enterprises. Check Point NGFW, despite a higher initial cost, is seen as offering significant long-term ROI through its comprehensive security features and lower ongoing management expenses, appealing to strategic, long-term security investments.

To learn more, read our detailed Check Point NGFW vs. Stormshield Network Security Report (Updated: May 2025).

Buyer's Guide

Check Point NGFW vs. Stormshield Network Security

May 2025

Download the complete report

Helped 860,592 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Hailemichael Yigrem

Senior Cyber Security Engineer at Deliver ICT and Telecommunication Technology PLC

Advanced security features enhance threat detection and prevention

Check Point NGFW provides granular application control and detailed visibility over application and user activity. It integrates with the ThreatCloud ecosystem, enabling real-time threat detection and prevention. The User Identity Awareness blade integrates with Active Directory, identifying user traffic sources. Check Point NGFW is highly scalable and has centralized management through SmartConsole, which manages policies, logs, and threat data. It reduced our incidents and decreased the time to analyze cyber threats by 70 percent.

Read full review

Benjamin

Network Engineer at ACS2I

The intrusion detection system helps our organization by automatically detecting and responding to potential threats

The tool's most valuable feature is its dashboard, which helps you manage different aspects of a single page. The intrusion detection system helps our organization by automatically detecting and responding to potential threats. It operates similarly to Darktrace, which detects and responds automatically based on the security rules you apply. Initially, you configure everything to block, and then you can whitelist specific items as needed.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The main benefit is the grouping of our security monitoring."

"It has very easy management and an amazing ETM configuration."

"The stability of the solution is excellent, as it is with other Fortinet products."

"FortiGate SD-WAN facilitated a smooth transition for our customers between their two internet service providers, ensuring uninterrupted connectivity without any downtime."

"There is a tool called FSSO, which is a single sign-on user ID agent that works perfectly."

"Fortinet FortiGate is one of the most solid and secure firewalls as long as you keep it up to date. The price is right; it's not very expensive."

"The virtual firewall feature is the most valuable. We have around 1,500 firewalls. We did not buy individual hardware, and the virtual firewalls made sense because we don't have to keep on buying the hardware. FortiGate is easier to use as compared to Checkpoint devices. It is user friendly and has a good UI. You don't need much expertise to work on this firewall. You don't need to worry much about DCLA, commands, and things like that."

"Fortinet FortiGate provides excellent security against ransomware attacks."

More Fortinet FortiGate pros

"It also gives us a single console for everything. Rather than having one device for URL filtering and a different device as a firewall, this gives us everything in one place."

"The most valuable feature is the centralized management, which gives us control over all of the Check Point gateways."

"My favorite feature is the UTM piece and that was the main reason we bought it. It helps us to fine tune the network."

"My customers cite performance and ease of configuration as two of the solution's most valuable features."

"The event logs are relatively informative and can provide information on why traffic was accepted or rejected."

"The packet inspections have been a strong point."

"Check Point NGFW has positively impacted my organization as the incidents have reduced, resulting in no disruptions in the network."

"The product's ease of use is a significant advantage, and the interface is very intuitive."

More Check Point NGFW pros

"The scalability of the solution is good."

"This solution is quick and easy to configure."

"The tool's most valuable feature is its dashboard, which helps you manage different aspects of a single page. The intrusion detection system helps our organization by automatically detecting and responding to potential threats. It operates similarly to Darktrace, which detects and responds automatically based on the security rules you apply. Initially, you configure everything to block, and then you can whitelist specific items as needed."

"I can see what traffic is going on. I can easily block any programs from attacks."

"Ease of use is the best feature of the product."

"Easily manageable in a variety of environments."

"I like that it works fine. Stormshield is a very good solution."

"I like how you can configure the rules. There is the task for the rules and a task for the network configuration. It also provides SMD filtering, and it can be integrated with the active directory for the users, their mission, and the VPN configuration. We are here in Sudan, and Stormshield didn't work in Sudan for more than a decade. Stormshield is a very strong firewall and very easy to configure and maintain. I am just working with the firewall solution, and we don't have any other solutions like endpoint solutions or something like that."

More Stormshield Network Security pros

Cons

"I think that the infrastructure for the VPN could be improved. The way that it is bundled also made it difficult to use and sell as it is too expensive."

"At this moment, we believe that Fortinet FortiGate should be improved by injecting more AI because the kind of threats we are seeing are more ransomware threats."

"The sniffing packets or packet captures, can be simplified and improved because it's a little confusing."

"The only issue that I have is with FortiNAC. The firewall is fine, but the FortiNAC interface is a little bit too jumbled or too complicated, not as straightforward as it is on the Fortinet FortiGate firewall and FortiAnalyzer."

"We would like to see an upgrade to the VPN feature, we are using the VPN from outside of our office and there is a limitation to 10 connections, more connections would be suitable."

