No more typing reviews! Try our Samantha, our new voice AI agent.

Huawei NGFW vs Stormshield Network Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 7, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Unified Threat Management (UTM)
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
592
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st)
Huawei NGFW
Ranking in Unified Threat Management (UTM)
13th
Average Rating
7.2
Reviews Sentiment
7.2
Number of Reviews
22
Ranking in other categories
Firewalls (37th)
Stormshield Network Security
Ranking in Unified Threat Management (UTM)
14th
Average Rating
7.8
Reviews Sentiment
5.4
Number of Reviews
18
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2026, in the Unified Threat Management (UTM) category, the mindshare of Fortinet FortiGate is 24.9%, down from 36.6% compared to the previous year. The mindshare of Huawei NGFW is 3.1%, down from 3.2% compared to the previous year. The mindshare of Stormshield Network Security is 3.7%, up from 3.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Unified Threat Management (UTM) Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate24.9%
Huawei NGFW3.1%
Stormshield Network Security3.7%
Other68.3%
Unified Threat Management (UTM)
 

Featured Reviews

Mageshwaran S - PeerSpot reviewer
Solution Architect at airtel
Enables customers to manage security effortlessly with intuitive features and easy integration
In terms of improvements for Fortinet FortiGate, they could offer evaluation licenses, as compared to Meraki, which provides a 90-day evaluation. In Fortinet FortiGate, they do not provide standard evaluation licenses; instead, we need to request them from the OEM through the account manager for POCs. If we want to conduct a demo, we need to work with real hardware. In comparison to Cisco, we have DCloud, which helps with providing demos to customers, but in Meraki, I need to reach out to them, book a lab, and they need to provide all the hardware. I need remote access and L3 engineers to program it; only then can I offer a real-time demo to the customer.
VZ
Senior Manager Technology at CNS Engineering
GUI application allows for easy monitoring and analysis of potential intrusions but needs improvement in threat prevention signatures
Based on the threat prevention signatures, they need updates. They should add some machine learning features and Machine learning detection. In future releases, I would like to see improvements in CDR technology. Forcepoint is pitching CDR technology, which extends sandboxing. Configuring data on the console needs enhancement. Huawei also need to improve spam techniques and add a web application firewall. Currently, Huawei does not have a built-in web application firewall (WAF) like Fortinet does. Tools like SIEM, SOAR, and Tenable can be integrated, but they require additional setup and should be integrated via API. For external threat detection, using the TAXII or STIX protocol, would be an improvement over the current features.
Zsolt Jónás - PeerSpot reviewer
System Administrator at NaxoNet
Advanced GUI and layered security have supported compliance and simplified intrusion prevention
I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability solution would be beneficial because currently, if you build a high availability solution with Stormshield Network Security, you have a main device and another one is a backup device. The HA can switch between them, but it would be good to have a master-master solution, not just a master-slave one. I could set a URL that I can call to update the DNS record. Currently, Stormshield Network Security devices support DynDNS, which is not a usual feature request from a server environment. I have my own solution instead of DynDNS because I don't prefer it, so I have my own service for that. However, the GUI does not support using a custom service instead of DynDNS. I had to solve it in the console on Stormshield Network Security device, but it would be much better if it was reachable on the GUI. I had to figure out a trick for the IPsec configuration. In the IPsec config, we have to provide the remote side's IP address, but it's always changing. This means that an office, for example a company that has an office but without a fixed IP address, cannot be used with IPsec VPN.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It offers web filtering capabilities at a more affordable price compared to other solutions like PSMs or NETGEAR."
"I've never had a problem with Fortinet FortiGate support, so I'd rate it ten out of ten."
"Its stability is the most valuable."
"The configuration possibilities that Fortinet FortiGate provides are extensive, and the task configuration activity is fast and efficient for me."
"You can create multiple Virtual Domains (VDOMs), which are treated as separate firewall instances."
"The feature that I find most valuable is its protection of the websites."
"The most valuable feature of Fortinet FortiGate is load balancing, as it can provide central management and VPN access and has enhanced our security environment, with a management UI that is more user-friendly than Cisco's solution."
"The most valuable features of Fortinet FortiGate that I found are its next-generation firewall capabilities with stateful inspection and antivirus, along with features such as a reverse proxy that are missed by some other firewall products such as Palo Alto or Check Point."
"The UI is quite good."
"The dashboard is user-friendly and very easy to use."
"Huawei support is excellent. I rate it 10 out of 10."
"Banks in Pakistan are actively migrating to Huawei NGFW."
"The user interface is very, very good, there are lots of great features within the product, and overall, it seems to be a pretty good firewall."
"The mapping features and traffic logging are good."
"The operational management dashboard is easy to use for the customers."
"It enables us to configure different policies and restrictions for specific users within the same subnet."
"The StormShield solution has enabled us to fully implement best practices from Microsoft in the cloud : the hub and spoke architecture."
"Easily manageable in a variety of environments."
"I can see what traffic is going on. I can easily block any programs from attacks."
"The most valuable features are the IPS, the firewall function, and the price."
"The performance of this solution is good."
"I like how you can configure the rules. There is the task for the rules and a task for the network configuration. It also provides SMD filtering, and it can be integrated with the active directory for the users, their mission, and the VPN configuration. We are here in Sudan, and Stormshield didn't work in Sudan for more than a decade. Stormshield is a very strong firewall and very easy to configure and maintain. I am just working with the firewall solution, and we don't have any other solutions like endpoint solutions or something like that."
"The tool's most valuable feature is its dashboard, which helps you manage different aspects of a single page. The intrusion detection system helps our organization by automatically detecting and responding to potential threats. It operates similarly to Darktrace, which detects and responds automatically based on the security rules you apply. Initially, you configure everything to block, and then you can whitelist specific items as needed."
"Stormshield is a very strong firewall and very easy to configure and maintain."
 

