Try our new research platform with insights from 80,000+ expert users

Cisco Secure IPS (NGIPS) vs KerioControl comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Cisco Secure IPS (NGIPS)
Ranking in Intrusion Detection and Prevention Software (IDPS)
6th
Average Rating
8.2
Number of Reviews
63
Ranking in other categories
No ranking in other categories
KerioControl
Ranking in Intrusion Detection and Prevention Software (IDPS)
15th
Average Rating
8.2
Number of Reviews
56
Ranking in other categories
Firewalls (29th), Unified Threat Management (UTM) (11th)
 

Mindshare comparison

As of September 2024, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Cisco Secure IPS (NGIPS) is 4.3%, down from 4.6% compared to the previous year. The mindshare of KerioControl is 1.2%, down from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

MA
Jan 11, 2023
The best in the world, high value features, with long term reliability
Our primary use case is for the firewall and other security-related features I think the Cisco Firepower is the best firewall in the world and the other security features like AMP, IPS, and deep inspection packets. The most valuable feature would be the IPS is very important in Cisco Firepower…
SR
Jul 9, 2020
Scalable with an easy initial setup but technical support is terrible
We primarily use the solution on the VPN for protection purposes. We utilize its antivirus capabilities as well I really like their general IT. I like how it's possible for me to block other countries immediately if I see the need to do so. The initial setup is a breeze. The support the solution…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I have found the filter and the antivirus to be most valuable."
"The features that I find most valuable are the DDoS protection, IPS/IDS, and Firepower for web application filtering."
"In the virtual deployment, you have a couple of choices depending on your needs and how much bandwidth you have that needs to be inspected."
"Cisco NGIPS is a stable tool...The technical support provided by Cisco NGIPS is okay."
"We use the solution for cybersecurity purposes. The tool helps us to identify anomalies that come from internal or external networks."
"The traffic filter of this solution is very valuable to us, and to our clients."
"You can do zero-day prevention and detection. It's quite useful."
"I like Firepower's automation, and the security intelligence is a powerful feature."
"I want to have access to my computer from the outside and Kerio Control plays a role because it has a VPN... It is more reliable because it's a smaller group of computers to target for hackers and the like. The VPN works very well. I use it to work remotely very easily and exchange information, both to and from the location where it's deployed, and there have been no problems there."
"When one of the employees of my customers is using the VPN Client, I have created for them that they will always get a message. When the VPN Client connects to Kerio Control from the outside, they will get an email so they know when they are connected and when they are disconnected what is happening to their network."
"The user interface and the ease of use are pretty good. Everything fits together so nicely."
"I have found the most valuable features of Kerio Control to be the IPS and firewall."
"It is very comprehensive and simple. It has all the active protections. It's updated. We love that you can set how often it is updated so you can work what is right for you. A large company with a lot of bandwidth can update the virus definitions and security definitions hourly, if they want. A smaller site that's remote, where maybe updating the definitions will eat into the bandwidth, we can schedule those more to go later at night. It's very flexible and works for us in all types of situations. This is great because then we don't have to learn seven different products to be able to work with seven different scenarios."
"The installation is straightforward."
"We also like the security. We can control what sites users can go to and we can make sure that where they're going is appropriate and that it's work-related."
"The ease of use in the GUI itself is the most valuable feature. The GUI is really the best part of it. We like the traffic rules so we can control who can get to what. It's easy to determine the flow of the traffic itself so we aren't having to guess through command lines and reading out basically command-driven output. It's just a very easy-to-use interface. The interface is the best part of the product."
 

