KerioControl Reviews

Vendor: GFI

4.1 out of 5

57 reviews
88% willing to recommend

604 followers

What is KerioControl?

Kerio Control is a popular security product for small and medium-sized businesses. It is a next-generation firewall that provides unified threat management without complexity. Kerio Control provides advanced anti-virus protection and industry-leading web and content application filtering, and has a secure VPN.

Get the KerioControl Buyer's Guide and find out what your peers are saying about KerioControl, Fortinet FortiGate, Netgate pfSense and more!

KerioControl is the #11 ranked solution in top Unified Threat Management (UTM) solutions, #15 ranked solution in top Intrusion Detection and Prevention Software, and #25 ranked solution in best firewalls. PeerSpot users give KerioControl an average rating of 8.2 out of 10. Based on the analysis of the 57 most recent KerioControl reviews, the overall sentiment is positive, with a sentiment score of 7.3. KerioControl is most commonly compared to Fortinet FortiGate: KerioControl vs Fortinet FortiGate. KerioControl is popular among the large enterprise segment, accounting for 39% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 23% of all views.

Helped 817,354 peers since 2012

Featured reviews

Constantnos Achilleos

Product manger at Asbis Mediteranean

The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…

Read full review

Andy Dibble

IT Manager at Flare Technologies

Sometimes it might not be detailed enough, or it might have more details but the customers just don't know where to look. The issue is usually when it comes to specific packets. Sometimes they find it slightly difficult to see exactly what's going on. For example, we had a customer who was using the content filter. They tried to block Facebook using the web filter categories, and in combination with that they wanted to always require that a user was authenticated before accessing web pages. What would happen was that even though they had the content filter enabled to block social networking — Facebook may even be a category — it still allowed them to get in through mobile apps. If they went to the website, it would prompt them for login and then it would deny it, but they would get into the app and they weren't even logged in. That might have been an HTTPS issue and the way that the app was talking, rather than an actual website or what page. We always managed to find a way around. They'll come to us with a question and then we'll figure it out and usually they're happy enough with that. There's also room for improvement in the Traffic Rules. We define networks to use a specific outgoing interface, say VSAT, shore, or marine WiFi, which is okay. But then all we have is a checkbox that says "Use other internet interfaces if this one is unavailable." What we would prefer would be to have a priority list. So if VSAT is unavailable, try to use 4G, etc. We haven't really found a reliable way of doing that in the current release. Finally, the customers sometimes want to use the VPN link for outbound traffic. But at the moment, it appears that there is an all-or-nothing solution, so either everything uses the VPN and breaks out at the remote site or nothing does. The simple example is for the email system we've put in. We can direct traffic in over the VPN, but we'd also like to send that same email traffic out of their server over the VPN to break out on a specific IP address in our data center. We would like to see a little bit of functionality in prioritizing of internet interfaces.

Read full review

Arie De Kruijf

EMP Specialist at Global EPM BV

The content filtering in the product is pretty sensitive to configure as all content is being scanned. It can take quite some time to find out what content you want to scan. For example, if you use words for scanning content, there are some words that you really can't scan for because they are synonyms and can be used in all kinds of communications. Therefore you get false positives where it finds the word, but it's actually a case that you should ignore. That makes it a bit difficult to use it. The VPN features are the ones that we really like, but we are using a VPN client to be able to use them. We would like to have an SSL implementation for this same feature so we don't need to install anything on the client side. That's a feature I really miss and that should really be embedded in the product. We really would love to use it via a web browser. Another area for improvement is to be able to import users from a single text file. That functionality is really not developed enough and it is not easy to bulk-import users into a firewall. Finally, if you use a firewall product with a certificate, you can only use one VPN client on one domain name. So if I would serve multiple clients with one firewall, I cannot use different domain names. For example, if I put in the domain name test.com as a certificate name in the firewall, then all users, even if they are using it from different companies, have to use that certificate name as their client settings. That's really not appreciated. We would like to set up a firewall with unlimited users and use it for multiple smaller customers. Those companies use a service from us and we could use one firewall for that, but we can't, simply because we can only use one certificate. We can't use the name of the company with other companies. That's a lack of a feature and we miss it.

