We performed a comparison between Hillstone S-Series Network Intrusion Prevention System, KerioControl, and Palo Alto Networks Advanced Threat Prevention based on real PeerSpot user reviews.
Find out what your peers are saying about Darktrace, Vectra AI, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS)."Setup is straightforward with the same reliability and scalability as the firewall series."
More Hillstone S-Series Network Intrusion Prevention System Pros →
"We also like the security. We can control what sites users can go to and we can make sure that where they're going is appropriate and that it's work-related."
"It prevents people from visiting undesirable sites and ensures that they use the internet for their designated jobs."
"Its support is very good, and it is stable product."
"I like intrusion detection and prevention and bandwidth management. The routing part is also awesome. It is a good firewall. We never had a major breach from outside. We've never been impacted by ransomware, and our systems have never been infiltrated."
"The flexibility of the system, the capacity to provide the right level of security, and the ability to be integrated into different kinds of infrastructures are the most valuable features."
"The solution is easy to manage. Kerio Control is unique compared to other firewalls because it has been around since 2000 when we switched and the name it started with was WinRoute, and then later became Kerio Control. It evolved over time and it is more of a proprietary firewall on its own and has been developed through open source."
"The firewall and intrusion detection features are good. It has blocked certain things. We have a lot of blocked sites that the staff or anyone using it, the public, etc., can't go on. It works for that. I get quite a few messages every now and again, saying that a virus has been detected and I can go in and block the user who's causing the problem."
"The product is affordable."
"One of the most valuable features is the anti-malware protection."
"I like the solution's interface."
"It's very easy to use and configure. What is nice about Palo Alto is that even if you don't understand how to use it, you can just click on upload and upload everything that needs to be blocked."
"The most valuable features are the simplicity, transparency, and overall ease of management."
"With the IP address flag, I was able to see that I was being hacked. The moment there was an interaction between somebody on my network and that IP, the solution was able to flag it, and we were able to protect ourselves."
"Most of the features of Palo Alto Threat Prevention are alright. I recommend features like content filtering, IP address, & intelligent firewalls. The reporting feature is very good."
"We are currently using the URL filtering feature, which is the most popular."
"For those who want a next-gen firewall that's easy to configure and easy to operate, I think you should go for Palo Alto."
"Lack of tools to help educate end users"
More Hillstone S-Series Network Intrusion Prevention System Cons →
"The overall speed needs improvement. Internet connectivity speed needs to be improved somehow."
"Kerio Control could improve by having higher availability and adding a mobile VPN channel. These additions are needed. The VPN is working fine on the Kerio Control but there needs to be a VPN client on the mobile phones, both for iOS and Android. This would be very good for us."
"I would like it if the interface section had multiple failovers. Although I do have three connections, just in case our physical cables get disconnected, I can only set up one failover as a backup. So, if for some reason our fiber and our AFM went down together, I would have to have it search for our 4G modem. I'd love to have extra backups running."
"The denial of service could also be improved. There recently was a big issue with denial of service attacks and it was a bit laborious."
"The reporting needs to be improved. It is hard to get a domain."
"There isn't a lot to be improved. It works well as it is, but they can maybe improve the reporting side."
"I would like to see a little improvement in their technical support when you have a problem. I may be a little jaded because I came from Kerio when we could call and get a person on the phone who worked on the product. Every tech had their own demo setup. They had instant messaging capability with the developers. If we found a problem, then we could get a result for it quickly. Now, the product seems to be 24 hours. They have also gone to the model that if you need quicker support, then they now charge you additional for the exact same level of support that they used to give. I am assuming it's the exact same level of support that they say it is. I'm not paying extra for it. That's the biggest flaw with the product."
"Kerio Control could improve content filtering."
"Sometimes when you want to group a set of ports, and communicate with Palo Alto, you cannot group TCP and UDP ports together. This needs to be adjusted."
"I think they can use some improvement on FID."
"In terms of what needs improvement, the only thing I don't like is the support."
"The solution needs to improve its local technical support services. There is no premium support offered in our market."
"The documentation needs to be improved. I need better information about how to configure it and what the best practices are."
"The organization mail security solutions could be improved. There is no mail security solution available."
"Palo Alto Networks Threat Prevention could improve the commercial offing. Other solutions, such as Fortinet provide better commercial features."
"It's not so easy to set up a test environment, because it's not so easy to get the test license. The vendor only gives you 90 days for a test license; it's a tough license to get."
More Palo Alto Networks Advanced Threat Prevention Pricing and Cost Advice →
Earn 20 points