"If they had better integration with security products, such as Cisco ISE or Rapid Threat Containment, then it would be an improvement."

"The routing capability on the FortiGate devices has room for improvement."

"Areas that have room for improvement in Fortinet FortiGate include support and GUI enhancement."

More Fortinet FortiGate cons

"Including some sort of menu or grouping for VOIP would help the small business area that has limited support."

"Technical support could be improved."

"Check Point could do better to include acceleration technologies like SD-WAN in an integrated or embedded way to provide these new features that Check Point never had and is of great importance in the market."

"Debugging is very complex when compared to Fortinet, for example. That's the worst thing about Check Point. The deployment of the solution is harder than it is with the competitors. But after you've deployed it, the operation is easy."

"All the advanced features of automation, especially the first installation of tunnels, need improvement."

"Sometimes, the firewall doesn't pick up on certain things. If an attacker is clever and uses a low-profile indicator, the firewall might flag an anomaly but not give enough information to decide if it's worth investigating. The threat intelligence component also has challenges. It doesn't always tie alerts to active campaigns or threat actor groups. We often have to do extra work and use other products to figure these out."

"It would be nice if there is a mobile-friendly console for our techs."

"It can be expensive, especially for small businesses."

More Check Point NGFW cons

"The filtering configuration could be better. We have some difficulties with the filtering configuration and the filter extension. It's not that easy. It's not that straightforward. In the next release, I would like to see a reporting system. Stormshield doesn't have any tutorials on how to do the configuration and things like that. They just have documentation on the website. If you want to configure, for example, Cisco or Fortinet, you can find tutorials on YouTube. They show you how to configure the features, and so on. In Stormshield, there is nothing on social media or the internet on how to configure different things. The lack of documentation or the lack of material makes it difficult for others to adopt this solution."

"This is not a next-generation firewall."

"It could be better if it were more user-friendly. It's too complicated for us to use it. The price could be better as well."

"Stormshield Network Security is quite expensive."

"The product must improve its pricing."

"This solution has a big problem with web filtering and it needs to be improved."

"With Stormshield, there are difficulties joining things, and it can be complex depending on the architecture."

"Not all the fields are activated yet and we were informed that it will take at least one month."

More Stormshield Network Security cons

Pricing and Cost Advice

"For our organization, the licensing costs are approximately $7,000 per year."

"Its price is normal. If I compare it with other vendors, such as Palo Alto, it's normal. Palo Alto is expensive."

"Here in Brazil, we're going through difficult economic times and the tax on the dollar is high. All the solutions from minor competitors are growing in the market. The prices have come more competitive."

"It is somewhat expensive compared to other solutions such as Sophos."

"Fortinet has one or two license types, and the VPN numbers are only limited by the hardware chassis make."

"Pricing and licensing is a little bit complicated in FortiGate. They are always on the higher side. This is one issue that we always raise with the company that they should reduce the price according to Indian market requirements. There are no costs in addition to the standard licensing fees."

"The pricing for this solution is good."

"It was pretty affordable. We did go a little bit above MSRP, but the service pack that was included was quite worth the additional costs. It is competitively priced compared to other major players in the market. It is significantly cheaper than Check Point, which is a primary competitor. Additionally, its pricing is comparable to that of Cisco's ASA and a few other vendors."

More Fortinet FortiGate pricing and cost advice

"There is an annual license required for this solution."

"Check Point NGFW is not a cheap solution."

"There are competitors that have more expensive solutions than Check Point NGFW, such as Palo Alto. There are times when Check Point NGFW can have good offerings with a three-year license. The presence of Palo Alto has been heavily invested in marketing."

"The vendor has a very flexible licensing approach."

"The product provides value for pricing in terms of performance and technical features compared to other firewalls."

"Its cost is a little higher than other products."

"The price is on the higher side."

"They offered more features for a lower cost than competitors, and the licensing model was easy to understand."

More Check Point NGFW pricing and cost advice

"The pricing could be better."

"We chose Stormshield for its price, as the Azure firewall was too expensive."

"The SN200 series costs between $500 USD and $600 USD per year, whereas the SN700 series costs approximately $1,000 annually."

"The price of this solution and the price of support are ok."

"For mid-sized companies, they sell their appliances for good prices."

"We bought a three-year license, and we renew it whenever it expires. The price could be better. It's always very expensive."

"I think the price is good."

See which vendors are best for you

Use our free recommendation engine to learn which Unified Threat Management (UTM) solutions are best for your needs.

See recommendations

860,592 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Educational Organization

12%

Comms Service Provider

Manufacturing Company

Educational Organization

37%

Computer Software Company

10%

Financial Services Firm

Comms Service Provider

Computer Software Company

21%

Comms Service Provider

15%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

How does Check Point NGFW compare with Fortinet Fortigate?

I have experience on both from Disti and channel experience. Please find below my comments (nothing new as such). -Ch...

