Fortinet FortiGate IPS vs KerioControl comparison

Cancel
You must select at least 2 products to compare!
Fortinet Logo
4,199 views|2,638 comparisons
95% willing to recommend
GFI Logo
891 views|588 comparisons
88% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Fortinet FortiGate IPS and KerioControl based on real PeerSpot user reviews.

Find out in this report how the two Intrusion Detection and Prevention Software (IDPS) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Fortinet FortiGate IPS vs. KerioControl Report (Updated: March 2024).
768,740 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The solution is user-friendly.""The solution can scale.""The VPN used with the product is secure and reliable without lag.""We like signature-based anomaly detection and zero-day protection features.""I like FortiGate's zero-trust capabilities and protection against zero-day threats. Zero-day threat protection is critical because we're seeing constant changes in the threat landscape. The sandboxing and web access controls are also robust.""We have not had to reach out to FortiGate support yet and that is a pretty good track record.""We like FortiGate's website change feature.""The solution provides an easy way to filter information and Fortinet lab is a great place to discover new things."

More Fortinet FortiGate IPS Pros →

"The most valuable features of KerioControl are ease of configuration, user-friendliness, and comfortable to use. It is an all-in-one solution, it comes with many features, such as a firewall, antivirus software, and network protection.""The stability of Kerio Control is good.""Kerio has improved my organization's security.""The solution’s firewall and intrusion detection features are quite good because you can see exactly who is attacking you and who is getting blocked.""Instead of using a cloud-based product for accessing information, and putting my data at risk in the cloud and in someone else's hands, it has allowed me to use a VPN and access my data directly from a laptop when I am out in the field. That has made my life a lot easier, where I'm able to access any information I need to be able access, basically on demand, with an Internet connection. That alone has been great.""The solution is easy to manage. Kerio Control is unique compared to other firewalls because it has been around since 2000 when we switched and the name it started with was WinRoute, and then later became Kerio Control. It evolved over time and it is more of a proprietary firewall on its own and has been developed through open source.""It has helped our organization with testing.""The ease of use in the GUI itself is the most valuable feature. The GUI is really the best part of it. We like the traffic rules so we can control who can get to what. It's easy to determine the flow of the traffic itself so we aren't having to guess through command lines and reading out basically command-driven output. It's just a very easy-to-use interface. The interface is the best part of the product."

More KerioControl Pros →

Cons
"The solution’s stability could be improved because we sometimes faced some drops.""The solution could improve the configuration, there are times the configuration is missing.""Fortinet FortiGate can improve performance. There was a huge challenge in terms of CPU and memory where the IPS engine would keep triggering. There were random spikes of overutilization in the CPU and memory resources. They have to work on CPU and memory stability considering these IPS engines. A few versions were very unstable.""The web filtering categories could improve in Fortinet FortiGate IPS. There are too many websites under the category of Unknown and the other categories are not featuring all the necessary sites.""The graphical interface could be improved.""The initial deployment could be improved.""FortGate's IPS reporting could be made better by giving more details regarding the source and destination of network traffic when it comes to the overview section. This would allow me to more easily follow the flow of traffic based on IP addresses, without having to integrate the IPS with other products that perform more sophisticated traffic analysis.""They can probably improve the reporting feature. Reporting and report alerting are the main key features of this solution. They can always find ways to improve these."

More Fortinet FortiGate IPS Cons →

"One area that confused me a bit when I was building my current network. I use VLANs to have separate functionality on the network, and the appliance I got was the WiFi model, but I discovered that you can't assign WiFi channels to the VLAN. So, you can have WiFi, but its own subnet. You can't run that over the VLAN. Effectively, I can't use the WiFi facility in the appliance and had to purchase a separate web that supports VLANs. In the end, I had to go to GFI support. They confirmed this is just a limited functionality of that device, as it is a low-end device. I don't know if any of their high-end models have a better facility or not.""There isn't a lot to be improved. It works well as it is, but they can maybe improve the reporting side.""My experience with the solutions technical support is fine but they could be faster in responding.""The solution can be improved to create the capability for larger bandwidths that support our business needs.""KerioControl should add more options in VPN features, such as IPsec VPNs, SSL VPNs, and L2TP VPNs, because KerioControl uses a special VPN for their products.""Kerio Control has just improved on their biggest problem, which was to introduce better support for high-availability requirements in production.""There were certain things I didn't know about it, but I've always been able to just contact our IT company. They've been able to walk me through certain things. It was quite a monumental task to set up a public site. Support really had to help me with setting up the VLANs and walk me through it. It was not possible for me to figure that out on my own, but that's what they're here for. That could have been a little bit easier laid out.""Improvements are needed to the Next Generation Firewall Protection, specifically with user-level protection."

