No more typing reviews! Try our Samantha, our new voice AI agent.

Huawei NGFW vs Stormshield Network Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 7, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Unified Threat Management (UTM)
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
592
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st)
Huawei NGFW
Ranking in Unified Threat Management (UTM)
13th
Average Rating
7.2
Reviews Sentiment
7.2
Number of Reviews
22
Ranking in other categories
Firewalls (37th)
Stormshield Network Security
Ranking in Unified Threat Management (UTM)
14th
Average Rating
7.8
Reviews Sentiment
5.4
Number of Reviews
18
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2026, in the Unified Threat Management (UTM) category, the mindshare of Fortinet FortiGate is 24.9%, down from 36.6% compared to the previous year. The mindshare of Huawei NGFW is 3.1%, down from 3.2% compared to the previous year. The mindshare of Stormshield Network Security is 3.7%, up from 3.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Unified Threat Management (UTM) Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate24.9%
Huawei NGFW3.1%
Stormshield Network Security3.7%
Other68.3%
Unified Threat Management (UTM)
 

Featured Reviews

Mageshwaran S - PeerSpot reviewer
Solution Architect at airtel
Enables customers to manage security effortlessly with intuitive features and easy integration
In terms of improvements for Fortinet FortiGate, they could offer evaluation licenses, as compared to Meraki, which provides a 90-day evaluation. In Fortinet FortiGate, they do not provide standard evaluation licenses; instead, we need to request them from the OEM through the account manager for POCs. If we want to conduct a demo, we need to work with real hardware. In comparison to Cisco, we have DCloud, which helps with providing demos to customers, but in Meraki, I need to reach out to them, book a lab, and they need to provide all the hardware. I need remote access and L3 engineers to program it; only then can I offer a real-time demo to the customer.
VZ
Senior Manager Technology at CNS Engineering
GUI application allows for easy monitoring and analysis of potential intrusions but needs improvement in threat prevention signatures
Based on the threat prevention signatures, they need updates. They should add some machine learning features and Machine learning detection. In future releases, I would like to see improvements in CDR technology. Forcepoint is pitching CDR technology, which extends sandboxing. Configuring data on the console needs enhancement. Huawei also need to improve spam techniques and add a web application firewall. Currently, Huawei does not have a built-in web application firewall (WAF) like Fortinet does. Tools like SIEM, SOAR, and Tenable can be integrated, but they require additional setup and should be integrated via API. For external threat detection, using the TAXII or STIX protocol, would be an improvement over the current features.
Zsolt Jónás - PeerSpot reviewer
System Administrator at NaxoNet
Advanced GUI and layered security have supported compliance and simplified intrusion prevention
I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability solution would be beneficial because currently, if you build a high availability solution with Stormshield Network Security, you have a main device and another one is a backup device. The HA can switch between them, but it would be good to have a master-master solution, not just a master-slave one. I could set a URL that I can call to update the DNS record. Currently, Stormshield Network Security devices support DynDNS, which is not a usual feature request from a server environment. I have my own solution instead of DynDNS because I don't prefer it, so I have my own service for that. However, the GUI does not support using a custom service instead of DynDNS. I had to solve it in the console on Stormshield Network Security device, but it would be much better if it was reachable on the GUI. I had to figure out a trick for the IPsec configuration. In the IPsec config, we have to provide the remote side's IP address, but it's always changing. This means that an office, for example a company that has an office but without a fixed IP address, cannot be used with IPsec VPN.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I haven't configured or experienced any stability issues."
"This solution has a very friendly GUI and CLI as compared to other vendors."
"This is a quality product with ok support, and it is better than the competition we've tried."
"The combined license for the network, the next-generation firewall, and the integration with SD-WAN for all branches are what I consider to be the best features. It's effective for multi-branch customers."
"In my area, this solution is recommended for many projects because it's very easy to do the implementation and troubleshoot and is highly stable."
"The main value comes from the simplicity of the product in terms of configuring and managing."
"It has a valuable SD-WAN feature and provides good performance."
"FortiGate is the most effective solution for us and it's a cheaper option to Check Point or Palo Alto which we looked at."
"The mapping features and traffic logging are good."
"It enables us to configure different policies and restrictions for specific users within the same subnet."
"I like that the initial setup is straighforward. It's also a scalable solution."
"I had no difficulty using the Huawei NGFW."
"The solution's performance is good with IPSec."
"The security is good, and it's as effective as anything else on the market."
"We have found the initial setup to be straightforward."
"The stability is fine. I would rate the stability a nine out of ten."
"Stormshield is pretty robust, compared to other products like Fortinet, as you get more security with Stormshield and spend less money."
"Filters and URL filtering helped us to optimize our bandwidth."
"The scalability of the solution is good."
"The performance of this solution is good."
"This solution is quick and easy to configure."
"I can see what traffic is going on. I can easily block any programs from attacks."
"Stormshield Network Security is a very stable solution and the solution works perfectly so we never had to contact technical support."
"Easily manageable in a variety of environments."
 