See all answers

Which would you recommend - Azure Firewall or Check Point NGFW?

Azure Firewall is easy to use and provides excellent support. Valuable features include integration into the overall ...

See all answers

What do you like most about Check Point NGFW?

Check Point NGFW provides essential security, featuring no-obligation access for secure connections, strong intrusion...

See all answers

What do you like most about Stormshield Network Security?

Ease of use is the best feature of the product.

See all answers

What is your experience regarding pricing and costs for Stormshield Network Security?

We pay for the quality we receive.

See all answers

What needs improvement with Stormshield Network Security?

The product must improve its pricing.

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 20% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 12% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 12% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 2% of the time

More Fortinet FortiGate Competitors

Palo Alto Networks NG Firewalls vs Check Point NGFW

Compared 13% of the time

Netgate pfSense vs Check Point NGFW

Compared 8% of the time

Sophos XG vs Check Point NGFW

Compared 8% of the time

Cisco Secure Firewall vs Check Point NGFW

Compared 6% of the time

Sophos XGS vs Check Point NGFW

Compared 6% of the time

More Check Point NGFW Competitors

Netgate pfSense vs Stormshield Network Security

Compared 14% of the time

OPNsense vs Stormshield Network Security

Compared 7% of the time

WatchGuard Firebox vs Stormshield Network Security

Compared 7% of the time

Palo Alto Networks NG Firewalls vs Stormshield Network Security

Compared 6% of the time

SonicWall NSv vs Stormshield Network Security

Compared 3% of the time

More Stormshield Network Security Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

June 2025

Download Fortinet FortiGate product report

Buyer's Guide

Check Point NGFW

June 2025

Download Check Point NGFW product report

Buyer's Guide

Stormshield Network Security

June 2025

Download Stormshield Network Security product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

Check Point NG Firewall, Check Point Next Generation Firewall

NETASQ Firewalls

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Check Point NGFW provides comprehensive firewall protection, managing VPNs, and securing network perimeters with advanced threat prevention techniques. It's widely used to protect businesses, data centers, and ensure secure traffic management.

Check Point NGFW offers robust security for companies, delivering security features like threat prevention, URL filtering, and intrusion prevention across both layer 3 and layer 7. It supports remote access, web filtering, application control, and safeguards against malware, botnets, and zero-day attacks. With its intuitive management console, deep packet inspection, centralized management capabilities, and sophisticated threat detection, Check Point NGFW enhances network security and productivity. The system integrates seamlessly with other technologies and provides real-time monitoring, detailed reporting, and automated policy management. Additionally, its setup is straightforward, it scales well, and offers comprehensive logging.

What are the key features?

VPN capabilities: Ensures secure remote access and encrypted communications.
Intuitive management console: Simplifies administration with an easy-to-use interface.
Application control: Provides extensive control over applications running on the network.
Deep packet inspection: Examines data packets in detail to detect and prevent threats.
Intrusion prevention system: Protects against unauthorized access and attacks.
Centralized management: Manages all security policies and devices from one location.
Automated policy management: Reduces administrative tasks through automation.
Advanced threat detection: Identifies sophisticated threats in real-time.
Real-time monitoring: Continuously monitors network traffic and security events.
Easy setup and scalability: Simplifies deployment and scales with business needs.

What are the benefits?

Enhanced security: Provides comprehensive protection against a range of cyber threats.
Increased productivity: Simplifies security management, allowing IT teams to focus on other tasks.
Improved visibility: Detailed reporting and monitoring provide insights into network activity.
Reduced risk: Automated threat detection and policy management mitigate potential risks.
Cost efficiency: Consolidates multiple security functions, reducing the need for additional solutions.

Check Point NGFW is implemented in industries like finance, healthcare, and retail, where protecting sensitive data and ensuring compliance are critical. Its advanced security features and ease of management make it suitable for large enterprises and data centers, ensuring reliable and secure network operations.

Check Point Software Technologies

NETASQ's integrated intrusion prevention engine uses protocol conformity analysis, application filtering and antivirus analysis to inspect authorized traffic flows and strengthen application security. NETASQ enables you to establish and configure user-based security policies, giving you greater control over which network resources each user is authorized to access.

Stormshield

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Control Southern, Optimal Media

ACESUR group, Ministry of Education Oman, Anios Laboratories, Zain, DLM Location

Buyer's Guide

Check Point NGFW vs. Stormshield Network Security

May 2025

Free Report: Check Point NGFW vs. Stormshield Network Security

Find out what your peers are saying about Check Point NGFW vs. Stormshield Network Security and other solutions. Updated: May 2025.

DOWNLOAD NOW

860,592 professionals have used our research since 2012.

See our Check Point NGFW vs. Stormshield Network Security report.

See our list of best Unified Threat Management (UTM) vendors and best Firewalls vendors.

We monitor all Unified Threat Management (UTM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.