Stormshield Network Security
The European choice for cybersecurity
The European Standard for Cyber-Serenity and Trusted Security
Empower your organization with Stormshield, an Airbus subsidiary providing sovereign, European-made security. Our range scales from the compact SN-XS-Series to the ultra-high-speed SN-XL-Series, offering the market’s best price-per-Gigabit. Secure everything from branch offices to data centers with a single, intuitive management interface.
Stormshield holds prestigious Common Criteria EAL4+ and ANSSI qualifications for sensitive environments. The 5.x firmware adds Zero Trust Network Access, secure SD-WAN, and real-time vulnerability management. By providing auditable source code, we eliminate backdoor concerns, making us the premier choice for military and government clients.
Beyond IT, Stormshield dominates the industrial landscape with the SNi-Series and ultra-rugged SNxr1200. These offer IP67 protection and deep packet inspection for industrial protocols. Additionally, Elastic Virtual Appliances provide dynamic, scalable security for public and private cloud infrastructures with uncompromising reliability.
Why Choose Stormshield SNS Firewalls
Technologies certified and qualified to the highest European level
With certifications and qualifications to the highest European standards, the Stormshield firewall range guarantees that our products will be robust and reliable under all circumstances. Stormshield firewall firmware is qualified at Standard level and certified to CC EAL4+ level by ANSSI in France, as well as “Producto CCN Aprobado” and “Producto CCN Cualificado” by CCN in Spain.
Unrivalled performance
at the best cost
No degradation of performance when
maximum security (IPS) is enabled. Stormshield
offers protection at an unbeatable price per
Gigabit per second.
Unified firmware
hardened against cyberattacks
All Stormshield Network Security firewalls are based on the same firmware; a single solution to manage the shared security policy for your IT/OT convergence. In addition, thanks to the general hardening of the on-board firmware, you’ll benefit from increased resistance against cyberattacks that attempt to exploit the firewall itself
Stress-Free Upgrades and Maintenance
The system architecture is designed for high reliability, utilizing a dual-partition approach to prevent system failure during the firmware update process.
Dual Partitions (Main and Backup): Think of this like having two separate hard drives in the firewall. When you upgrade, the new software is installed on the Backup Partition. If something goes wrong or the new version is unstable, you can simply reboot back into the Main Partition with your old settings intact.
Partial Configuration Imports: Instead of overwriting your entire setup, you can choose to import only specific parts of a configuration file—such as just the VPN settings or just the Network Objects. This is useful for migrating settings between different devices.
Encrypted and Password-Protected Backups: When you export your configuration, the file is automatically encrypted. This ensures that even if a backup file is stolen, the sensitive passwords and network maps inside it cannot be read.
Core Security and Threat Protection
Intrusion Prevention System: Unlike many firewalls that only detect threats, these appliances use a real-time inspection engine to proactively block malicious traffic and attacks.
Deep Packet Inspection: The system analyzes the data within network packets to identify and block hidden threats or unauthorized protocols, including specialized industrial protocols.
Vulnerability Detection: It identifies outdated or vulnerable applications running on your network without requiring additional software on those devices.
Advanced Malware Protection: This includes sandboxing, which runs suspicious files in a safe, isolated environment to check for harmful behavior before they reach the network.
Management and Rule Validation
Stormshield has introduced several tools to prevent administrative errors that could lead to network outages or security holes.
Rule Validation: The system automatically checks your security rules for logic errors. It will warn you if a rule is redundant (e.g., a rule further down the list that will never be reached) or if it conflicts with another rule.
Multiple Policy Selection: This is a “sandbox” for your configuration. You can create and edit a completely separate set of firewall and Network Address Translation rules without affecting the live traffic. You can then swap between these policies or test them before they become active.
Built-in Ticket Management: For teams with multiple administrators, this feature allows you to link configuration changes to specific “tickets” or “change requests.” This creates an audit trail, showing exactly why a specific rule was added or modified.
Scalability and Licensing
Stormshield offers a unique “Evolutionary” approach to hardware.
Software-Based Model Upgrades: Some devices are physically identical but “throttled” by software. For example, you can buy an entry-level model and, as your company grows, pay for a license key that unlocks the performance and features of the next model up (e.g., converting an SN-S-220 to an SN-S-320) without physically swapping the hardware.
