Try our new research platform with insights from 80,000+ expert users

Cisco Secure IPS (NGIPS) vs KerioControl comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 19, 2024
 

Categories and Ranking

Cisco Secure IPS (NGIPS)
Ranking in Intrusion Detection and Prevention Software (IDPS)
6th
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
66
Ranking in other categories
No ranking in other categories
KerioControl
Ranking in Intrusion Detection and Prevention Software (IDPS)
15th
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
57
Ranking in other categories
Firewalls (25th), Unified Threat Management (UTM) (11th)
 

Mindshare comparison

As of December 2024, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Cisco Secure IPS (NGIPS) is 4.2%, down from 4.5% compared to the previous year. The mindshare of KerioControl is 1.6%, up from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

YoussefBoukari - PeerSpot reviewer
Very effective for malware and signature-based anomalies but stability needs improvement
Our company uses the solution for data functions in banking. It is a backend solution in the server center.  We analyze traffic and adapt configurations or customize policies to the environment of the IPS itself.  The solution very effectively provides malware protection and signature-based…
Constantnos Achilleos - PeerSpot reviewer
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We like the Cisco product, the concept, and the tech intelligence."
"The solution is good at scaling."
"I like the way the tool pushes the packets from the node level."
"The solution is very stable."
"The solution is stable. This is one of the good things in Firepower. Especially if we use ESE with it."
"We have found the IPS detection to be a very valuable feature of this solution. It is easy to use to stop policy violations."
"We primarily use this solution as an application filter and for IPS."
"It has aligned the features in accordance to our strategic needs"
"The interface control manager where we can allocate LAN connections to certain VLANs is the most valuable feature. The other feature that's important for us is because obviously everything is remote with MyKerio, as long as the boat has an internet connection, we can log onto the Kerio and get statistics, as well as provide support."
"It has saved a lot of time and it was a secure way of doing it too. We had a whole contact center that worked from home for a period of time and that's a 21 hour a day contact center that we moved, that was spread out across the greater Brisbane region and working on home internet connections. Surprisingly, we didn't have a lot of stability issues anyway on those connections, but Kerio didn't blink, so that was good."
"The solution has an app manager and a portal where you can maintain all your Keri products. It is a firewall that includes antivirus and anti-malware, which adds security. The VPNs, both site-to-site and client VPNs, are pretty easy to set up."
"Compared to other solutions, accounting and live monitoring of firewall status are very good features in KerioControl."
"The most valuable features include geo-tagging, which blocks all other IPs except for the specified accounts, and web filtering."
"I am impressed with the tool's firewall filtering capacity."
"When one of the employees of my customers is using the VPN Client, I have created for them that they will always get a message. When the VPN Client connects to Kerio Control from the outside, they will get an email so they know when they are connected and when they are disconnected what is happening to their network."
"The routing of the multiple internet physical routers I have is the most valuable feature of this solution. Instead of me physically unplugging a cable from one router to the server, if one connection goes down, it automatically switches for me. So I can have all three of them plugged in. If one goes down, it just picks up the other one automatically. There's no physical cable swapping."
 

Cons

"The GUI user interface could be improved and the login is not very user friendly."
"Our customers are still facing many bugs on the system. It has matured noticeably, but we are still facing multiple stability issues on Firepower. There are more than 80 or 90 bugs for each release node. It's a considerable number of bugs."
"I would like to see Cisco NGIPS to include home office support in one single product."
"I think the part of IPS and everything else needs to be better equated to the real needs or current needs of the business compared to the other manufacturer, because it is not straightforward, a way to configure it compared to the other competitors."
"NGIPS' GUI interface could be improved and made more user-friendly."
"Better integration with other products, such as a SIEM tool, would provide better peer visibility about your security posture."
"The inclusion of bandwidth management features would improve this product."
"We would like an option to search through the logs to be added to this solution."
"The overall speed needs improvement. Internet connectivity speed needs to be improved somehow."
"My experience with the solutions technical support is fine but they could be faster in responding."
"I would like the customer statistics to be more user-friendly. It should explain more what users have been doing throughout the day. Sometimes, it'll just say they downloaded a big file. Meanwhile, they were connected through a VPN."
"There's also room for improvement in the Traffic Rules. We define networks to use a specific outgoing interface, say VSAT, shore, or marine WiFi, which is okay. But then all we have is a checkbox that says "Use other internet interfaces if this one is unavailable." What we would prefer would be to have a priority list. So if VSAT is unavailable, try to use 4G, etc. We haven't really found a reliable way of doing that in the current release."
"There isn't a lot to be improved. It works well as it is, but they can maybe improve the reporting side."
"The comprehensiveness of the security features could be improved upon. However, for the most part, it is pretty good. They could add more logs. I would like to see more detailed reporting, custom reporting from the logs, and more of a streamlined interface for certain aspects."
"The reporting needs to be improved. It is hard to get a domain."
"When we did our last update, we had some trouble with the initial syncing process to get our messaging to go through. But we were also moving a store and a lot was changing during that process. I don't think it was on Kerio's end. It just coincided with the update. Once we got our third-party IT guy involved it was resolved very quickly."
 

