We performed a comparison between Check Point NGFW and KerioControl based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."We've found the solution to be pretty stable."
"The most valuable features of Fortinet FortiGate are the APIs. They are the most widely known."
"Customers are more inclined towards FortiGate because of application control, web filtering, and anti-spam features. The support from the FortiGate team is good, and price-wise, it is affordable."
"The most important features of Fortinet FortiGate are the Intrusion Prevention System (IPS) and firewall control applications."
"It has improved our security capabilities."
"It is very flexible to use."
"We have found it to be very reliable and that's why our teams and various users in our company use it as our main firewall every day."
"The technical support in our region is excellent."
"Check Point has a centralized console that makes it possible to manage all the deployed equipment. It also has a built-in VPN service that lets users connect through VPN to our organization, which facilitates teleworking while cutting off unauthorized access to the organization's internal network."
"The most valuable feature is that we are protected against zero-day threats."
"Check Point has a really cool GUI."
"The biggest thing is the central management. It is quite good and allows us to manage the different firewalls from it. We can implement and configure many firewalls and push our policies to them as well."
"Check Point is awesome from a security standpoint. Based on our experience and also the experience of the other customers, it is a very stable appliance."
"The support offers the best services I have experienced. It's better than any other IT vendor."
"The software upgrade procedure is very easy; it just needs few clicks & we are done."
"By deploying Check Point, it has made it easier to manage everything from a single interface. The management dashboard and policies are on its single pane of glass."
"The most valuable feature is to provide users with the ability to log in to the portal page, keep track of their data usage and perform bandwidth management."
"One very good thing about the Kerio device is its authentication. I don't have a Windows domain for authentication. Instead, I use the Kerio product because it can separate users by Mac addresses and give them IP addresses based on their usernames, automatically logging them in. This makes for a very simple authentication system."
"Instead of using a cloud-based product for accessing information, and putting my data at risk in the cloud and in someone else's hands, it has allowed me to use a VPN and access my data directly from a laptop when I am out in the field. That has made my life a lot easier, where I'm able to access any information I need to be able access, basically on demand, with an Internet connection. That alone has been great."
"All of the features of Kerio Control are equally good. Most valuable to us are the firewall rules, the intrusion detection system, and IP address features."
"I did not face any issues with stability while using the tool's trial version."
"The top features are ones that we're not using yet but we soon will be because we've just had broadband upgraded in Australia. We've got something called the National Broadband Network, which is forced onto you, so you have to take it when it arrives. We'll be trying the high availability out soon. We tried that with some load balancing, it didn't quite work as we expected, but I think that was more of a configuration thing rather than a product thing."
"I have found the most valuable features of Kerio Control to be the IPS and firewall."
"It helps us better control internal and external communications."
"They sometimes hide some features and if you want to enable them, you have to go in the CLI, enable the feature and configure it through the CLI. Customers, typically, like everything to be done by the GUI."
"The initial setup and configuration are not intuitive and require training."
"It should come integrated or have its own type of network monitor tool in a module. There should just be one package, and you are good to go."
"It can be a little bit more user-friendly in terms of policy definition and implementation. It seems a little bit complicated, and it could be simplified."
"Fortinet FortiGate needs to improve the logging and reporting. Additionally, the next-generation application's policies should be improved. When they were released they had bugs."
"The ease of use could be improved."
"Price, of course, can always be more competitive or better."
"Technical support could be better. You don't always get the level of help you need right away."
"One thing to improve is the VSX gateway. It is quite complex to work with VSX and they are quite easy to break if you aren't familiar with them."
"Debugging is very complex when compared to Fortinet, for example. That's the worst thing about Check Point. The deployment of the solution is harder than it is with the competitors. But after you've deployed it, the operation is easy."
"Although the GUI is simple to use and fairly comprehensive, more support via CLI would be beneficial for bulk operations."
"The policy installation module should be improved."
"It would be nice to add more features to the WatchTower app to be able to perform certain administrative functions without the need for local access."
"For the next release, we would like to have better ruleset cleanup tools that are already included."
"It could be more stable and scalable. Check Point price and support could be better."
"In terms of what could be improved, we have a cluster with two nodes and usually we have some problems when process gets really high and it has to choose which services it keeps going. I would like to have a better solution here, like if instead of just one we could use both at the same time. It would be good if it could work together. Then when one has a failure or something like that, the other one is there to transfer, to take all the services and keep working."
"I would like to be able to inspect https packets for the purpose of virus scanning."
"The VPN features are the ones that we really like, but we are using a VPN client to be able to use them. We would like to have an SSL implementation for this same feature so we don't need to install anything on the client side. That's a feature I really miss and that should really be embedded in the product. We really would love to use it via a web browser."
"My experience with the solutions technical support is fine but they could be faster in responding."
"I would like it if the interface section had multiple failovers. Although I do have three connections, just in case our physical cables get disconnected, I can only set up one failover as a backup. So, if for some reason our fiber and our AFM went down together, I would have to have it search for our 4G modem. I'd love to have extra backups running."
"The antivirus seemed to be a bit laggy on the connection so I disconnected that. It's definitely good. The only issue we've had with any sort of cyber attack seemed to be coming from a couple of distinct locations, people trying to get into known ports on remote desktops and stuff like that. The fact that we can block all that traffic is just great. It simplifies it."
"The denial of service could also be improved. There recently was a big issue with denial of service attacks and it was a bit laborious."
"The overall speed needs improvement. Internet connectivity speed needs to be improved somehow."
"I have had a few issues with HTTPS decryption. The solution also does not show the actual user's Internet usage."
Check Point NGFW is ranked 5th in Firewalls with 277 reviews while KerioControl is ranked 29th in Firewalls with 54 reviews. Check Point NGFW is rated 8.8, while KerioControl is rated 8.0. The top reviewer of Check Point NGFW writes "Good antivirus protection and URL filtering with very good user identification capabilities". On the other hand, the top reviewer of KerioControl writes "With VPN, any of our guys can log in to the system and effectively be on board; helps with our customers all over the world". Check Point NGFW is most compared with Palo Alto Networks NG Firewalls, Sophos XG, Cisco Secure Firewall and Netgate pfSense, whereas KerioControl is most compared with Netgate pfSense, OPNsense, Sophos UTM, Sophos XG and Palo Alto Networks VM-Series. See our Check Point NGFW vs. KerioControl report.
See our list of best Firewalls vendors and best Unified Threat Management (UTM) vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.