Read full review

KerioControl mindshare

Product category:

As of December 2024, the mindshare of KerioControl in the Firewalls category stands at 1.5%, up from 0.9% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Firewalls

Key learnings from peers

Last updated Nov 14, 2024

Valuable Features

KerioControl's most valuable features include ease of use and configuration, firewall and intrusion detection, VPN capabilities, comprehensive security, traffic shaping, robust reporting, and two-factor authentication. Users appreciate bandwidth management, traffic rules, VLAN options, content filtering, and IP address flexibility. The system's real-time monitoring, stability, integration with Active Directory, and manageability make it ideal for various infrastructures. Additionally, KerioControl offers automated security updates and a user-friendly interface.

"The most valuable features include geo-tagging, which blocks all other IPs except for the specified accounts, and web filtering."
"The solution has an app manager and a portal where you can maintain all your Keri products. It is a firewall that includes antivirus and anti-malware, which adds security. The VPNs, both site-to-site and client VPNs, are pretty easy to set up."
"The tool shows what has been blocked externally. It's very good because once installed and correctly set up, it allows you to work from home as if you are in the office, without any errors or issues. It's very simple to use, click to connect or disconnect."

Room for Improvement

KerioControl users highlight several areas for improvement, including VPN configuration and the need for more GUI options. Support services require enhancements, with some experiencing delays or insufficient assistance. Users desire increased security features, flexible VLAN configurations, enhanced content filtering, and detailed logging. High availability, improved diagnostic tools, and updates to address system bugs are necessary. The complexity of certain features poses challenges for novice users, suggesting a need for a simpler interface. Performance issues and hardware design also warrant attention.

"KerioControl has met some of the network infrastructure needs yet could improve in terms of scalability, which I rate four out of ten."
"The logs could be improved for better clarity."
"The solution's hardware is not that great and could use more improvement. However, the VM software and the virtualized KerioControl itself are pretty good. The software is good; it's just the hardware that needs improvement."

ROI

KerioControl users report significant cost savings and efficiency improvements. Many experience reduced internet bandwidth expenses and decreased time managing security, benefiting from seamless VPN capabilities and remote access. Investments in KerioControl allow fewer errors and secure connections, leading to improved productivity and cost-effective security. Customers note that the ease of use and minimal downtime contribute positively to overall network management. Some express concerns over licensing costs but appreciate the reliable performance.

Pricing

KerioControl's pricing is generally considered affordable and reasonable, especially for small to medium-sized businesses. Many users appreciate the cost-effectiveness, particularly when purchasing through GFI Unlimited, offering comprehensive options. The licensing process, however, can be complex, with fees determined by the number of users and IP addresses, and some users find setup and subscription clear yet occasionally costly. Annual licensing or renewal fees apply, and optional feature upgrades may involve additional costs. Discounts are available for larger user bases.

"There's a one-time fee. For KerioConnect, it's just a server. With KerioControl, you have an option. You can virtualize it on a VMware system or have the hardware. I think mid-range or desktop KerioControl hardware could cost around 2000 dollars for a 25 user client. You need annual renewal for additional features like antivirus."
"KerioControl's pricing is reasonable. The license for KerioControl is annual. It's difficult to specify an exact cost since it varies depending on the number of users and additional software combined with it. For example, a basic box might cover 25 users, but licenses can be purchased starting from 10 users."
"We have to pay approximately EUR 175 for the product."

Popular Use Cases

KerioControl is primarily utilized for comprehensive network security, including firewalls, intrusion prevention, and web filtering. Users leverage its VPN capabilities for secure remote access and site-to-site connectivity. It effectively manages bandwidth and provides user statistics, making it ideal for small to medium businesses. Clients maximize internet connections on superyachts and use it in data centers for EPM platforms. It supports firewall functionality, content filtering, and reliable antivirus protection while offering easy management.

Service and Support

Customers find KerioControl support mixed. Some experience slow response times, while others say it's responsive and helpful. Many note that support quality declined after GFI's takeover, leading to more difficult access and less personalized assistance. Users often rely on online resources or resolve issues independently due to inconveniences in communication. Some regions report inadequate local support, and premium clients express dissatisfaction with delayed responses. Despite these issues, a segment still finds the support satisfactory.