More KerioControl Cons →

Pricing and Cost Advice
  • "The pricing for FortiGate IPS is competitive with other products in the category."
  • "We are currently evaluating a Palo Alto solution, and the pricing could be a reason for going for Palo Alto."
  • "They are more expensive than others."
  • "It is not expensive as compared to Cisco."
  • "The price is okay, so far so good."
  • "The solution could be better priced."
  • "The licensing costs are very competitive."
  • "There is an annual license to use this solution. The prices have been increasing over the years."
  • More Fortinet FortiGate IPS Pricing and Cost Advice →

  • "Search and compare."
  • "Pricing is good, but the licensing took a lot of time."
  • "The price is inexpensive."
  • "It's very affordable."
  • "The pricing is in-line with our expectations in terms of the quality that we get for it."
  • "There is a yearly upkeep fee."
  • "My advice is to use your own hardware, and do not use theirs."
  • "It is a good fit for SMBs because of its maintainability. When you want to keep your costs low, then Kerio Control is a very good solution. It's not an expensive product that is well integrated. It has a complete set of features within it that make it a very strong product."
  • More KerioControl Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
    768,740 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The most significant aspect of IPS is self-explanatory as it primarily focuses on intrusion prevention, which is crucial for Fortinet's internal outbreak prevention efforts and ensuring compliance on… more »
    Top Answer:There is room for improvement in being proactive about identifying and integrating new signatures.
    Top Answer:The solution provides feasibility regarding cyber privacy.
    Top Answer:The pricing is reasonable. We have to pay approximately EUR 175 for the product.
    Top Answer:The pricing of the product can be improved. The trial duration of the product should also be extended.
    Ranking
    Views
    4,199
    Comparisons
    2,638
    Reviews
    26
    Average Words per Review
    372
    Rating
    8.5
    Views
    891
    Comparisons
    588
    Reviews
    7
    Average Words per Review
    276
    Rating
    7.7
    Comparisons
    Also Known As
    FortiGate IPS
    Learn More
    Overview

    Fortinet FortiGate IPS is a highly effective intrusion detection and prevention solution. It is designed to secure a user’s system from end to end and ensure that users are equipped to handle even the most sophisticated threats. Organizations across a wide variety of industries trust IPS to help them prevent unwanted intrusions from harming their networks.

    Fortinet FortiGate IPS Benefits

    Some of the ways that organizations can benefit by choosing to deploy Fortinet FortiGate IPS include:


    • Vulnerability scanning and patching. IPS scans for threats on a deeper level than more traditional software might. It penetrates the uppermost layer of a network and identifies vulnerabilities that might not be easily spotted. It scans the entire network to give administrators a full understanding of the potential threats that they might have to address. They can then patch the points of vulnerability before those areas can be exploited.


    • Flexibility. IPS is highly flexible in that it is truly agnostic. It is capable of operating across a wide variety of devices and environments. Any network, cloud, or device type that an organization wants to protect can run IPS. Users do not need to buy any other solution to enable this to operate in the way that they need.


    • Reliability. IPS provides a complete protective package without requiring users to sacrifice speed. It allows for quick threat identification and remediation.


    Fortinet FortiGate IPS Features


    • Machine learning and AI. IPS puts powerful machine learning and AI tools into the hands of its users. These tools enable users to find threats that users might not otherwise be able to identify. They identify vulnerabilities that traditional software simply cannot and enables users to address them before they can escalate. They analyze every portion of an organization’s network architecture to find areas that can be exploited.


    • Integration suite. IPS enables users to integrate their security with many different cloud and application security services. This gives users the option to plug any feature hole that they might perceive. Advanced threats that ordinarily cannot easily be dealt with using IPS’ features can now be easily resolved. Organizations can seamlessly combine the features that IPS offers with other platforms to bolster their effectiveness and resolve virtually any type of threat.


    • Security controls. IPS comes equipped with security controllers that enable users to run it on the web server application of their choice.


    Reviews from Real Users

    Fortinet FortiGate IPS is a highly effective solution that stands out when compared to many of its competitors. Two major advantages are the powerful zero-day protection features and the way it manages to compete with even its fiercest competitors.

    Srahavan A., the CEO of a computer software company, said, “We like signature-based anomaly detection and zero-day protection features. For zero-day protection, we use Cloud Sandboxing, so whenever the zero-day threat occurs, it automatically sends it to its Cloud Sandbox. After getting information from Cloud Sandbox, then the intrusion is defined.”

    Sachin V., a network administrator said, “We've found the most valuable feature to be the very user-friendly interface... It has a good set of UTM features, a good bandwidth shaping mechanism, and other features. It has efficient algorithms and it competes well with Palo Alto and TechPoint.

    Kerio Control is a popular security product for small and medium-sized businesses. It is a next-generation firewall that provides unified threat management without complexity. Kerio Control provides advanced anti-virus protection and industry-leading web and content application filtering, and has a secure VPN.

    With Kerio Control you can:

    • Preserve the integrity of your network.
    • Manage bandwidth to streamline traffic flows.
    • Improve productivity with filtering capabilities.

