KerioControl vs Trellix Intrusion Prevention System comparison

GFI and Trellix are both solutions in the Intrusion Detection and Prevention Software (IDPS) category. GFI is ranked #15 with an average rating of 9.3, while Trellix is ranked #13 with an average rating of 8.0. GFI holds a 2.9% mindshare in ID, compared to Trellix’s 3.1% mindshare. Additionally, 88% of GFI users are willing to recommend the solution, compared to 94% of Trellix users who would recommend it.

KerioControl

Read 58 KerioControl reviews

6,514 Views
1,889 Comparison Views

88% willing to recommend

Trellix Intrusion Preventio...

Read 16 Trellix Intrusion Prevention System reviews

1,868 Views
1,663 Comparison Views

94% willing to recommend

KerioControl

Trellix Intrusion Preventio...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 19, 2024

KerioControl and Trellix Intrusion Prevention System compete in the network security space, serving different needs. KerioControl is favored for its ease of configuration, while Trellix stands out for its threat intelligence.

Features: KerioControl is notable for its user-friendly dashboard, easy VPN setup, and comprehensive content filtering that streamlines network management. It integrates hardware options for flexibility. Trellix excels with superior threat intelligence and real-time monitoring, ideal for environments where advanced detection is crucial.

Room for Improvement: KerioControl could improve its high availability and VPN configuration flexibility, and enhance its guest network interface. Trellix could refine network threat behavior analysis and simplify its management interface. Both need enhanced user-level threats detection.

Ease of Deployment and Customer Service: KerioControl supports on-premises, hybrid cloud, and public cloud deployments and is user-friendly during setup, though customer service can be slow post-acquisition. Trellix focuses on on-premises deployment, supported by effective technical support despite some responsiveness issues.

Pricing and ROI: KerioControl offers affordable and transparent pricing, benefiting small to medium businesses with a predictable ROI. Licensing can get expensive with more users but offers cost savings in SMB contexts. Trellix is competitive but may present cost barriers at larger scales, offering value in high-threat environments.

To learn more, read our detailed KerioControl vs. Trellix Intrusion Prevention System Report (Updated: April 2026).

Buyer's Guide

KerioControl vs. Trellix Intrusion Prevention System

April 2026

Download the complete report

Helped 896,034 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

KerioControl

Ranking in Intrusion Detection and Prevention Software (IDPS)

15th

Average Rating

8.2

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Firewalls (27th), Unified Threat Management (UTM) (8th)

Trellix Intrusion Preventio...

Ranking in Intrusion Detection and Prevention Software (IDPS)

13th

Average Rating

8.4

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of May 2026, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of KerioControl is 2.9%, down from 3.6% compared to the previous year. The mindshare of Trellix Intrusion Prevention System is 3.1%, up from 2.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Intrusion Detection and Prevention Software (IDPS) Mindshare Distribution
Product	Mindshare (%)
Trellix Intrusion Prevention System	3.1%
KerioControl	2.9%
Other	94.0%

Intrusion Detection and Prevention Software (IDPS)

Featured Reviews

Constantnos Achilleos

Product manger at Asbis Mediteranean

Leveraging geo-tagging and web filtering for enhanced network security

The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…

Read full review

Bhupesh-Sharma

Large account Manager at Softcell Technologies Limited

Has offered reliable threat protection and detailed network insights but could expand features beyond existing capabilities

The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs). They track and collect data from APTs, which allows them to track malicious files entering the environment. The system offers inline prevention and real-time automatic blocking of malicious packets before they reach the network. It integrates with the Trellix ecosystem and provides application visibility and control. The solution provides deep insight into network traffic, applications, and protocols for better information. All packets coming through the application are analyzed and reported. They share intelligence updates regularly to protect from different malicious files and sector-specific threats. It supports both on-premise and cloud environments.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features of KerioControl are ease of configuration, user-friendliness, and comfortable to use. It is an all-in-one solution, it comes with many features, such as a firewall, antivirus software, and network protection."

"The anti-virus and perimeter security functionality minimizes vulnerabilities in our network and better secures our data, and this also decreases downtime of devices due to viruses and malware attacks."

