Fortinet FortiGate-VM vs Stormshield Network Security comparison

Fortinet FortiGate-VM vs. Stormshield Network Security

Download the complete report

Helped 884,873 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Karel Ondracek

Network Administrator at THK Co Ltd

Faced hardware limitations and setup challenges but have improved network protection over time

I spent much time finding exact firmware on Aruba which was working with these guns, but it is not optimal because it is not the latest version, so there could be potential security problems. We decided to replace those access points with another one. I personally have trouble because I don't know the exact life cycle of Fortinet FortiGate-VM boxes. I don't know if the life of boxes is five years or something else; we moved from our previous company, which sold us to other companies. Before 10 years, we had a special department that took care of core networks, including firewalls. After that, this responsibility fell to me and my colleague. It is not easy to set up these Fortinet FortiGate-VM boxes properly because we didn't have previous experience with this kind of solution. At first, we set up only a few rules that were not secure enough, and over a couple of years, we improved the settings and security of these Fortinet FortiGate-VM boxes. Currently, I have one Fortinet FortiGate-VM that needs to be replaced next year, and this box is not so powerful, so I need to redirect some traffic to another Fortinet FortiGate-VM. It is stable, but because the CPU processor of this box is not powerful, I need to redirect some traffic to another box. In the future, I need to choose a higher-level box to prevent potential troubles with the power of this box.

Read full review

Zsolt Jónás

System Administrator at NaxoNet

Advanced GUI and layered security have supported compliance and simplified intrusion prevention

I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability solution would be beneficial because currently, if you build a high availability solution with Stormshield Network Security, you have a main device and another one is a backup device. The HA can switch between them, but it would be good to have a master-master solution, not just a master-slave one. I could set a URL that I can call to update the DNS record. Currently, Stormshield Network Security devices support DynDNS, which is not a usual feature request from a server environment. I have my own solution instead of DynDNS because I don't prefer it, so I have my own service for that. However, the GUI does not support using a custom service instead of DynDNS. I had to solve it in the console on Stormshield Network Security device, but it would be much better if it was reachable on the GUI. I had to figure out a trick for the IPsec configuration. In the IPsec config, we have to provide the remote side's IP address, but it's always changing. This means that an office, for example a company that has an office but without a fixed IP address, cannot be used with IPsec VPN.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Their web interface to manage it is excellent, even compared with other providers."

"The most valuable features of the solution are SD-WAN, filtering testing applications, web filtering, and the new VPN."

"We purchased Fortinet because of the pricing, its functionality, because it met our requirements, and the total cost of ownership over five years was quite reasonable. In the market, Fortinet is rated quite well."

"The solution has improved my organization significantly, with impactful capabilities such as sandboxing and cloud solutions, such as XDR, MDR, and EDR."

"The scalability is very good."

"Its administrative panel is very intuitive and simple. It is simpler than the other solutions that we had. As an administrator, we are always looking for the easiest solution to manage network policies. We are able to filter everything on our network and also use the VPN feature, which is important these days when people are working remotely during COVID."

"The usability of the solution is its best feature."

"The usage in general is pretty good."

More Fortinet FortiGate pros

"They are very affordable compared to Palo Alto and other vendors, offering a great solution for networking and SD-WAN with extremely good protection."

"The solution integrates well with other Fortinet products."

"I observed a fifty to sixty percent reduction in operational costs after migrating to FortiGate VM."

"The most valuable features of Fortinet FortiGate-VM are the ease of use, IPS system, application filter, web filtering, and email security. Additionally, there is a migration tool that other vendors do not provide. We only need to upload the configuration file to the tool, and it converts everything, except the passwords, and gives us the new configuration, which we can directly upload on the firewall. This migration process takes a maximum of 15 minutes."

"GitDM, like FortiGate VM, provides similar features to FortiGate appliances or cloud solutions. However, FortiGate VM is more suitable for heavy traffic and inspection compared to GitDM. Unfortunately, FortiGate VM lacks a dedicated SPU for inspection, and all features rely on CPU and RAM."

"Overall, it's an excellent solution."

"Primarily, the VPN solution is most valuable. It allows you to have more flexibility in terms of what is there on the end-user device, and what is not there. You can check and make sure that they're current. It has more flexibility than just a straight VPN solution. It works really well. It has the features that 99% of people need."