Pricing and Cost Advice

"The licensing can be billed annually or in multi-year contracts such as three, four, or five years."
"I usually work with Fortinet and FortiGate which is a lower cost in comparison with Cisco NGIPS."
"Pricing depends on negotiation with the vendor, although I can say that it is moderate."
"The tool's licensing costs are yearly."
"Cisco products are not cheap and this solution is no different."
"We get cut in price since we use other Cisco products. We have the whole bundle of Cisco solutions."
"The price of Cisco NGIPS could be reduced. It is more expensive than other solutions."
"It is highly priced but competitive regarding features and support services."
"It is priced low enough for entry-level, but it has the power to grow with a company without them having to replace it."
"It's very affordable."
"I pay approximately $50 for the solution on an annual basis."
"The price of the solution is reasonable. For additional costs, you can add on more features such as antivirus."
"On the low-end device that I use, it has unlimited IP addresses. So, they have a subscription model where, on the higher models, you pay X dollars for 10 IP addresses. Then, if you want any more, you have to pay more on the model. On the low-end model, it has unlimited IP addresses, because if you have too many users, the thing will just slow you down and stop working. At some point, you need to say, "Okay, I've grown to a point where performance is impacted. I need to get some bigger hardware." If I get to that stage, I will possibly look at using one of the virtual appliances and putting it on some bigger hardware."
"KerioControl's pricing is good."
"Licensing is easier with Kerio Control. With FortiGate, we realized the licensing is really hectic, because if you skip one year, you have to back pay that year. If you skip two years, you have to back pay two years. With Kerio Control, if a license expires, one year later you can just reactivate and go on."
"GFI has made a stupid decision regarding small office licensing. For offices where there are only three to five employees and had five years towards a five user product, they now force these customers to a 10-year user license. I really don't understand it. It's a stupid decision for the small offices who want a good solution for security because they'll probably decide to go to another product. Why should they buy something that they don't use?"
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
824,053 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
University
12%
Financial Services Firm
9%
Educational Organization
7%
Computer Software Company
23%
Financial Services Firm
9%
Media Company
9%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cisco NGIPS?
The product's initial setup phase was easy.
What needs improvement with Cisco NGIPS?
The dashboard is quite old compared to today's technology. We would like to see improvements in the dashboard features.
What do you like most about KerioControl?
The solution provides feasibility regarding cyber privacy.
What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the product is rated as ten out of ten.
What needs improvement with KerioControl?
The logs could be improved for better clarity. It is difficult to understand when there is a threat attack, and handling firmware requires experience.
 

Also Known As

Sourcefire NGIPS, Firepower NGIPS
No data available
 

Learn More

 

Overview

 

Sample Customers

American Electric Power, Huntington Bank, Keycorp, Nationwide, Transunion, Marriott, Inova Health, Ford, Thomson Reuters, Dow Chemical, Equifax, Chevron, Walmart, Coca Cola
Triton Technical, McDonald's
Find out what your peers are saying about Cisco Secure IPS (NGIPS) vs. KerioControl and other solutions. Updated: December 2024.
824,053 professionals have used our research since 2012.