Storage Features
You can use your own microSD card with the SN-XS-Series and SN-S-Series you are not tied to purchasing the vendors only MicroSD Cards therefore saving unnecessary additional costs
SN-S-Series
MicroSD Card
Supports cards up to 2 Terabytes for local log storage.
SN-M, L, & XL
Solid State Drive
Equipped with 240 Gigabytes to 480 Gigabytes of industrial-grade storage.
Why this matters: Having high-capacity local storage (especially the Solid State Drives) allows the firewall to store months of detailed logs locally without needing an external server, which speeds up troubleshooting and forensics.
Stormshield Network Security SN-XS-SERIES & SN-S-Series
SN-XS-Series: Compact Security
The SN-XS-Series is the entry-point for small branch offices, offering a silent and versatile security solution.
The SN-XS-Series, specifically the SN170, is the ideal entry-level solution for small branch offices and very small enterprises. It delivers an impressive firewall throughput of 8.5 Gbps and 1.8 Gbps for IPsec VPN. This series is designed for quiet work environments, featuring a fanless design for completely silent operation. Despite its compact size, it offers high-speed connectivity with four copper interfaces supporting up to 2.5 Gbps, ensuring professional-grade security without the footprint of traditional rack hardware.
SN-S-Series: Small Business Unified Protection
The SN-S-Series is for small branch to medium size offices, the SN-S-Series platform enables you to anticipate
your performance needs with confidence.
The SN-S-Series, comprising the SN220 and SN320, provides unified security tailored for small businesses and remote sites. These models offer firewall throughput up to 11.9 Gbps and IPsec VPN speeds of 4.8 Gbps. Equipped with eight copper ports and one fiber interface, they ensure versatile connectivity. This series focuses on complete protection, integrating intrusion prevention, application control, antivirus, and web filtering into a single, easily managed platform that scales via simple license updates.
SN-XS-SERIES-170
| Deployment | 10 to 25 Users |
| Interfaces | 4 X 2.5GbE |
| Firewall Throughput | 8.5 Gbps |
| Threat Throughput | 2.4 Gbps |
| TLS/SSL Throughput | 400 Mbps |
| Connections per second | 25,000 |
| Included/Max SSLVPN Licenses | 200 |
SN-S-SERIES-220
| Deployment | 25 to 50 Users |
| Interfaces | 8 X 2.5GbE 1X 1Gbps SFP |
| Firewall Throughput | 10 Gbps |
| Threat Throughput | 4 Gbps |
| TLS/SSL Throughput | 740 Mbps |
| Connections per second | 39,000 |
| Included/Max SSLVPN Licenses | 300 |
SN-S-SERIES-320
| Deployment | 50 to 100 Users |
| Interfaces | 8 X 2.5GbE 1X 1Gbps SFP |
| Firewall Throughput | 11.9 Gbps |
| Threat Throughput | 5.7 Gbps |
| TLS/SSL Throughput | 1.1 Gbps |
| Connections per second | 60,000 |
| Included/Max SSLVPN Licenses | 400 |
Not sure which is the correct device for you deployment? Call us for a tailored Quote 01782 957410 or email us at sales@mspsupport.co.uk
Stormshield Network Security SN-M-Series
SN-M-Series: Modular Growth for Medium Businesses
The SN-M-Series (SN520, SN720, SN920, and SN1100) emphasizes modularity and performance for mid-sized organizations. The top-tier SN1100 pushes performance further with up to 25 Gbps firewall throughput and 9.9 Gbps IPsec VPN throughput. A key feature across this series is the network extension slot, allowing organizations to add copper or fiber interfaces as their needs evolve. With redundant power supplies and high availability features, this series ensures that growing infrastructures remain secure and operational around the clock.
