KerioControl vs Zscaler Cloud Firewall comparison

GFI and Zscaler are both solutions in the Firewalls category. GFI is ranked #29 with an average rating of 8.0, while Zscaler is ranked #24 with an average rating of 8.6. GFI holds a 1.5% mindshare in Firewalls, compared to Zscaler’s 0.4% mindshare. Additionally, 88% of GFI users are willing to recommend the solution, compared to 92% of Zscaler users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

KerioControl and Zscaler Cloud Firewall are two prominent network security solutions. Zscaler Cloud Firewall seems to have the upper hand due to its superior features, despite its higher price.

Features: KerioControl is noted for its robust security features, VPN capabilities, and an intuitive management system. Zscaler Cloud Firewall is recognized for its advanced threat protection, scalability, and cloud-based security measures.

Room for Improvement: KerioControl needs enhancements in reporting tools and integration options. Zscaler Cloud Firewall requires a simpler setup process and better user interface. Both solutions have areas to improve on, with Zscaler's complexity being a significant concern.

Ease of Deployment and Customer Service: KerioControl offers straightforward deployment with quick setups and responsive customer support. Zscaler Cloud Firewall has a complicated deployment process and slower customer service responses.

Pricing and ROI: KerioControl provides competitive pricing with a quicker return on investment, making it attractive for budget-conscious buyers. Zscaler Cloud Firewall, while more costly, offers a higher ROI thanks to its extensive features and cloud-oriented capabilities.

To learn more, read our detailed KerioControl vs. Zscaler Cloud Firewall Report (Updated: April 2025).

Buyer's Guide

KerioControl vs. Zscaler Cloud Firewall

April 2025

Download the complete report

Helped 848,270 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of April 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 21.1%, up from 17.7% compared to the previous year. The mindshare of KerioControl is 1.5%, up from 0.9% compared to the previous year. The mindshare of Zscaler Cloud Firewall is 0.4%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

Constantnos Achilleos

Product manger at Asbis Mediteranean

Leveraging geo-tagging and web filtering for enhanced network security

The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…

Read full review

Bhaskar Rao

Network manager admin at Yamaha

Though it helps deal with web traffic or any malicious traffic, it needs to work on its DC performance issues

The product's initial setup phase is moderate in level, so it is neither very complex nor very easy. For the deployment, my company first needs to gather all the requirements of the users and the domain names and consider how many users there are in the company. In the implementation and planning part, my company needs to consider what kind of policies we will create while ensuring that the policies are created based on the requirements of the users. There is a need to segregate the users' requirements since there are separate departments in the company, like the HR department, sales department, IT department, and manufacturing department, so that our company can create policies depending on their requirements. On-site, if you want a GRE tunnel, our company can handle GRE tunnel traffic routing and Zscaler Cloud Firewall, after which Zscaler will take action based on the policies created by our organization. For the deployments and maintenance, a team of five members consisting of two managers and three engineers is required.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution is highly scalable because they have devices that can handle a large amount of traffic."

"We use a lot of function on the IPS and it works well for us."

"FortiGate is more feature-rich and has a broader range of hardware. T"

"It performs very well."

"The most valuable features of the solution are SD-WAN, filtering testing applications, web filtering, and the new VPN."

"The most valuable feature of FortiGate is FortiView which provides proactive monitoring."

"Fortinet FortiGate is stable. It's used across all the countries, this is the way most multinationals run their system."

"It has very easy management and an amazing ETM configuration."

More Fortinet FortiGate pros

"The most valuable features of KerioControl are ease of configuration, user-friendliness, and comfortable to use. It is an all-in-one solution, it comes with many features, such as a firewall, antivirus software, and network protection."

"The traffic insight page or the administrative portal is really helpful because you can see all the internet usage down to the point where you can see if it's big files or streams. It gives us a good view of what the internet usage is of users who are coupled to an IP address. That way, if there are problems with, for example, a lot of data usage or problems with the connection, we can narrow it down to a single user or server and address the problem. It's really helpful for diagnostic data."

"What I like the most about Kerio is that I can use the software appliance as a solution, so if the hardware fails for any reason then I can quickly replace it with hardware that I have in stock."

"I did not face any issues with stability while using the tool's trial version."