Deployment

Many describe KerioControl's initial setup as straightforward and user-friendly, often taking one to two hours. Some mention a short setup time, while others note the need for adjustments or complexities based on individual requirements. Deployment can vary from 10 minutes to several hours, with factors like the environment affecting duration. Users emphasize the intuitive interface and minimal time needed for maintenance, stating that even complex setups become manageable with experience.

Scalability

KerioControl is effective for small to medium-sized enterprises, handling various setups with ease. Users report it scales adequately within certain limits, supporting hundreds of connections. On virtual appliances, expansion is simpler, but hardware appliances may need upgrades for increased demands. Organizations say KerioControl maintains network functionality and integrates seamlessly, though not suitable for scaling to large enterprise networks without challenges. Its flexibility and performance are valued, though some users mention limitations in advanced scalability features.

Stability

KerioControl generally exhibits strong stability, particularly in Load-Balancing mode, with frequent updates enhancing its performance. Several users noted minor issues, often related to hardware rather than the software itself. Occasional reboots or adjustments might be necessary, but the software's reliability is widely appreciated. Some users experienced glitches or required restarts, but KerioControl's resilience and overall functionality received praise. Most found it robust, with some acknowledging hardware-related problems rather than software faults.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our KerioControl Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

23%

Media Company

Financial Services Firm

Manufacturing Company

Comms Service Provider

Retailer

Government

Wholesaler/Distributor

Hospitality Company

Educational Organization

Real Estate/Law Firm

University

Insurance Company

Outsourcing Company

Healthcare Company

Consumer Goods Company

Construction Company

Legal Firm

Energy/Utilities Company

Non Profit

Recreational Facilities/Services Company

Performing Arts

Marketing Services Firm

Leisure / Travel Company

Logistics Company

Cloud Solution Provider

Transportation Company

Compare KerioControl with alternative products

Learn more about KerioControl

With Kerio Control you can:

Preserve the integrity of your network.
Manage bandwidth to streamline traffic flows.
Improve productivity with filtering capabilities.

Kerio Control Features

Some of Kerio Control’s most valuable features include:

High availability, deployment flexibility, deep packet inspection, advanced routing, usage reporting, quick administering, intrusion detection and prevention (IPS), gateway anti-virus, VPN, web and content application filtering, and centralized administration with MyKerio.

Kerio Control Benefits

Eliminate downtime risks: Because Kerio Control offers high availability and failover protection, you can eliminate the risk and cost of connectivity or threat protection downtime.
Detailed reports: Kerio Control makes it easy to view individual users’ internet activity through detailed reports.
Traffic monitoring: Traffic monitoring allows you to manage bandwidth and makes it possible for you to control access to streaming video and peer-to-peer networks.
Server protection: Using Kerio Control’s advanced networking routing and deep packet inspection, you can protect servers.
Easily create policies: With Kerio Control, you can create both inbound and outbound traffic policies, and can also restrict communication by specific URLs, applications, traffic type, content category, or even time of day.
Snort-based analysis: Kerio Control gives you the ability to add a transparent layer of intrusion prevention with snort-based analysis along with a database of rule and blacklisted IP addresses that is regularly refreshed.
Optionally integrated anti-virus: WIth this feature, you can prevent viruses, Trojans, or spyware from entering your networks.

Reviews from Real Users

Here is some feedback from some of our users who are currently using the solution:

PeerSpot user Brian C., Senior Technology Specialist, VP at Unified Technology Solutions, writes "It is very comprehensive and simple. It has all the active protections. It's updated. We love that you can set how often it is updated so you can work on what is right for you. A large company with a lot of bandwidth can update the virus definitions and security definitions hourly, if they want. A smaller site that's remote, where maybe updating the definitions will eat into the bandwidth, we can schedule those more to go later at night. It's very flexible and works for us in all types of situations. This is great because then we don't have to learn seven different products to be able to work with seven different scenarios."

Andy D., IT Manager at Flare Technologies, praises how easy it is to use and says, "One thing we use quite a lot, as well, is the DHCP Server, because we do a lot of work where all our devices need to have static IP addresses. Rather than going around and configuring every box, we do it all through DHCP reservations. It's easier. We've got a record of it. We can manipulate it if we need to change something or change some hardware. It's all easy. Even guys who are not used to using it can pick it up quite quickly."