We performed a comparison between Fortinet FortiGate, KerioControl, and Sophos Cyberoam UTM based on real PeerSpot user reviews.
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls."I like Fortinet's cloud management. It allows me to manage all my devices in different branches for three cloud accounts. Even though I use on-prem devices, I can manage everything on the cloud."
"The product is very stable, easy to troubleshoot, and configure, so it has reduced the time it takes for support."
"The payment function for applications is good."
"The solution is very user friendly. The user interface in particular is quite nice."
"FortiGate firewalls are easy to manage through a user-friendly web interface. They also have advanced features like DDoS and DLP. However, I wouldn't recommend enabling all of these features on one device because it can cause performance issues."
"Fortinet FortiGate appears to be scalable."
"You can create multiple Virtual Domains (VDOMs), which are treated as separate firewall instances."
"One of the valuable features is a standardized OS."
"It has helped our organization with testing."
"The solution provides feasibility regarding cyber privacy."
"The top features are ones that we're not using yet but we soon will be because we've just had broadband upgraded in Australia. We've got something called the National Broadband Network, which is forced onto you, so you have to take it when it arrives. We'll be trying the high availability out soon. We tried that with some load balancing, it didn't quite work as we expected, but I think that was more of a configuration thing rather than a product thing."
"Kerio is a lot clearer to set up to do particular things, whereas when I do it on a Cisco or a FortiGate I have to go fight with it per week sometimes to do something I can do in 20 minutes on Kerio."
"The solution is user-friendly."
"The reporting needs to be improved. It is hard to get a domain."
"One very good thing about the Kerio device is its authentication. I don't have a Windows domain for authentication. Instead, I use the Kerio product because it can separate users by Mac addresses and give them IP addresses based on their usernames, automatically logging them in. This makes for a very simple authentication system."
"The firewall and intrusion detection features are good. It has blocked certain things. We have a lot of blocked sites that the staff or anyone using it, the public, etc., can't go on. It works for that. I get quite a few messages every now and again, saying that a virus has been detected and I can go in and block the user who's causing the problem."
"Web application filtering eases internet access control."
"The tool is stable."
"We consider the user level and control features of Sophos Cyberoam UTM to be the best."
"The product, itself, doesn't seem to have any bugs or glitches."
"The initial setup was straightforward."
"I find Sophos Cyberoam UTM very good. I like the feature of being able to block off Mac IDs that host users. For example, you have a Mac or Windows laptop and you created a hotspot. Other devices like mobiles and tablets e.g. iPads connected to that hotspot. We can block those devices that connected to the hotspot we created, only through Sophos. It's a good feature we didn't find in other UTMs."
"Its portal is user-friendly. I am able to manage the user data and access control through this device."
"The most valuable features are the firewall section, the VPN, and how you control live users."
"Vulnerability scanning could be improved."
"Fortinet FortiGate could improve by having more storage in the hardware for log data."
"In the next release, maybe the documentation on how to use this solution could be improved."
"Technical support is good but the response time could be faster."
"There are some cloud-based features that could be much more flexible than they currently are."
"The central management for the FortiGate Fortinet Firewall needs improvement. They have the manager to do the essential management for both SD-WAN and for the security policy. They should also improve the SD-WAN function."
"With FortiGate, the main complaint that I have heard is about the technical support."
"Lacks sufficient security options."
"The security part of the software, like virus scanning, website, traffic monitoring, things like that, can take a beating on the appliance. And when there's a lot of things going on, the system can get bogged down. The actual security functionality of it needs a little bit more work, which I believe they are remedying or attempting to remedy at this time, but that's the downfall at this time."
"One of the problems we do have causes problems with the VPN. The software slows the throughput down too much. You could have a one-gigabit connection from the internet, and it slows it down to the area of upload and download is extremely slow. There's too much content filtering at that point."
"The antivirus seemed to be a bit laggy on the connection so I disconnected that. It's definitely good. The only issue we've had with any sort of cyber attack seemed to be coming from a couple of distinct locations, people trying to get into known ports on remote desktops and stuff like that. The fact that we can block all that traffic is just great. It simplifies it."
"The GUI should be changed because it remains the same consistency across versions. However, those who have been using KerioControl for a long time may be accustomed to the current interface. Installing a new version in the same location makes it easy to find, but overall, there are no notable changes between versions."
"The solution can be improved to create the capability for larger bandwidths that support our business needs."
"We'd like to have more integrations Kerio Operator."
"They should add wireless features."
"One area that confused me a bit when I was building my current network. I use VLANs to have separate functionality on the network, and the appliance I got was the WiFi model, but I discovered that you can't assign WiFi channels to the VLAN. So, you can have WiFi, but its own subnet. You can't run that over the VLAN. Effectively, I can't use the WiFi facility in the appliance and had to purchase a separate web that supports VLANs. In the end, I had to go to GFI support. They confirmed this is just a limited functionality of that device, as it is a low-end device. I don't know if any of their high-end models have a better facility or not."
"On-box sandstorm should be available. As of now, it is from their cloud."
"Sophos Cyberoam UTM could improve by adding VPN site-to-site capabilities. The correct version does not work with Microsoft Azure Cloud."
"The solution had a feature to import users from a CSV file. However, the latest version does not have that option."
"There is a lot or room for improvement, because it is still not a fourth or fifth generation firewall. It lacks security features."
"I had an issue when I was trying to stop a user from using too much bandwidth while I was using Azure, I was not able to stop them."
"The product had a hang issue. We needed to reboot, recreate the image, and reconfigure the previous image because the product hanged frequently."
"Network visibility is an area in the solution with shortcomings where improvements can be made."
"Sometimes, users are timed out intermittently."