    Kerio Control Features

    Some of Kerio Control’s most valuable features include:

    High availability, deployment flexibility, deep packet inspection, advanced routing, usage reporting, quick administering, intrusion detection and prevention (IPS), gateway anti-virus, VPN, web and content application filtering, and centralized administration with MyKerio.

    Kerio Control Benefits

    • Eliminate downtime risks: Because Kerio Control offers high availability and failover protection, you can eliminate the risk and cost of connectivity or threat protection downtime.

    • Detailed reports: Kerio Control makes it easy to view individual users’ internet activity through detailed reports.

    • Traffic monitoring: Traffic monitoring allows you to manage bandwidth and makes it possible for you to control access to streaming video and peer-to-peer networks.

    • Server protection: Using Kerio Control’s advanced networking routing and deep packet inspection, you can protect servers.

    • Easily create policies: With Kerio Control, you can create both inbound and outbound traffic policies, and can also restrict communication by specific URLs, applications, traffic type, content category, or even time of day.

    • Snort-based analysis: Kerio Control gives you the ability to add a transparent layer of intrusion prevention with snort-based analysis along with a database of rule and blacklisted IP addresses that is regularly refreshed.

    • Optionally integrated anti-virus: WIth this feature, you can prevent viruses, Trojans, or spyware from entering your networks.

    Reviews from Real Users

    Here is some feedback from some of our users who are currently using the solution:

    PeerSpot user Brian C., Senior Technology Specialist, VP at Unified Technology Solutions, writes "It is very comprehensive and simple. It has all the active protections. It's updated. We love that you can set how often it is updated so you can work on what is right for you. A large company with a lot of bandwidth can update the virus definitions and security definitions hourly, if they want. A smaller site that's remote, where maybe updating the definitions will eat into the bandwidth, we can schedule those more to go later at night. It's very flexible and works for us in all types of situations. This is great because then we don't have to learn seven different products to be able to work with seven different scenarios."

    Andy D., IT Manager at Flare Technologies, praises how easy it is to use and says, "One thing we use quite a lot, as well, is the DHCP Server, because we do a lot of work where all our devices need to have static IP addresses. Rather than going around and configuring every box, we do it all through DHCP reservations. It's easier. We've got a record of it. We can manipulate it if we need to change something or change some hardware. It's all easy. Even guys who are not used to using it can pick it up quite quickly."



    Sample Customers
    Riverside Healthcare, Salt Lake City, Dell SecureWorks, Credit Bank Zagreb
    Triton Technical, McDonald's
    Top Industries
    REVIEWERS
    Computer Software Company19%
    Comms Service Provider19%
    Financial Services Firm17%
    Manufacturing Company8%
    VISITORS READING REVIEWS
    Computer Software Company24%
    Financial Services Firm9%
    Comms Service Provider8%
    Manufacturing Company7%
    REVIEWERS
    Computer Software Company15%
    Financial Services Firm12%
    Manufacturing Company12%
    Comms Service Provider12%
    VISITORS READING REVIEWS
    Computer Software Company22%
    Comms Service Provider13%
    Media Company7%
    Financial Services Firm7%
    Company Size
    REVIEWERS
    Small Business51%
    Midsize Enterprise13%
    Large Enterprise36%
    VISITORS READING REVIEWS
    Small Business25%
    Midsize Enterprise18%
    Large Enterprise57%
    REVIEWERS
    Small Business80%
    Midsize Enterprise17%
    Large Enterprise4%
    VISITORS READING REVIEWS
    Small Business38%
    Midsize Enterprise18%
    Large Enterprise45%
    Buyer's Guide
    Fortinet FortiGate IPS vs. KerioControl
    March 2024
    Find out what your peers are saying about Fortinet FortiGate IPS vs. KerioControl and other solutions. Updated: March 2024.
    768,740 professionals have used our research since 2012.

    Fortinet FortiGate IPS is ranked 4th in Intrusion Detection and Prevention Software (IDPS) with 54 reviews while KerioControl is ranked 16th in Intrusion Detection and Prevention Software (IDPS) with 54 reviews. Fortinet FortiGate IPS is rated 8.4, while KerioControl is rated 8.0. The top reviewer of Fortinet FortiGate IPS writes "Very stable with good network protection". On the other hand, the top reviewer of KerioControl writes "With VPN, any of our guys can log in to the system and effectively be on board; helps with our customers all over the world". Fortinet FortiGate IPS is most compared with Palo Alto Networks Advanced Threat Prevention, Trend Micro TippingPoint Threat Protection System, Cisco NGIPS, Check Point IPS and Cisco Sourcefire SNORT, whereas KerioControl is most compared with Netgate pfSense, Fortinet FortiGate, OPNsense, Sophos UTM and Sophos XG. See our Fortinet FortiGate IPS vs. KerioControl report.

    See our list of best Intrusion Detection and Prevention Software (IDPS) vendors.

    We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.