Cons

"The price could be improved."
"With the standard support subscription, if the device goes down, the customer has to first ship the box, and then Fortinet sends the replacement. With the higher support, the customer has to ship the device after they have the replacement. It would be better for customers to get immediate replacements even with a standard subscription."
"Reporting is limited to providing an external appliance for improving the reporting capabilities of the FortiAnalyzer. It does not offer a central management and is also sold separably as an appliance."
"The solution must improve the support provided for customers around the globe, considering the time differences in different places."
"Monitoring and reporting could be better."
"When it's overloaded, it works slower and overheats."
"They sometimes hide some features and if you want to enable them, you have to go in the CLI, enable the feature and configure it through the CLI. Customers, typically, like everything to be done by the GUI."
"My only complaint about FortiGate is a lack of QinQ VLAN tunneling."
"The documentation needs to be improved. When they retire old models, they also retire the documentation. However, if you are still using an older model, you still need access to that documentation. And yet, they go ahead and removed it. It's gone. You are therefore stuck with a device with no documentation and technical support that isn't very helpful as they also remove support assistance as well."
"The solution does not have sandboxing features."
"The tool does not have web functionality. It needs to also have high end firewalls."
"Without a proper contract in place, you can't really access the technical support you need."
"I would like to see an antivirus solution included with the product."
"We no longer use Huawei as our firewall."
"The WAF capability in the Huawei Firewall is missing."
"One issue we've encountered with Huawei NGFW is that after using a firewall for two or three years, we need to replace it. The new firewalls often have more features and better memory or throughput. However, sometimes, they lack some features that the old ones had."
"The SD card could be more secure."
"I don’t recommend this product at all."
"This solution has a big problem with web filtering and it needs to be improved."
"The filtering configuration could be better. We have some difficulties with the filtering configuration and the filter extension."
"The filtering configuration could be better. We have some difficulties with the filtering configuration and the filter extension. It's not that easy. It's not that straightforward. In the next release, I would like to see a reporting system. Stormshield doesn't have any tutorials on how to do the configuration and things like that. They just have documentation on the website. If you want to configure, for example, Cisco or Fortinet, you can find tutorials on YouTube. They show you how to configure the features, and so on. In Stormshield, there is nothing on social media or the internet on how to configure different things. The lack of documentation or the lack of material makes it difficult for others to adopt this solution."
"The product must improve its pricing."
"Being more cost effective. I went with a pair of Watchguard M300 recently when buying a new firewall cluster for our own use because it was way cheaper than NetASQ/Stormshield N700 while being faster, and it offers true multi-master firewall clustering if needed."
"The stability is not that good based on my experience. We have a lot of disruptions when it comes to Stormshield."
 

Pricing and Cost Advice

"Pricing for this product is comparatively lower than other products. It's an affordable solution, but when expanding the number of users, they'll ask you to replace the model, so that's an added cost."
"Some of our customers are using Sophos and SonicWall due to price concerns, as they can't manage the pricing of Fortinet FortiGate."
"The Indian market is different than the European and American markets. When you compare they need to be a bit more aggressive on pricing."
"It scales well if you know what to buy from a physical box standpoint. They seem to offer something for every level."
"The pricing is better compared to other solutions like Check Point, Arista, or Cisco."
"Each feature costs money, so it is important to study your needs."
"FortiGate SWG is a cost-effective solution well-suited for organisations of all sizes."
"The price is okay, so far so good."
"The pricing is cheap."
"The solution isn't cheap. It's market price."
"Huawei is priced lower than most competitors."
"I believe that we are entitled to a one-year extension on our licensing."
"Licensing fees are billed on an annual basis."
"Huawei is 30% cheaper than Arista."
"The price of the license of this solution is high."
"The solution is inexpensive."
"The pricing could be better."
"I think the price is good."
"For mid-sized companies, they sell their appliances for good prices."
"We bought a three-year license, and we renew it whenever it expires. The price could be better. It's always very expensive."
"We chose Stormshield for its price, as the Azure firewall was too expensive."
"The SN200 series costs between $500 USD and $600 USD per year, whereas the SN700 series costs approximately $1,000 annually."
"The price of this solution and the price of support are ok."
report
Use our free recommendation engine to learn which Unified Threat Management (UTM) solutions are best for your needs.
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
10%
Computer Software Company
10%
Manufacturing Company
9%
Financial Services Firm
7%
Construction Company
13%
Financial Services Firm
12%
Manufacturing Company
11%
Computer Software Company
8%
Comms Service Provider
16%
Manufacturing Company
12%
Computer Software Company
10%
Construction Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business370
Midsize Enterprise138
Large Enterprise195
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise6
Large Enterprise7
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise5
Large Enterprise2
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Huawei NGFW?
The pricing is quite cheap compared to other NGFWs like Palo Alto or Cisco.
What needs improvement with Huawei NGFW?
Huawei should improve their threat intelligence. They need to have a more diversified platform and continuously updat...
What is your primary use case for Huawei NGFW?
I am working as a solution architect in my organization. Whenever we design a total network infrastructure, for ensur...
What needs improvement with Stormshield Network Security?
I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability sol...
What is your primary use case for Stormshield Network Security?
I already use Stormshield Network Security, and I am now looking for a new solution. I am already working with Storms...
What advice do you have for others considering Stormshield Network Security?
The pricing is increasing, and I would say it is a bit expensive. Palo Alto and others are much more expensive, but S...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Huawei USG Firewalls, USG9500 Series, USG6600 Series, USG6300 Series
NETASQ Firewalls
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
KMITL, Peking University
ACESUR group, Ministry of Education Oman, Anios Laboratories, Zain, DLM Location
Find out what your peers are saying about Huawei NGFW vs. Stormshield Network Security and other solutions. Updated: June 2026.
900,644 professionals have used our research since 2012.