Cons

"MTBF: Hardware failure is more common when compared to SonicWall or Cisco ASA."
"The reporting in Fortinet FortiGate could improve. Customers are having to purchase additional reporting components. When I have used the Sophos solution it is a complete solution, in Fortinet FortiGate you have to use additional tools to have the features needed."
"Fortinet FortiGate has started implementing AI, however, it hasn't reached full maturity."
"Scalability for Fortinet FortiGate needs to be improved. SD-WAN security for this solution also needs some improvement."
"Its performance can be better. We have had performance issues in the past, but we sometimes tend to find that it is more related to what we do in our network than anything else. It is quite a good product, and there isn't much to improve."
"The biggest problem we have is the way they handle virtual IPs. It's not handled well at all and even pfSense handles that better."
"Stability and technical support are the two major issues I have found with Fortinet."
"Regarding stability, I have experienced performance issues with Fortinet FortiGate. Sometimes it does not work correctly in certain situations, such as DNS or URL categories, where it might block incorrectly."
"We no longer use Huawei as our firewall."
"The firewall needs to be more configurable."
"The solution requires a more interactive dashboard. That would make it easier than playing with configurations the way we have to now."
"The solution is scalable but it is difficult because you need to purchase new systems, it is not just one click."
"The user interface could be more user-friendly."
"The solution isn't cheap. It's market price."
"The tool does not have web functionality. It needs to also have high end firewalls."
"We cannot recommend Huawei NGFW to others. For ourselves, we've already made a decision not to buy this product in the future."
"The product must improve its pricing."
"An application firewall like other next generation firewalls have."
"Improvement is also needed in terms of the technical support of the manufacturer, they're not very responsive when it comes to technical support."
"The main area of this product that has room for improvement is pricing. Stormshield Network Security is quite expensive."
"This is not a next-generation firewall."
"The technical support for this solution in Poland is not good."
"Being more cost effective. I went with a pair of Watchguard M300 recently when buying a new firewall cluster for our own use because it was way cheaper than NetASQ/Stormshield N700 while being faster, and it offers true multi-master firewall clustering if needed."
"It could be better if it were more user-friendly for us as we dont use it very often even if we never had problems to modify setup when needed."
 

Pricing and Cost Advice

"While Fortinet FortiGate has a higher price point compared to Sophos XG, its user-friendly interface justifies the cost."
"If the customer is looking for SD-WAN, it comes free with FortiGate."
"The pricing is based on a licensing model for each IPS in your environment."
"The product is expensive compared to one of its competitors."
"If we have an older version, the support costs get quite high."
"The price of FortiGate support is too expensive."
"Fortinet Secure SD-WAN delivered the lowest total cost of ownership (TCO) per Mbps among all other vendors."
"The price is relatively expensive compared to other solutions which are providing similar features."
"I believe that we are entitled to a one-year extension on our licensing."
"Licensing fees are billed on an annual basis."
"The solution isn't cheap. It's market price."
"The pricing is cheap."
"The solution is inexpensive."
"When you compare the price with other products, it's quite cost-effective. But the problem is always after, let's say, two years or three years later because they are not able to provide updates or patches very quickly."
"Huawei is priced lower than most competitors."
"Huawei is 30% cheaper than Arista."
"The price of this solution and the price of support are ok."
"We chose Stormshield for its price, as the Azure firewall was too expensive."
"The SN200 series costs between $500 USD and $600 USD per year, whereas the SN700 series costs approximately $1,000 annually."
"For mid-sized companies, they sell their appliances for good prices."
"I think the price is good."
"We bought a three-year license, and we renew it whenever it expires. The price could be better. It's always very expensive."
"The pricing could be better."
report
Use our free recommendation engine to learn which Unified Threat Management (UTM) solutions are best for your needs.
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
10%
Computer Software Company
10%
Manufacturing Company
9%
Financial Services Firm
7%
Construction Company
13%
Financial Services Firm
12%
Manufacturing Company
11%
Computer Software Company
8%
Comms Service Provider
16%
Manufacturing Company
12%
Computer Software Company
10%
Construction Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business370
Midsize Enterprise138
Large Enterprise195
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise6
Large Enterprise7
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise5
Large Enterprise2
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Huawei NGFW?
The pricing is quite cheap compared to other NGFWs like Palo Alto or Cisco.
What needs improvement with Huawei NGFW?
Huawei should improve their threat intelligence. They need to have a more diversified platform and continuously updat...
What is your primary use case for Huawei NGFW?
I am working as a solution architect in my organization. Whenever we design a total network infrastructure, for ensur...
What needs improvement with Stormshield Network Security?
I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability sol...
What is your primary use case for Stormshield Network Security?
I already use Stormshield Network Security, and I am now looking for a new solution. I am already working with Storms...
What advice do you have for others considering Stormshield Network Security?
The pricing is increasing, and I would say it is a bit expensive. Palo Alto and others are much more expensive, but S...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Huawei USG Firewalls, USG9500 Series, USG6600 Series, USG6300 Series
NETASQ Firewalls
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
KMITL, Peking University
ACESUR group, Ministry of Education Oman, Anios Laboratories, Zain, DLM Location
Find out what your peers are saying about Huawei NGFW vs. Stormshield Network Security and other solutions. Updated: June 2026.
900,644 professionals have used our research since 2012.