We performed a comparison between Fortinet FortiGate, Fortinet FortiGate-VM, and KerioControl based on real PeerSpot user reviews.
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls."It is a one box solution, which covers most of the edge device’s requirements."
"Good load balancing feature."
"The most valuable feature is the ease of use."
"The technical support in our region is excellent."
"It's very good and very stable for businesses. It works very well."
"Fortinet FortiGate's reliability is valuable."
"It is a good source for firewall protection."
"The pipe filter application is an outstanding feature."
"The thing that I like the most is that they're very willing to work with us to resolve issues that they haven't taken care of before in their product."
"The most valuable features are site-to-site connections and UTM."
"The most valuable features are the web proxy for protection and web gateway for deployment."
"The tool's most valuable feature is its ability to deploy it on live physical hardware. Specifically, when providing firewall services for clients, we can leverage such hardware appliances to support multiple customers on the same hardware."
"It's very easy to set up, even for more junior developers."
"I really like that it's internationally deployable."
"GitDM, like FortiGate VM, provides similar features to FortiGate appliances or cloud solutions. However, FortiGate VM is more suitable for heavy traffic and inspection compared to GitDM. Unfortunately, FortiGate VM lacks a dedicated SPU for inspection, and all features rely on CPU and RAM."
"I find the simplicity to be most valuable."
"Kerio has improved my organization's security."
"We also like the security. We can control what sites users can go to and we can make sure that where they're going is appropriate and that it's work-related."
"The firewall and the content filtering options are valuable."
"The solution’s firewall and intrusion detection features are quite good because you can see exactly who is attacking you and who is getting blocked."
"The reporting needs to be improved. It is hard to get a domain."
"I have found the most valuable features of Kerio Control to be the IPS and firewall."
"It has saved a lot of time and it was a secure way of doing it too. We had a whole contact center that worked from home for a period of time and that's a 21 hour a day contact center that we moved, that was spread out across the greater Brisbane region and working on home internet connections. Surprisingly, we didn't have a lot of stability issues anyway on those connections, but Kerio didn't blink, so that was good."
"The product is easy to use."
"Price, of course, can always be more competitive or better."
"They should make the rule sets more understandable for the end user. When you're trying to explain to somebody how a computer network is secured, sometimes it's difficult for an end user or customer to understand. If there was a way to make the terminology more accessible to the end user, the set up could be easier. They should translate the technical jargon to an easily relatable and understandable conversation for the end user, the customer, that would be brilliant. Particularly in an environment where the IT structure is audited regularly, there's always pressure from the auditor to up the standards and up the security and you get your USCERT's that come out and there's a warning about this and the customer will want to lock out so much and when you apply it they run into issue where they can't search the internet or print to their remote office. Of course they can't print to your remote office, they just locked it up. They should make the language more understandable for the customer. If there's a product out there that made the jargon understandable to John Q. Public, I would buy that."
"The command line is complicated, and the interface could be better."
"The pricing could be reduced or include the first year warranty."
"If they could extend their fabric towards other vendor environments for integration, that would be great."
"The scalability could be better."
"My only complaint about FortiGate is a lack of QinQ VLAN tunneling. I haven't found this feature in any Fortinet product. You can do this on all Cisco routers, including the smaller models. However, QinQ isn't available on the biggest, most expensive Fortinet units. They still don't have that. I think now we're on software version 6.0, and they still haven't found a solution for QinQ. It isn't a dealbreaker, but that's my main complaint."
"The pricing could always be better."
"SD-WAN could be enhanced to provide a clear division between control and data planes, utilizing controllers to manage tasks within the network."
"The product may not be as robust as Palo Alto. However, unless you are a big bank, you probably won't need it to be."
"We are experiencing a failed login issue. There should also be improvements in functionalities we store to enhance our services."
"The key activation is very complicated at times."
"They should keep us up to date about the latest version. That's the biggest thing. Currently, we have to go looking for the latest version. We should get notified about what's going on with the versions. I would like to see easier dual-factor authentication."
"The price and licensing of the solution can be better."
"The stability could be improved. I find Cisco to be more stable than Fortigate, which is I major differentiator between the two."
"The users must buy FortiSIEM to get advanced analytics."
"I would like for them to add more security features."
"Their support is getting better but still needs improvement."
"One of the problems we do have causes problems with the VPN. The software slows the throughput down too much. You could have a one-gigabit connection from the internet, and it slows it down to the area of upload and download is extremely slow. There's too much content filtering at that point."
"The filtering on the unlicensed version of Kerio Control is inefficient - you have to add each website manually, which isn't feasible."
"The denial of service could also be improved. There recently was a big issue with denial of service attacks and it was a bit laborious."
"My experience with the solutions technical support is fine but they could be faster in responding."
"I would like to see a little improvement in their technical support when you have a problem. I may be a little jaded because I came from Kerio when we could call and get a person on the phone who worked on the product. Every tech had their own demo setup. They had instant messaging capability with the developers. If we found a problem, then we could get a result for it quickly. Now, the product seems to be 24 hours. They have also gone to the model that if you need quicker support, then they now charge you additional for the exact same level of support that they used to give. I am assuming it's the exact same level of support that they say it is. I'm not paying extra for it. That's the biggest flaw with the product."
"Filtering of pages and greater personalization in services need improvement."