SN-M-Series-520
| Deployment | 100 up to 250 Users |
| Interfaces | 8×2.5GbE, 2x1G SFP+ |
| Firewall Throughput | 18.9 Gbps |
| Threat Throughput | 10.6 Gbps |
| TLS/SSL Throughput | 1.5 Gbps |
| New Connections per second | 90,000 |
| Concurrent connections | 600,000 |
| Included/Max SSLVPN Licenses | 500 |
SN-M-Series-720
| Deployment | 200 up to 300 Users |
| Interfaces | 8×2.5GbE, 2x10G SFP+ |
| Firewall Throughput | 38.6 Gbps |
| Threat Throughput | 10.9 Gbps |
| TLS/SSL Throughput | 2.3 Gbps |
| New Connections per second | 120,000 |
| Concurrent connections | 1,000,000 |
| Included/Max SSLVPN Licenses | 700 |
SN-M-Series-920
| Deployment | 300 up to 500 Users |
| Interfaces | 8×2.5GbE, 2x10G SFP+ |
| Firewall Throughput | 46.2 Gbps |
| Threat Throughput | 21.1 Gbps |
| TLS/SSL Throughput | 3.4 Gbps |
| New Connections per second | 190,000 |
| Concurrent connections | 1,500,000 |
| Included/Max SSLVPN Licenses | 1,000 |
SN-Series-1100
| Deployment | 700 up to 1,000 Users |
| Interfaces | 8x1GbE, 2x10G SFP+ |
| Firewall Throughput | 59.4 Gbps |
| Threat Throughput | 30.7 Gbps |
| TLS/SSL Throughput | 6.7 Gbps |
| New Connections per second | 250,000 |
| Concurrent connections | 1,800,000 |
| Included/Max SSLVPN Licenses | 1,600 |
Not sure which is the correct device for you deployment? Call us for a tailored Quote 01782 957410 or email us at sales@mspsupport.co.uk
Stormshield Network Security SN-L-Series
SN-L-Series: High-Density Enterprise Performance
The SN-L-Series (SN2200 and SN3200) is built for complex infrastructures requiring high-speed processing and massive data density. These appliances reach firewall throughputs of 116 Gbps and IPsec VPN speeds of 34.9 Gbps. Modularity is a core strength, featuring three network extension slots for fiber interfaces up to 40 Gbps. For maximum reliability, the hardware includes hot-swappable redundant power supplies, fans, and SSDs, ensuring zero downtime in mission-critical enterprise environments.
SN-L-Series-SN2200
| Deployment | 1,000 up to 3,000 Users |
| Interfaces | Expandable Modules Refer to Datasheet |
| Firewall Throughput | 115 Gbps |
| Threat Throughput | 32.8 Gbps |
| TLS/SSL Throughput | 6.6 Gbps |
| New Connections per second | 300,000 |
| Concurrent connections | 5,000,000 |
| Included/Max SSLVPN Licenses | 2,400 |
SN-L-Series-SN3200
| Deployment | 2,000 up to 4,000 Users |
| Interfaces | Expandable Modules Refer to Datasheet |
| Firewall Throughput | 116 Gbps |
| Threat Throughput | 50.9 Gbps |
| TLS/SSL Throughput | 9 Gbps |
| New Connections per second | 330,000 |
| Concurrent connections | 7,000,000 |
| Included/Max SSLVPN Licenses | 4,000 |
Not sure which is the correct device for you deployment? Call us for a tailored Quote 01782 957410 or email us at sales@mspsupport.co.uk
Stormshield Network Security SN-XL-Series
The SN-XL-Series is built for the highest possible data density and resilience.
The SN-XL-Series, featuring the SN5200 and SN6200, represents the pinnacle of performance for data centers and critical operators. The SN6200 reaches a staggering 319.3 Gbps firewall throughput and 59.1 Gbps IPsec VPN throughput. With eight network expansion slots, it supports up to 64 fiber interfaces, offering unparalleled port density. This series is engineered for maximum resilience, utilizing a fully redundant architecture to handle the most demanding global traffic loads without compromise.
SN-XL-Series-SN5200
| Deployment | 2,500 up to 7,500 Users |
| Interfaces | Expandable Modules Refer to Datasheet |
| Firewall Throughput | 239.8 Gbps |
| Threat Throughput | 64.7 Gbps |
| TLS/SSL Throughput | 10.8 Gbps |
| New Connections per second | 420,000 |
| Concurrent connections | 15,000,000 |
| Included/Max SSLVPN Licenses | 5,000 |
SN-XL-Series-SN6200
| Deployment | 3,000 up to 10,000 Users |
| Interfaces | Expandable Modules Refer to Datasheet |
| Firewall Throughput | 319.3 Gbps |
| Threat Throughput | 97.3 Gbps |
| TLS/SSL Throughput | 12.4 Gbps |
| New Connections per second | 500,000 |
| Concurrent connections | 25,000,000 |
| Included/Max SSLVPN Licenses | 7,500 |
Not sure which is the correct device for you deployment? Call us for a tailored Quote 01782 957410 or email us at sales@mspsupport.co.uk
Stormshield Network Security Industrial and Rugged Series
Rugged & Industrial Series: Harsh Environments, Tactical, Industrial and IoT Defense
The rugged range, including the SNi-Series and SNxr1200, is engineered for Operational Technology (OT), critical infrastructures, and IoT systems in extreme environments. As detailed in the SNxr1200 specifications, it is an ITAR-free, IP67-rated device designed for military, aeronautical, and space missions. It withstands extreme temperatures from -40°C to +71°C and utilizes robust MIL-DTL-38999 connectors. The SNi-Series provides hardened industrial protection with Deep Packet Inspection for protocols like Modbus and S7, ensuring the integrity and availability of communications between sensors, PLCs, and control stations.
