This solution has a big problem with web filtering and it needs to be improved.

There is a shortage of instructional videos and information on how to configure Stormshield. More YouTube How-To videos should be created.

• Better management of high availability features
• Application awareness to a higher degree
• VPN throughputs: Stromshield needs a higher throughput on some models. When you build VPN tunnels between firewalls, the throughputs on the VPN tunnels are pretty limited.
• They could improve their support.

The guidance for installations could be improved. But assistance finally was there and brilliantly filling in the few gaps.

The product must improve its pricing.

The filtering configuration could be better. We have some difficulties with the filtering configuration and the filter extension. It's not that easy. It's not that straightforward. In the next release, I would like to see a reporting system.

Stormshield doesn't have any tutorials on how to do the configuration and things like that. They just have documentation on the website. If you want to configure, for example, Cisco or Fortinet, you can find tutorials on YouTube. They show you how to configure the features, and so on. In Stormshield, there is nothing on social media or the internet on how to configure different things. The lack of documentation or the lack of material makes it difficult for others to adopt this solution. 

Many products are in front of the firewall and anybody can pick them up and the firewall will crash. It requires protection of the software and the SD card to avoid that kind of damage. I don't feel the SD card is particularly secure. 

It could be better if it were more user-friendly for us as we dont use it very often evn if we never had problems to modify setup when needed.

I'd like to see an improvement in the design of the product. Improvement is also needed in terms of the technical support of the manufacturer, they're not very responsive when it comes to technical support. They're also not very active on presales. Those are the main issues.

I'd like to see a strengthening of the ransomware component. The former version that we have has no ransomware on it. The reporting also needs improvement so that we can receive it in several languages. We leave some of the equipment with customers and monitor security for them. Each month we have to pull a report and most of the time, some of the languages are not available so it also requires translation. 

Since I have only been using this solution for a month, I haven't noticed anything yet that needs to improve. So far I can only say that the pricing could be better. But it is a trusted company belonging to Airbus, so it has a good reputation.

One thing, though, is that not all the fields are activated yet and we were informed that it will take at least one month. That's the only issue we have faced until now. So this issue should be fixed in the nearest future, because one cannot just buy a hundred appliances if you have to wait to activate all the features while you paid the full amount. So I don't know why that is the case, but the technical team said that it's the norm.

The technical support for this solution needs to be improved.

This is not a next-generation firewall.

The VPN portal needs to be improved, although it functions.

This solution does not have support for a sandbox.

Being more cost effective. I went with a pair of Watchguard M300 recently when buying a new firewall cluster for our own use because it was way cheaper than NetASQ/Stormshield N700 while being faster, and it offers true multi-master firewall clustering if needed.

The pricing could be improved. For me, in terms of the solution, what they currently have is enough. A more user-friendly interface would be helpful.

• Management interface (GUI)
• IPS engine
• Log management

The pricing of this solution needs to be decreased.

Authentication needs to be improved. If any user out of my domain wants to authenticate, he can't because the captive portal is not compatible with many browsers, like Google Chrome. This is a big problem that we are having with the captive portal. It needs to be improved.

Also, security policy needs to be more straightforward and easier.

In the next release, I would like to see the Security Policy simplified. It has a few features, like, Filter-NAT, URL filtering, and SSL filtering, but it would be nice if there were a way to combine the features in one tab or to create a setup wizard for this option.

I would like to create a Filer-NAT rule to decrypt or to block some sites with HTTPS and HTTP. I think that there is a way to combine them using a wizard to create the rule.

The main area of this product that has room for improvement is pricing. Stormshield Network Security is quite expensive.

For me, what they currently have with features is enough. Maybe because I use a quite old interface of this, the price and a more user-friendly interface could be improved.

An application firewall like other next generation firewalls have. We still haven't implemented Stormshield. I hope it'll be better for this part.