Cons

"I think that some initiation scripts might be helpful because they would make the configuration easier and more user-friendly for customers."
"I would like to see the sanctions lifted so we could use the full solution and have the speed increased."
"The inclusion of bandwidth management features would improve this product."
"Better integration with other products, such as a SIEM tool, would provide better peer visibility about your security posture."
"In the next release I would like to see better reporting. I also find it's hard to act on the data it gives you."
"Cisco can do better on their documentation because the product is really hard to understand."
"While the Management GUI and FMC could be improved, the devices themselves function well."
"The stability needs improvement so is rated a four out of ten."
"I would like to be able to automatically send email from Kerio Control and have it tell me what my external IPs are, because on one of my lines I have a fixed IP address and on the other it is variable. If there were a permanent way for me to figure out, "Okay, my current external VPN and my firm IP is this," it would help. I need to know the IP address to connect with the VPN and, at the moment, one of the lines sometimes changes its IP address without me knowing it. It's a hassle to figure out what it is."
"I would like to see geo-IP filtering added to the filtering rules. Incorporating these rules would be very beneficial if you have different ideas or reasons to filter, such as communication to the email server or specific websites."
"Improvements are needed to the Next Generation Firewall Protection, specifically with user-level protection."
"I would like it if the interface section had multiple failovers. Although I do have three connections, just in case our physical cables get disconnected, I can only set up one failover as a backup. So, if for some reason our fiber and our AFM went down together, I would have to have it search for our 4G modem. I'd love to have extra backups running."
"Kerio Control has just improved on their biggest problem, which was to introduce better support for high-availability requirements in production."
"I have had a few issues with HTTPS decryption. The solution also does not show the actual user's Internet usage."
"After the takeover by GFI, one of the things that Kerio built was MyKerio environment. This has not been very reliable because I get many messages that MyKerio is not functioning. For some reason, there are things that they changed and it is not very reliable at this moment, instead I have to connect to the firewall to see what is happening."
"Their support is getting better but still needs improvement."
 

Pricing and Cost Advice

"I would rate the pricing 4 out of 5."
"The cost of the license depends on the level of support that you have with Cisco."
"It could be less expensive."
"It is highly priced but competitive regarding features and support services."
"Cisco NGIPS is an expensive product."
"Cisco products are always expensive, but if you can afford the price then it's a great solution."
"I usually work with Fortinet and FortiGate which is a lower cost in comparison with Cisco NGIPS."
"The weakness of Cisco Firepower is the cost. Some of the customers see it as very expensive."
"It's pretty expensive in licensing costs, especially if you use the product longer than one or two years. The licensing costs are still high, which I don't think is reasonable for a product like this."
"Its licensing is yearly. You renew every year. Its price is all-inclusive."
"On the low-end device that I use, it has unlimited IP addresses. So, they have a subscription model where, on the higher models, you pay X dollars for 10 IP addresses. Then, if you want any more, you have to pay more on the model. On the low-end model, it has unlimited IP addresses, because if you have too many users, the thing will just slow you down and stop working. At some point, you need to say, "Okay, I've grown to a point where performance is impacted. I need to get some bigger hardware." If I get to that stage, I will possibly look at using one of the virtual appliances and putting it on some bigger hardware."
"The yearly maintenance fee is a bit high for the Kerio Control Boxes. The end of life for the devices is kind of short. It seems like they're making you upgrade within a short period of time. They should at least allow five years, but it seems like they are changing their end of life to be shorter to generate revenue."
"It is priced low enough for entry-level, but it has the power to grow with a company without them having to replace it."
"It gives us a lot. It does prove to be a very robust product for the cost."
"I pay approximately $50 for the solution on an annual basis."
"It gets expensive pretty quickly if you need to purchase license packs."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
802,829 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
20%
University
12%
Financial Services Firm
8%
Government
7%
Computer Software Company
23%
Media Company
9%
Financial Services Firm
8%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cisco NGIPS?
The product's initial setup phase was easy.
What needs improvement with Cisco NGIPS?
There are certain limitations that need to be addressed.
What do you like most about KerioControl?
The solution provides feasibility regarding cyber privacy.
What is your experience regarding pricing and costs for KerioControl?
KerioControl's pricing is reasonable. The license for KerioControl is annual. It's difficult to specify an exact cost since it varies depending on the number of users and additional software combin...
What needs improvement with KerioControl?
I would like to see geo-IP filtering added to the filtering rules. Incorporating these rules would be very beneficial if you have different ideas or reasons to filter, such as communication to the ...
 

Also Known As

Sourcefire NGIPS, Firepower NGIPS
No data available
 

Learn More

 

Overview

 

Sample Customers

American Electric Power, Huntington Bank, Keycorp, Nationwide, Transunion, Marriott, Inova Health, Ford, Thomson Reuters, Dow Chemical, Equifax, Chevron, Walmart, Coca Cola
Triton Technical, McDonald's
Find out what your peers are saying about Cisco Secure IPS (NGIPS) vs. KerioControl and other solutions. Updated: September 2024.
802,829 professionals have used our research since 2012.