"It prevents people from visiting undesirable sites and ensures that they use the internet for their designated jobs."

"From the old way we used to do things, it is night and day, and the efficiency has doubled."

"The top features are ones that we're not using yet but we soon will be because we've just had broadband upgraded in Australia. We've got something called the National Broadband Network, which is forced onto you, so you have to take it when it arrives. We'll be trying the high availability out soon. We tried that with some load balancing, it didn't quite work as we expected, but I think that was more of a configuration thing rather than a product thing."

"All of the features of Kerio Control are equally good. Most valuable to us are the firewall rules, the intrusion detection system, and IP address features."

"The firewall and intrusion detection features are very useful these days because hackers have a lot of tricks that they use to get into a system. With Kerio Control you can see something that's happening. Otherwise, you have to use other tools to see what's happening on the firewalls. Having IPS in it is quite useful for us."

"I want to have access to my computer from the outside and Kerio Control plays a role because it has a VPN... It is more reliable because it's a smaller group of computers to target for hackers and the like. The VPN works very well. I use it to work remotely very easily and exchange information, both to and from the location where it's deployed, and there have been no problems there."

More KerioControl pros

"The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs)."

"The best feature of the Trellix Intrusion Prevention System is the rules that Trellix provides, I think that's the best value from IPS."

"It's definitely more effective compared to the next-generation firewall that has a built-in IPS."

"There's a good dashboard you can drill down into. It helps you easily locate intrusions and the source of attacks."

"It has a lot of functions, such as firewall, we create rules to protect our network, monitor traffic in and out, have disk encryption on-premises, and when we detect malware, we scan the PC and can delete or block it."

"The solution can scale."

"It has a lot of functions, such as firewall. We are administrators, and we create some rules to protect our network. We also monitor the traffic in and out and have disk encryption on-premises. When we detect malware, we scan for the virus on the PC. We can then delete or block the malware."

"The initial setup is straightforward."

More Trellix Intrusion Prevention System pros

Cons

"I would like to be able to inspect https packets for the purpose of virus scanning."

"One area that confused me a bit when I was building my current network. I use VLANs to have separate functionality on the network, and the appliance I got was the WiFi model, but I discovered that you can't assign WiFi channels to the VLAN. So, you can have WiFi, but its own subnet. You can't run that over the VLAN. Effectively, I can't use the WiFi facility in the appliance and had to purchase a separate web that supports VLANs. In the end, I had to go to GFI support. They confirmed this is just a limited functionality of that device, as it is a low-end device. I don't know if any of their high-end models have a better facility or not."

"It has a VPN back to our data center but I don't think it has increased the number of VPN clients extended to those outside our environment"

"Kerio Control has just improved on their biggest problem, which was to introduce better support for high-availability requirements in production."

"We'd like to have more integrations Kerio Operator."

"Effectively, I can't use the WiFi facility in the appliance and had to purchase a separate web that supports VLANs."

"I would like to be able to automatically send email from Kerio Control and have it tell me what my external IPs are, because on one of my lines I have a fixed IP address and on the other it is variable. If there were a permanent way for me to figure out, "Okay, my current external VPN and my firm IP is this," it would help. I need to know the IP address to connect with the VPN and, at the moment, one of the lines sometimes changes its IP address without me knowing it. It's a hassle to figure out what it is."

"Filtering of pages and greater personalization in services need improvement."

More KerioControl cons

"The Network Security Managers could be more stable, agile, and work faster."

"We would like to have a simpler version. Some settings and functions on the McAfee console are complex and complicated."

"In terms of high-security attacks, not all of them are developed. You cannot do a rule that includes all high severities."

"The pricing could be improved."

"Trellix Intrusion Prevention System does not provide virtual patching."

"The deployment was a little difficult, I did it myself."

"Integration with Global Thereat Intelligence could be better. Also, I think management solutions are end of life now at McAfee. Network threat analyzer may be used for endpoint quarantines. Integration between these sides, as well as endpoint APO, will help you quarantine the risky endpoints."

"The technical support must be improved."