SN-XS-Series-SNi10
SNi20
SNi40
SNxr1200
Not sure which is the correct device for you deployment? Call us for a tailored Quote 01782 957410 or email us at sales@mspsupport.co.uk
Stormshield Network Security EVA Range: Elastic Virtual Appliances
Virtual solutions for secure digital transformation
The Elastic Virtual Appliance (EVA) range provides software-defined security designed for public and private cloud environments. These models, ranging from the EVA1 to the EVAU, scale firewall throughput from 16.4 Gbps to 63 Gbps. A standout feature of this range is Automatic Sizing, which allows the appliance to dynamically adapt its performance capacity based on the RAM and vCPU resources allocated by the host. Fully compatible with platforms like AWS, Azure, and VMware, the EVA range ensures the same functional richness and “made in Europe” sovereignty as physical models, providing the flexibility needed for modern hybrid cloud architectures.
SN-EVA-Series-EVA1
SN-EVA-Series-EVA2
SN-EVA-Series-EVA3
SN-EVA-Series-EVA4
SN-EVA-Series-EVAU
Not sure which is the correct device for you deployment? Call us for a tailored Quote 01782 957410 or email us at sales@mspsupport.co.uk
How to choose the right Stormshield firewall?
“Choosing between the SN170 and SN6200 Stormshield firewalls comes down to your specific security needs. Explore the Stormshield Network Security performance matrix to better understand your options and compare each product side by side, or give our team a call to assist you in choosing the right Stormshield FIrewall for you.”
Stormshield Network Security Features
| Category | Key Features & Capabilities |
|---|---|
| Real time protection | • Network segmentation & micro-segmentation • Antivirus • Intrusion prevention system (IPS) • Intrusion detection system (IDS) • High availability • Cloud based sandboxing • Rugged firmware |
| Control and monitoring | • Zero Trust Network Access • URL filtering • Content filtering • Geolocation of IPs • Detection of vulnerabilities • Application control |
| SD-WAN connectivity | • Management of multiple WAN links • Easy deployment of equipment on remote sites • VPN tunnels Management • Recognition of web applications (SaaS) • Flow routing by application and protocols • Bandwidth management (QoS) • Monitoring of link quality • Centralized management |
| Secure communications | • Site-to-site and mobile IPSec VPN • Mobile SSL VPN • Enhanced Restricted mode • Post-quantum encryption (PQC) |
| Stormshield Security Service Packs | ESSENTIAL SECURITY PACK | PREMIUM SECURITY PACK |
|---|---|---|
| Next-Generation Firewall | ||
| Layer 7 Firewall | Yes | Yes |
| Geolocation | Yes | Yes |
| Web applications | Yes | Yes |
| User authentication, MFA & SSO | Yes | Yes |
| Secure SD-WAN & ZTNA | ||
| IPsec VPN gateway | Yes | Yes |
| Postquantum encryption | Yes | Yes |
| SSL VPN gateway & client | Yes | Yes |
| Device posture assessment | Yes | Yes |
| Threat Protection | ||
| IPS/IDS | Yes | Yes |
| Trusted public certificates | Yes | Yes |
| Antispam | Yes | Yes |
| Threat intelligence (IP & domains) | Yes | Yes |
| Extended Web Control (URL fi ltering) | Option | Yes |
| Antimalware | Option | Yes |
| Breach Fighter AI-powered sandboxing | Option | Yes |
| Industrial protocols DPI | Option | Yes |
| Services | ||
| Software maintenance | Yes | Yes |
| Hardware maintenance | Yes | Yes |
| Standard support access | Yes | Yes |
| Automated confi guration backup | Yes | Yes |
| 24×7 technical support access | Option | Option |
| Express exchange | Option | Option |
| Secure return | Option | Option |