"Compared to other solutions, accounting and live monitoring of firewall status are very good features in KerioControl."

"It is very comprehensive and simple. It has all the active protections. It's updated. We love that you can set how often it is updated so you can work what is right for you. A large company with a lot of bandwidth can update the virus definitions and security definitions hourly, if they want. A smaller site that's remote, where maybe updating the definitions will eat into the bandwidth, we can schedule those more to go later at night. It's very flexible and works for us in all types of situations. This is great because then we don't have to learn seven different products to be able to work with seven different scenarios."

"Kerio Control is easy to use and provides the ability to deliver customized solutions."

"The top features are ones that we're not using yet but we soon will be because we've just had broadband upgraded in Australia. We've got something called the National Broadband Network, which is forced onto you, so you have to take it when it arrives. We'll be trying the high availability out soon. We tried that with some load balancing, it didn't quite work as we expected, but I think that was more of a configuration thing rather than a product thing."

More KerioControl pros

"If malicious traffic attacks our on-premises servers, then it gets blocked by Zscaler Cloud Firewall."

"The technical support from Zscaler was excellent."

"It helps a lot of companies to reduce their downtime. Also, It helps businesses in terms of being secured and protected from any threats."

"Most of the features that Zscaler has to offer, we will deploy."

"Once you have Zscaler running you have access to configure it however you want."

"The solution offers good sandboxing."

"Zscaler Cloud Firewall understands the applications in the current generation and adapts to the present generation cloud applications."

"I like the ease of deployment and its flexibility. We don't need to deal with license, quotes, procurement, delivery, and installation. Everything is software-based, and it's very easy to operate."

More Zscaler Cloud Firewall pros

Cons

"Sometimes you do need to know some CLI commands, so it's a bit harder for technicians or new people that don't know it."

"The license renewal process, annual renewal price, and the web application firewall features should be improved."

"They've become quite expensive."

"Though the tool's GUI is user-friendly, it can be considered as an area with certain shortcomings where improvements are required."

"I would like to see improvements with the antivirus and IPS as they are not working properly all the time."

"It should have a better pricing plan. It is too expensive. It should also have a more granular view of the attack. I don't have FortiAnalyzer, and it is difficult for me to have a complete view when there is an attack on my server."

"The logging details need to be improved."

"Fortinet Fortigate could benefit by simplifying some of their processes."

More Fortinet FortiGate cons

"There were certain things I didn't know about it, but I've always been able to just contact our IT company. They've been able to walk me through certain things. It was quite a monumental task to set up a public site. Support really had to help me with setting up the VLANs and walk me through it. It was not possible for me to figure that out on my own, but that's what they're here for. That could have been a little bit easier laid out."

"The improvement that we are looking for is for when decide to move some part of our application to the cloud."

"I would like to be able to inspect https packets for the purpose of virus scanning."

"They should improve the remote connectivity feature for users."

"The product's technical support is not good as it used to be."

"One of the problems we do have causes problems with the VPN. The software slows the throughput down too much. You could have a one-gigabit connection from the internet, and it slows it down to the area of upload and download is extremely slow. There's too much content filtering at that point."

"Kerio Control has just improved on their biggest problem, which was to introduce better support for high-availability requirements in production."

"I would like to see geo-IP filtering added to the filtering rules. Incorporating these rules would be very beneficial if you have different ideas or reasons to filter, such as communication to the email server or specific websites."

More KerioControl cons

"Apart from the issues associated with the product in areas like the DC performance issues and DC failover, Zscaler Cloud Firewall's IP should not have a proxy IP."

"I don't have the visibility of a control dashboard or a network management system."

"They do not provide a few components that are fundamental to differentiate the products"

"Because it's on cloud, it doesn't allow application of extra settings."

"There are several areas for improvement. Firstly, the GUI is outdated, with noticeable lags and delays, especially when generating reports for past transactions."

"We are having some issues with internet access being denied when organizational ID-based policies change. For example, a lower level employee ends up getting the same level of access as that of a higher level employee."

"Zscaler Cloud Firewall should have a better understanding of all dynamic cloud applications."

"Data Leak Prevention is only for web filtering and there is no protection for email."