More Trellix Intrusion Prevention System cons

Pricing and Cost Advice

"There's a one-time fee. For KerioConnect, it's just a server. With KerioControl, you have an option. You can virtualize it on a VMware system or have the hardware. I think mid-range or desktop KerioControl hardware could cost around 2000 dollars for a 25 user client. You need annual renewal for additional features like antivirus."

"The price of the solution is reasonable. For additional costs, you can add on more features such as antivirus."

"The yearly maintenance fee is a bit high for the Kerio Control Boxes. The end of life for the devices is kind of short. It seems like they're making you upgrade within a short period of time. They should at least allow five years, but it seems like they are changing their end of life to be shorter to generate revenue."

"My advice is to use your own hardware, and do not use theirs."

"It's too expensive. The license, in the last year or so, has gone up by over a £100. We're almost being out-priced by the annual license at the minute."

"It is a good fit for SMBs because of its maintainability. When you want to keep your costs low, then Kerio Control is a very good solution. It's not an expensive product that is well integrated. It has a complete set of features within it that make it a very strong product."

"Its price is fair. There are no additional costs."

"It's very affordable."

More KerioControl pricing and cost advice

"The tool is competitively priced."

"I rate the product’s pricing an eight out of ten."

See which vendors are best for you

Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.

See recommendations

896,034 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

14%

Comms Service Provider

12%

Financial Services Firm

Manufacturing Company

12%

Comms Service Provider

11%

Financial Services Firm

10%

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	9
Large Enterprise	3

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	6
Large Enterprise	6

Questions from the Community

What is your experience regarding pricing and costs for KerioControl?

KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the product is rated as ten out of ten.

See all answers

What needs improvement with KerioControl?

Regarding KerioControl's application awareness and control feature, I have not used it much.

See all answers

What is your primary use case for KerioControl?

With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use KerioControl as our solution.

See all answers

What needs improvement with McAfee Network Security Platform?

Trellix Intrusion Prevention System does not provide virtual patching. Patching involves updates on the OS side to address vulnerabilities, which is a different functionality. Trellix Intrusion Pre...

See all answers

What is your primary use case for McAfee Network Security Platform?

We do not use Trellix Intrusion Prevention System; rather, we sell the Trellix Intrusion Prevention System solution. The typical use case for our clients is to find out what vulnerable files exist....

See all answers

What advice do you have for others considering McAfee Network Security Platform?

I have experience working with other tools, specifically Trellix solutions such as DLP, EDR, and MDR, as well as with other Imperva tools. My team has worked with Trellix Intrusion Prevention Syste...

See all answers

Comparisons

Netgate pfSense vs KerioControl

Compared 11% of the time

Fortinet FortiGate vs KerioControl

Compared 10% of the time

OPNsense vs KerioControl

Compared 9% of the time

Sophos UTM vs KerioControl

Compared 8% of the time

Sophos Firewall vs KerioControl

Compared 4% of the time

More KerioControl Competitors

TrendAI Tipping Point vs Trellix Intrusion Prevention System

Compared 11% of the time

Palo Alto Networks Advanced Threat Prevention vs Trellix Intrusion Prevention System

Compared 11% of the time

Cisco Secure IPS (NGIPS) vs Trellix Intrusion Prevention System

Compared 10% of the time

Fortinet FortiGate vs Trellix Intrusion Prevention System

Compared 8% of the time

IBM Security Network IPS vs Trellix Intrusion Prevention System

Compared 5% of the time

More Trellix Intrusion Prevention System Competitors

Product Reports

Buyer's Guide

KerioControl

May 2026

Download KerioControl product report

Buyer's Guide

Trellix Intrusion Prevention System

May 2026

Trellix Intrusion Prevention System report

Download Trellix Intrusion Prevention System product report

Also Known As

No data available

McAfee Network Security Platform, McAfee NSP, IntruShield Network Intrusion Prevention System, IntruShield Network IPS

Overview

KerioControl is a comprehensive network security solution integrating firewall, antivirus, and VPN in an easy-to-use interface for small to medium businesses seeking robust protection.