"It's a relatively simple product that is easy to use. It's not overly complex."

More Fortinet FortiGate-VM pros

"Customer service is very good, because of their presales support helping me with initial setup I decided to go with NetASQ in the first place, and support after the sale has been equally good as well."

"I like how you can configure the rules. There is the task for the rules and a task for the network configuration. It also provides SMD filtering, and it can be integrated with the active directory for the users, their mission, and the VPN configuration. We are here in Sudan, and Stormshield didn't work in Sudan for more than a decade. Stormshield is a very strong firewall and very easy to configure and maintain. I am just working with the firewall solution, and we don't have any other solutions like endpoint solutions or something like that."

"I can see what traffic is going on. I can easily block any programs from attacks."

"It's an easy, straightforward management platform to use."

"Fortinet, Dell SonicWall and Check Point because these products offer a wide range of features that are not available with Netasq."

"The scalability of the solution is good."

"A very robust product."

"The tool's most valuable feature is its dashboard, which helps you manage different aspects of a single page. The intrusion detection system helps our organization by automatically detecting and responding to potential threats. It operates similarly to Darktrace, which detects and responds automatically based on the security rules you apply. Initially, you configure everything to block, and then you can whitelist specific items as needed."

More Stormshield Network Security pros

Cons

"Whitelisting could be better."

"In the past six to seven years with the Fortinet FortiGate, we've had two major downtimes, both caused by firmware upgrades."

"We had a minor problem where there was a major system upgrade on the hardware platfrom and the Mac client was not available as soon as it might have been. The PC client was available immediately, but we had to wait a month or so, before there was a mac client. I was slightly irritated that it was not ready on time, but it was eventually resolved."

"Small models (up to FG-90) are build on SoC (System on a Chip), so they need to be mounted in places with enough airflow and right temperature, otherwise they could hang, slow down traffic processing, but more often you just can't log in to the device's web-interface (reboot won't help you until it cools down)."

"The pricing could be a bit better, especially when you consider how they have the most basic offering priced."

"I have to say that the initial setup was complex. The deployment took a few days to get set up. Initially, we were using an IPVanish. We switched to this tool since we thought it would be easier. But it turns out it wasn't easier to set up and run."

"Updating the software during issues can be quite convoluted, especially if there is an unexpected attack, such as on a Saturday."

"FortiGate can only retain logs for 24 hours or 7 days. I'm not sure if it holds them for a longer period, such as for a month."

More Fortinet FortiGate cons

"Compatibility and integration with other products or vendors such as Cisco SD-WAN products need improvement."

"Integrating multi-factor authentication with FortiGate-VM can be challenging. While multi-factor authentication is important, not all customers have it enabled. Integration with third-party solutions like ManageEngine or Duo can be complex and sometimes problematic during testing."

"In the first two releases of FortiOS 5.6, we had some trouble with the SSL VPN service."

"The biggest area for improvement is storage configuration. It could be smoother."

"In terms of room for improvement, logging could be improved."

"The product has issues with integration. I would like to see better integration in future releases of the product."

"The price model is not transparent by any means and should be made more clear. What's included in the packages is often not very obvious."

"The management tools should be more user-friendly."

More Fortinet FortiGate-VM cons

"An application firewall like other next generation firewalls have."

"The SD card could be more secure."

"Stormshield Network Security is quite expensive."

"Not all the fields are activated yet and we were informed that it will take at least one month."

"It could be better if it were more user-friendly. It's too complicated for us to use it. The price could be better as well."

"Improvement is needed in terms of the technical support of the manufacturer."

"I don’t recommend this product at all."

"This is not a next-generation firewall."

More Stormshield Network Security cons

Pricing and Cost Advice

"It is more affordable than Check Point and Palo Alto. Another thing is that all the features and the OS remain the same irrespective of the size of the device. Pricing-wise, Fortinet typically provides one-year support with the firewall appliance. There is also an option for three years which is how their licensing works."

"There is no challenge in Fortinet FortiGate pricing."

"It's an expensive solution"

"You need to pay a license for this solution. Our licensing is now done in our subsidiary."

"The pricing is flexible."

"I would rate the pricing a seven out of ten"

"Cost-wise, there is not much difference from Sophos, but feature-wise, we get more features."

"It is somewhat expensive compared to other solutions such as Sophos."