More Zscaler Cloud Firewall cons

Pricing and Cost Advice

"The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."

"It's very affordable."

"Pricing is lower than Cisco."

"The licensing scheme of Fortinet is better than Cisco. It is more logical."

"It is an inexpensive solution."

"Fortinet Secure SD-WAN delivered the lowest total cost of ownership (TCO) per Mbps among all other vendors."

"When you look at these end security systems and firewalls, these firewalls even five years ago were $50,000 or perhaps $25,000 to implement in some types of customer sites. Now we're talking about tools that are $1,000. In this case, it might have been $500 or something like that."

"Here in Brazil, we're going through difficult economic times and the tax on the dollar is high. All the solutions from minor competitors are growing in the market. The prices have come more competitive."

More Fortinet FortiGate pricing and cost advice

"There's a one-time fee. For KerioConnect, it's just a server. With KerioControl, you have an option. You can virtualize it on a VMware system or have the hardware. I think mid-range or desktop KerioControl hardware could cost around 2000 dollars for a 25 user client. You need annual renewal for additional features like antivirus."

"It's pretty expensive in licensing costs, especially if you use the product longer than one or two years. The licensing costs are still high, which I don't think is reasonable for a product like this."

"Its price is fair. There are no additional costs."

"Licensing is easier with Kerio Control. With FortiGate, we realized the licensing is really hectic, because if you skip one year, you have to back pay that year. If you skip two years, you have to back pay two years. With Kerio Control, if a license expires, one year later you can just reactivate and go on."

"The yearly maintenance fee is a bit high for the Kerio Control Boxes. The end of life for the devices is kind of short. It seems like they're making you upgrade within a short period of time. They should at least allow five years, but it seems like they are changing their end of life to be shorter to generate revenue."

"It gets expensive pretty quickly if you need to purchase license packs."

"There is a yearly upkeep fee."

"KerioControl's pricing is good."

More KerioControl pricing and cost advice

"There are different subscription models available."

"The product is a bit expensive compared to the solutions offered by its competitors, like Palo Alto. There is a need to make yearly payments towards the license in charges associated with the product."

"The licensing is on a yearly basis. It is somewhere around 30 or 40 pounds per user for our organization."

"On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing an eight out of ten."

"Zscaler is priced too high compared to the cost of Fortinet."

"It is expensive for small businesses."

"There is an annual license required for the use of the Zscaler Cloud Firewall."

"It is not the most budget-friendly solution, but it's important to consider its overall value."

More Zscaler Cloud Firewall pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

848,270 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

21%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Computer Software Company

23%

Comms Service Provider

Financial Services Firm

Media Company

Computer Software Company

13%

Financial Services Firm

12%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about KerioControl?

The solution provides feasibility regarding cyber privacy.

See all answers

What is your experience regarding pricing and costs for KerioControl?

KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the p...

See all answers

What needs improvement with KerioControl?

The logs could be improved for better clarity. It is difficult to understand when there is a threat attack, and handl...

See all answers

Which lesser known firewall product has the best chance at unseating the market leaders?

Netscope, Zscaler if they continue route they are on now. FIrewalls needs great deal of automation on each end, datac...

See all answers

What do you like most about Zscaler Cloud Firewall?

The product’s firewall and VPN package are fantastic compared to any other solution.

See all answers

What is your experience regarding pricing and costs for Zscaler Cloud Firewall?

The product is a bit expensive compared to the solutions offered by its competitors, like Palo Alto. There is a need ...

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 22% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 13% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 5% of the time

More Fortinet FortiGate Competitors

Netgate pfSense vs KerioControl

Compared 32% of the time

OPNsense vs KerioControl

Compared 14% of the time

Sophos XG vs KerioControl

Compared 7% of the time

Cisco Secure Firewall vs KerioControl

Compared 6% of the time

Sophos UTM vs KerioControl

Compared 6% of the time

More KerioControl Competitors

Azure Firewall vs Zscaler Cloud Firewall

Compared 17% of the time

OPNsense vs Zscaler Cloud Firewall

Compared 11% of the time

Check Point NGFW vs Zscaler Cloud Firewall

Compared 9% of the time

Palo Alto Networks NG Firewalls vs Zscaler Cloud Firewall

Compared 6% of the time

Cisco Multicloud Defense vs Zscaler Cloud Firewall

Compared 5% of the time

More Zscaler Cloud Firewall Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

April 2025

Download Fortinet FortiGate product report

Buyer's Guide

KerioControl

April 2025

Download KerioControl product report

Buyer's Guide

Zscaler Cloud Firewall

March 2025

Download Zscaler Cloud Firewall product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