KerioControl offers a blend of essential security features wrapped in a user-friendly graphical interface that enables effective network management. It supports firewall protection, intrusion detection, real-time monitoring, and flexible VPN capabilities ensuring high reliability and productivity. Despite being suitable for small to medium enterprises, improvements could enhance its overall performance, such as better GUI updates, stronger connectivity, and advanced VPN functionality. Common uses include unified threat management, bandwidth management, remote access, and web filtering.

What are the important features of KerioControl?

Ease of Use: Intuitive interface for effortless security management.
Firewall and VPN Integration: Combines essential security tools seamlessly.
Real-time Monitoring: Offers constant insight into network activities.
Intrusion Detection: Advanced system for prevention and alerts.
Bandwidth Management: Efficient allocation for optimized network usage.

What benefits and ROI should users consider?

Cost Savings: Economical security solution for smaller businesses.
Productivity Gains: Simplified management increases operational efficiency.
Enhanced Security: Comprehensive coverage with antivirus and malware protection.
Remote Access: Streamlined management of multiple sites and networks.

KerioControl is effectively implemented in industries needing strong security measures, supporting small to medium businesses in sectors like IT services, retail, and education. It's particularly well-suited for companies requiring efficient threat management and convenient internet service management across various sites.

GFI

Trellix Intrusion Prevention System provides robust network protection with signature-based detection, zero-day protection, and advanced threat prevention using machine learning and behavior analysis. It integrates with Trellix's ecosystem for detailed traffic insight and real-time threat blocking.

Businesses utilizing Trellix Intrusion Prevention System benefit from enhanced security in remote offices and data centers, comprehensive malware detection, and effective network monitoring. The system offers robust perimeter protection and Smart Blocking capabilities to detect and block harmful data. Companies favor Trellix for its endpoint security and vulnerability assessment functionalities. Despite its strong offerings, improvements are needed in AI-driven threat detection, user-friendliness of the management console, and flexibility in SaaS integration. Users highlight the absence of virtual patching and outdated GUI as areas for improvement.

What are the key features of Trellix Intrusion Prevention System?

Signature-Based Content: Delivers powerful detection of existing threats using pre-defined signatures.
Customization of Signatures: Allows businesses to tailor threat detection to their specific environment.
Zero-Day Protection: Detects and mitigates new threats that exploit unknown vulnerabilities.
Advanced ATP: Utilizes behavior analysis and machine learning for early threat identification.
Central Management: Provides streamlined operation and threat management.

What benefits can users find in reviews of Trellix Intrusion Prevention System?

Enhanced Security: Offers robust protection against diverse threats.
Effective Monitoring: Enables comprehensive oversight of network activities.
Real-Time Blocking: Helps immediately neutralize identified threats.
Threat Intelligence Updates: Keeps security measures up-to-date with the latest data.
Scalability: Supports growth with enterprise-level performance.

Trellix Intrusion Prevention System is implemented across industries such as finance, healthcare, and manufacturing for its ability to detect malware and enhance network safety. Its threat intelligence capabilities help sectors where data security and operational continuity are imperative, providing tailored protection solutions that align with specific industry needs.

Trellix

Sample Customers

Triton Technical, McDonald's

Desjardins Group, HollyFrontier, Nubia, Agbar, WNS Global Services, INAIL, Universidad de Las Américas Puebla (UDLAP), Cook County, China Pacific Insurance, Bank Central Asia, California Department of Corrections and Rehabilitation, City of Chicago, Macquarie Telecom, Sutherland Global Services, Texas Tech University Health Sciences Center, United Automotive Electronic Systems

Buyer's Guide

KerioControl vs. Trellix Intrusion Prevention System

April 2026

Free Report: KerioControl vs. Trellix Intrusion Prevention System

Find out what your peers are saying about KerioControl vs. Trellix Intrusion Prevention System and other solutions. Updated: April 2026.

DOWNLOAD NOW

896,034 professionals have used our research since 2012.

See our KerioControl vs. Trellix Intrusion Prevention System report.

See our list of best Intrusion Detection and Prevention Software (IDPS) vendors.

We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.