A sovereign firewall should be assessed on more than where the vendor is based. Organisations should consider independent security assurance, IPS and threat prevention, performance with security features active, centralised management, IT and OT capabilities, vendor transparency and ongoing technical support.

Where sovereignty is a priority, it is also important to understand where the technology is developed, the jurisdiction governing the vendor and which independent certifications apply to the specific product and software version being considered.

Stormshield offers European-developed network security solutions with independent security qualifications and certifications on applicable products, integrated IPS and threat prevention, dedicated IT and OT security capabilities, and centralised firewall administration through Stormshield Management Center. Combined with technical support and expertise available through Hammer Distribution, this helps partners address the key considerations when recommending a sovereign firewall.

Headline firewall throughput does not necessarily represent the performance available when security inspection is active. Intrusion Prevention Systems analyse network traffic for malicious activity, which adds additional processing requirements.

When comparing firewalls, consider published IPS and threat-prevention throughput alongside standard firewall performance. Traffic profiles, concurrent connections, VPN requirements and the security services that will be enabled should also form part of the assessment. A proof-of-concept can help validate performance against the customer's real environment.

Rather than replacing the existing firewall like-for-like, consider traffic volumes, encrypted traffic, IPS performance, VPN requirements, segmentation, high availability, management requirements and any IT or OT infrastructure.

Migration planning should also account for existing policies, configurations, integrations, testing and rollback procedures. Hammer provides technical pre-sales, solution design and proof-of-concept support to help partners assess and plan Stormshield migration opportunities.

MSPs should look for centralised administration, visibility across multiple firewalls, policy management, configuration backups, monitoring, reporting and automation capabilities.

These features can reduce the need to manage every firewall individually and help technical teams work more consistently across distributed customer environments. Stormshield Management Center provides centralised administration for SNS firewalls, including firewall and VPN supervision, policy management, updates, backups and scheduled script execution.

Firewalls protecting operational technology need to account for industrial systems, protocols and availability requirements that may not be present in traditional IT networks.

This can require capabilities such as industrial protocol inspection, network segmentation and greater visibility of communication between IT and OT systems. Stormshield provides network security capabilities for both IT and OT environments, including industrial protocol analysis, intrusion prevention and segmentation.

An industrial firewall should provide visibility and control over OT traffic without disrupting critical operational processes. Important considerations include industrial protocol support, deep packet inspection, intrusion prevention, network segmentation, centralised management and integration with the wider security environment.

The physical environment should also be considered. Industrial deployments may require appliances designed for DIN-rail installation, extended operating temperatures or other challenging conditions.