No data available

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Kerio Control is a popular security product for small and medium-sized businesses. It is a next-generation firewall that provides unified threat management without complexity. Kerio Control provides advanced anti-virus protection and industry-leading web and content application filtering, and has a secure VPN.

With Kerio Control you can:

Preserve the integrity of your network.
Manage bandwidth to streamline traffic flows.
Improve productivity with filtering capabilities.

Kerio Control Features

Some of Kerio Control’s most valuable features include:

High availability, deployment flexibility, deep packet inspection, advanced routing, usage reporting, quick administering, intrusion detection and prevention (IPS), gateway anti-virus, VPN, web and content application filtering, and centralized administration with MyKerio.

Kerio Control Benefits

Eliminate downtime risks: Because Kerio Control offers high availability and failover protection, you can eliminate the risk and cost of connectivity or threat protection downtime.
Detailed reports: Kerio Control makes it easy to view individual users’ internet activity through detailed reports.
Traffic monitoring: Traffic monitoring allows you to manage bandwidth and makes it possible for you to control access to streaming video and peer-to-peer networks.
Server protection: Using Kerio Control’s advanced networking routing and deep packet inspection, you can protect servers.
Easily create policies: With Kerio Control, you can create both inbound and outbound traffic policies, and can also restrict communication by specific URLs, applications, traffic type, content category, or even time of day.
Snort-based analysis: Kerio Control gives you the ability to add a transparent layer of intrusion prevention with snort-based analysis along with a database of rule and blacklisted IP addresses that is regularly refreshed.
Optionally integrated anti-virus: WIth this feature, you can prevent viruses, Trojans, or spyware from entering your networks.

Reviews from Real Users

Here is some feedback from some of our users who are currently using the solution:

PeerSpot user Brian C., Senior Technology Specialist, VP at Unified Technology Solutions, writes "It is very comprehensive and simple. It has all the active protections. It's updated. We love that you can set how often it is updated so you can work on what is right for you. A large company with a lot of bandwidth can update the virus definitions and security definitions hourly, if they want. A smaller site that's remote, where maybe updating the definitions will eat into the bandwidth, we can schedule those more to go later at night. It's very flexible and works for us in all types of situations. This is great because then we don't have to learn seven different products to be able to work with seven different scenarios."

Andy D., IT Manager at Flare Technologies, praises how easy it is to use and says, "One thing we use quite a lot, as well, is the DHCP Server, because we do a lot of work where all our devices need to have static IP addresses. Rather than going around and configuring every box, we do it all through DHCP reservations. It's easier. We've got a record of it. We can manipulate it if we need to change something or change some hardware. It's all easy. Even guys who are not used to using it can pick it up quite quickly."

GFI

Zscaler enables the world’s leading organizations to securely transform their networks and applications for a mobile and cloud first world. Its flagship services, Zscaler Internet Access and Zscaler Private Access, create fast, secure connections between users and applications, regardless of device, location, or network. Zscaler services are 100% cloud-delivered and offer the simplicity, enhanced security, and improved user experience that traditional appliances or hybrid solutions are unable to match. Used in more than 185 countries, Zscaler operates the world’s largest cloud security platform, protecting thousands of enterprises and government agencies from cyberattacks and data loss.

Check more details: https://www.zscaler.com/produc...

Zscaler

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Triton Technical, McDonald's

Zenith Live, Azure, Carlsberg Group

Buyer's Guide

KerioControl vs. Zscaler Cloud Firewall

April 2025

Free Report: KerioControl vs. Zscaler Cloud Firewall

Find out what your peers are saying about KerioControl vs. Zscaler Cloud Firewall and other solutions. Updated: April 2025.

DOWNLOAD NOW

848,270 professionals have used our research since 2012.

See our KerioControl vs. Zscaler Cloud Firewall report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.