More Fortinet FortiGate pricing and cost advice

"The cost of this product is too high."

"The tool is neither expensive nor cheap, so it is okay."

"I find it quite reasonable."

"It is an expensive solution if you are migrating from an open source solution."

"If you are in a licensed solution, like Cisco or Palo Alto, it is cheaper. I do recommend using it with a license, because it is a security solution and it needs updates."

"It is on par with what you receive. It can be expensive upfront."

"I rate the product's pricing an eight out of ten."

"It would be nice to have the ability to extend FortiGuard subscriptions at a reasonable yearly cost versus a bulk three year pricing."

More Fortinet FortiGate-VM pricing and cost advice

"The pricing could be better."

"I think the price is good."

"We chose Stormshield for its price, as the Azure firewall was too expensive."

"We bought a three-year license, and we renew it whenever it expires. The price could be better. It's always very expensive."

"The price of this solution and the price of support are ok."

"For mid-sized companies, they sell their appliances for good prices."

"The SN200 series costs between $500 USD and $600 USD per year, whereas the SN700 series costs approximately $1,000 annually."

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

884,873 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

11%

Comms Service Provider

10%

Manufacturing Company

Financial Services Firm

Computer Software Company

12%

Comms Service Provider

Media Company

Marketing Services Firm

Comms Service Provider

17%

Computer Software Company

15%

Manufacturing Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	360
Midsize Enterprise	135
Large Enterprise	190

By reviewers
Company Size	Count
Small Business	72
Midsize Enterprise	34
Large Enterprise	39

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	5
Large Enterprise	2

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

Features comparison between Palo Alto and Fortinet firewalls

In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...

Which would you recommend - FortiGate VM or Azure Firewall?

Both of these solutions are excellent options that provide flexible scalability and solid security. Fortinet Fortigat...

What do you like most about Fortinet FortiGate-VM?

An enhanced security solution for any kind of alert that we have configured.

What advice do you have for others considering Stormshield Network Security?

The tool is like a firewall and works well. I don't have any issue with it. I rate it an eight out of ten.

Sophos Firewall vs Fortinet FortiGate

Comparisons

Compared 19% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 4% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 4% of the time

More Fortinet FortiGate Competitors

Azure Firewall vs Fortinet FortiGate-VM

Compared 19% of the time

Palo Alto Networks VM-Series vs Fortinet FortiGate-VM

Compared 10% of the time

Check Point CloudGuard Network Security vs Fortinet FortiGate-VM

Compared 6% of the time

Cisco Secure Firewall vs Fortinet FortiGate-VM

Compared 4% of the time

Sophos Firewall vs Fortinet FortiGate-VM

Compared 3% of the time

More Fortinet FortiGate-VM Competitors

Netgate pfSense vs Stormshield Network Security

Compared 10% of the time

Sophos Firewall vs Stormshield Network Security

Compared 7% of the time

WatchGuard Firebox vs Stormshield Network Security

Compared 7% of the time

OPNsense vs Stormshield Network Security

Compared 6% of the time

Palo Alto Networks PA-Series vs Stormshield Network Security

Compared 3% of the time

More Stormshield Network Security Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Fortinet FortiGate-VM

Download Fortinet FortiGate-VM product report

Stormshield Network Security

February 2026

Download Stormshield Network Security product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

FortiGate Virtual Appliance, FortiGate-VM

NETASQ Firewalls

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

FortiGate Virtual Appliances allow you to mitigate blind spots by implementing critical security controls within your virtual infrastructure. They also allow you to rapidly provision security infrastructure whenever and wherever it is needed. FortiGate virtual appliances feature all of the security and networking services common to traditional hardware-based FortiGate appliances. With the addition of virtual appliances from Fortinet, you can deploy a mix of hardware and virtual appliances, operating together and managed from a common centralized management platform.

Fortinet

NETASQ's integrated intrusion prevention engine uses protocol conformity analysis, application filtering and antivirus analysis to inspect authorized traffic flows and strengthen application security. NETASQ enables you to establish and configure user-based security policies, giving you greater control over which network resources each user is authorized to access.

Stormshield

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Security7 Networks, COOPENAE

ACESUR group, Ministry of Education Oman, Anios Laboratories, Zain, DLM Location

Fortinet FortiGate-VM vs. Stormshield Network Security