We performed a comparison between KerioControl and OPNsense based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable features are the possibility of having one fabric for switching on security."
"Web filtering and two-factor authentication are great features."
"The user interface (UI) is very, very good."
"Mainly the FortiGate reporting system is very good. It guides us through all the expectations of security. Fortinet provides us all that we need for security. Also, Fortinet FortiGate is a next-generation firewall. It is much more advanced than others."
"The base firewall features are quite valuable to us."
"The email protection and VPN features are the most valuable."
"Fortinet offers the latest versions to cater to the needs of enterprises."
"I have found Fortinet FortiGate to be scalable."
"The product is affordable."
"I like intrusion detection and prevention and bandwidth management. The routing part is also awesome. It is a good firewall. We never had a major breach from outside. We've never been impacted by ransomware, and our systems have never been infiltrated."
"The firewall and intrusion detection features are very useful these days because hackers have a lot of tricks that they use to get into a system. With Kerio Control you can see something that's happening. Otherwise, you have to use other tools to see what's happening on the firewalls. Having IPS in it is quite useful for us."
"Technical support is good. They respond right away."
"The solution is easy to manage. Kerio Control is unique compared to other firewalls because it has been around since 2000 when we switched and the name it started with was WinRoute, and then later became Kerio Control. It evolved over time and it is more of a proprietary firewall on its own and has been developed through open source."
"Kerio Control is easy to use and provides the ability to deliver customized solutions."
"The installation is straightforward."
"I did not face any issues with stability while using the tool's trial version."
"The most valuable features are reporting, the Sensei plugin, and firewall capabilities."
"One of the most valuable features is the network checking. Additionally, the firewall and web filtering functionalities are highly useful."
"The graphic user interface is very good and it is user-friendly which makes the product easy-to-use."
"What I like the most about OPNsense is that it offers an easy-to-use dashboard for device management and control."
"OPNsense is easy to use and open source."
"It's more secure and more reliable."
"The most valuable features in OPNsense are reporting and visibility."
"The initial implementation process is simple."
"Fortinet could improve the windows opener or the virtual IP solutions for opening windows. The virtual IP settings need improvement as firewalls are trending in new development directions."
"Fortinet currently has many products bundled with FortiGate including the basic firewall and load balancer, and I think that that they need to have separate product portfolios for each of these specialized services."
"In terms of what could be improved, the SD-WAN is quite difficult, because if you install the new box, 15 is okay, but if you change from an old configuration, if there is already configuration and a policy when you change to SD-WAN, you must change the whole policy that you see in the interface."
"The performance could be a bit better. Right now, I find it to be lacking. Having good performance is very important for our work."
"When we cluster the two Fortinet FortiGate boxes together we have some issues."
"This product could be improved with Active directory integration and better handling in IPsec and GRE Tunnels."
"I could not configure sFlow from the FortiGate graphical user interface. I realized that the sFlow configuration is available only from the CLI, and discovered that sFlow is not supported on virtual interfaces, such as VDOM links, IPsec, or GRE."
"Fortinet needs more memory to save the log files. We need it to save the logs on the hardware and not in the cloud. I know this feature is available in FortiCloud, but if we need this log locally, it is not available."
"I would like to be able to automatically send email from Kerio Control and have it tell me what my external IPs are, because on one of my lines I have a fixed IP address and on the other it is variable. If there were a permanent way for me to figure out, "Okay, my current external VPN and my firm IP is this," it would help. I need to know the IP address to connect with the VPN and, at the moment, one of the lines sometimes changes its IP address without me knowing it. It's a hassle to figure out what it is."
"The denial of service could also be improved. There recently was a big issue with denial of service attacks and it was a bit laborious."
"If I would suggest anything, it would be to expand on its multifactor authentication to be a little bit more user-friendly. They should do multifactor authentications for the client itself perhaps, rather than served on a webpage, in a page hijack, that might be more user-friendly, but I don't have a lot of complaints about it. It's doing its job. You have to have a certain amount of skills to configure these things anyway, the ones that we use on-site doing point-to-point, and we've been tricked up a few times with their interfaces."
"It has a VPN back to our data center but I don't think it has increased the number of VPN clients extended to those outside our environment"
"The Kerio hardware devices look cheap and could be improved. Some of our clients are switching to Sophos because their hardware has a more sleek design."
"I would like it if the interface section had multiple failovers. Although I do have three connections, just in case our physical cables get disconnected, I can only set up one failover as a backup. So, if for some reason our fiber and our AFM went down together, I would have to have it search for our 4G modem. I'd love to have extra backups running."
"The comprehensiveness of the security features could be improved upon. However, for the most part, it is pretty good. They could add more logs. I would like to see more detailed reporting, custom reporting from the logs, and more of a streamlined interface for certain aspects."
"The solution can be improved to create the capability for larger bandwidths that support our business needs."
"The only thing that I would like to see improved is the Insight or the NetFlow analysis part. It would be good to have the possibility to dig down on the Insight platform. Right now, we can easily do only a few analyses. If this page becomes more powerful, it surely will be a well-adopted platform."
"I think the most important thing is that it should be easily accessible, but currently, that doesn't seem to be the case. We need a hardware platform that's based on common standards and open computing principles, which would be like a commodity and benefit us greatly."
"Its interface should be a little bit better."
"When using the solution at the beginning was difficult. There was a steep learning curve."
"They should improve IPEs for security in the future."
"The solution would not be suitable for anything large-scale."
"OPNsense could improve by making the configuration more web-based rather than shell or command-line-based."
"There is room for improvement in SSL inspection."
KerioControl is ranked 28th in Firewalls with 54 reviews while OPNsense is ranked 3rd in Firewalls with 36 reviews. KerioControl is rated 8.0, while OPNsense is rated 8.4. The top reviewer of KerioControl writes "With VPN, any of our guys can log in to the system and effectively be on board; helps with our customers all over the world". On the other hand, the top reviewer of OPNsense writes "Robust network security and management offering a user-friendly interface, open-source flexibility, and cost-effectiveness, with challenges regarding initial setup and the absence of official support". KerioControl is most compared with Netgate pfSense, Sophos UTM, Sophos XG, Cisco Secure Firewall and WatchGuard Firebox, whereas OPNsense is most compared with Netgate pfSense, Sophos XG, Untangle NG Firewall, Sophos UTM and FortiGate Next Generation Firewall (NGFW). See our KerioControl vs. OPNsense report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
