The solution's integration with the Windows environment could be better. The solution needs 
better integration with products, if it did, it would have the assumption of better security.

Release speed for newer versions. When a new OS is released, you've got to wait half year to get the new version that covers the new Windows OS. StormShield Endpoint is a product that works heavily on the Windows kernel, so every time there's a new Windows version StormShield take half year to push the new, compatible, product out.

It works only in a Windows environment.

• Only Windows based
• Dependence on MS updates and Service start-up priority
• No mobile device gradation/prevention using WPD (Windows Portable Device) policy
• Application control - only Whitelist/Blacklist (no templates and apps hashing)
• No custom rules available when tune HIDS, NAC (only predefined values)