No more typing reviews! Try our Samantha, our new voice AI agent.

KerioControl vs Netwrix Change Tracker vs Trellix Intrusion Prevention System comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of October 2026, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of KerioControl is 3.1%, up from 2.9% compared to the previous year. The mindshare of Netwrix Change Tracker is 1.4%, up from 0.5% compared to the previous year. The mindshare of Trellix Intrusion Prevention System is 3.1%, up from 2.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS) Mindshare Distribution
ProductMindshare (%)
Trellix Intrusion Prevention System3.1%
KerioControl3.1%
Netwrix Change Tracker1.4%
Other92.4%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…
reviewer2322963 - PeerSpot reviewer
Security Engineer at a tech services company with 11-50 employees
A stable solution that can be used for secure configuration management and file integrity monitoring
We use Change Tracker Gen7 R2 for secure configuration management and file integrity monitoring Whitelisting services are the most valuable feature of Change Tracker Gen7 R2. The solution could include more integrations. Change Tracker Gen7 R2 is a stable solution. The solution's initial setup…
BS
Large account Manager at Softcell Technologies Limited
Has offered reliable threat protection and detailed network insights but could expand features beyond existing capabilities
The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs). They track and collect data from APTs, which allows them to track malicious files entering the environment. The system offers inline prevention and real-time automatic blocking of malicious packets before they reach the network. It integrates with the Trellix ecosystem and provides application visibility and control. The solution provides deep insight into network traffic, applications, and protocols for better information. All packets coming through the application are analyzed and reported. They share intelligence updates regularly to protect from different malicious files and sector-specific threats. It supports both on-premise and cloud environments.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The anti-virus and perimeter security functionality minimizes vulnerabilities in our network and better secures our data, and this also decreases downtime of devices due to viruses and malware attacks."
"It prevents people from visiting undesirable sites and ensures that they use the internet for their designated jobs."
"The firewall appliance itself is the most valuable feature."
"The most valuable features include geo-tagging, which blocks all other IPs except for the specified accounts, and web filtering."
"Kerio is a lot clearer to set up to do particular things, whereas when I do it on a Cisco or a FortiGate I have to go fight with it per week sometimes to do something I can do in 20 minutes on Kerio."
"Kerio Control gives us everything we need in one product."
"From the old way we used to do things, it is night and day, and the efficiency has doubled."
"We have many customer sites and the solution gives us control over bandwidth internet."
"Change Tracker Gen7 R2 can be used in the health sector for compliance and can secure the patient's information."
"I have contacted the support once and the experience was good, I was satisfied."
"Whitelisting services are the most valuable feature of Change Tracker Gen7 R2."
"The solution is very stable, reliable, and free of bugs or glitches, and it does not crash or freeze."
"It's definitely more effective compared to the next-generation firewall that has a built-in IPS."
"The product is worth the investment."
"The most valuable features of the solution stem from the fact that it is a good product for dealing with DDoS attacks and for the inspection of network traffic."
"Great monitoring feature."
"The ability to centrally manage all the IPS sensors, track the different security events generated by it, and customize the different policies, depending on their location."
"It works very well overall, and is excellent for enterprise-level businesses."
"The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs)."
 

Cons

"The logs could be improved for better clarity."
"They should improve the remote connectivity feature for users."
"KerioControl has met some of the network infrastructure needs yet could improve in terms of scalability, which I rate four out of ten."
"Technical support is not the best. As an example, this past weekend I had an issue; it took me four days to get a hold of their support team, and I'm a premium client."
"The VPN features are the ones that we really like, but we are using a VPN client to be able to use them. We would like to have an SSL implementation for this same feature so we don't need to install anything on the client side. That's a feature I really miss and that should really be embedded in the product. We really would love to use it via a web browser."
"The trial duration of the product should be extended."
"Effectively, I can't use the WiFi facility in the appliance and had to purchase a separate web that supports VLANs."
"They should add wireless features."
"The solution could improve by being more secure and have better integration."
"The solution could include more integrations."
"The solution could improve some aspects of detection."
"Currently, the settings and confirmations on the McAfee console are complex and complicated for our branches."
"We would like to have a simpler version. Some settings and functions on the McAfee console are complex and complicated. I want the management console to be simpler."
"The Network Security Managers could be more stable, agile, and work faster. When it comes to instability, there is room for improvement."
"The technical support has room for improvement."
"I haven't seen threat intelligence and machine learning for predictive threat analysis in the Trellix Intrusion Prevention System yet."
"The area of concern where the tool needs improvement is how the product prompts users at a network level that helps prevent any wireless network attacks through alerts and notifications."
"The pricing could be improved."
 

Pricing and Cost Advice

"Our clients see ROI with Kerio Control, as they are saving bandwidth costs."
"Pricing is good, but the licensing took a lot of time."
"Its initial cost is less as compared to other products. It becomes a bit costly when you pay for the products that you don't use. We paid for almost all the products through subscription, but we are using only a few products. We use EndPointSecurity, Kerio Connect, WebMonitor, and LanGuard. We don't use the rest of the products."
"The fixed model of users and devices is a bit of a problem for us. We want to be able to expand it fast and not have to contact our supplier first to get a license... If they had a larger fixed price with unlimited users or devices, that would help. Now, it's five users each time. A pack of 100 or 200 users for a certain price would make it more dynamic and user-scalable."
"It's too expensive. The license, in the last year or so, has gone up by over a £100. We're almost being out-priced by the annual license at the minute."
"The price of Kerio Control could be better, it is a bit overpriced compared to other solutions."
"There is a yearly upkeep fee."
"It gets expensive pretty quickly if you need to purchase license packs."
"There is a license required for this solution."
"I rate the product’s pricing an eight out of ten."
"The tool is competitively priced."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
919,003 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
11%
Comms Service Provider
11%
Manufacturing Company
10%
Computer Software Company
10%
No data available
Manufacturing Company
11%
Comms Service Provider
8%
Construction Company
8%
Outsourcing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
No data available
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise6
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the p...
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use K...
Ask a question
Earn 20 points
What needs improvement with McAfee Network Security Platform?
Trellix Intrusion Prevention System does not provide virtual patching. Patching involves updates on the OS side to ad...
What is your primary use case for McAfee Network Security Platform?
We do not use Trellix Intrusion Prevention System; rather, we sell the Trellix Intrusion Prevention System solution. ...
What advice do you have for others considering McAfee Network Security Platform?
I have experience working with other tools, specifically Trellix solutions such as DLP, EDR, and MDR, as well as with...
 

Also Known As

No data available
NNT Change Tracker Enterprise
McAfee Network Security Platform, McAfee NSP, IntruShield Network Intrusion Prevention System, IntruShield Network IPS
 

Overview

 

Sample Customers

Triton Technical, McDonald's
US Army, Xerox, Hewlett Packard, LiveTV, Universal Studios, Guadalupe Valley Electric Cooperative, ACAS, Chanel, Live Nation, Union Bank, Ohio Valley Electric Corporation, Bank of China, Cornell University, Jetblue, Royal Albert Hall, Chaparral Energy, RyanAir
Desjardins Group, HollyFrontier, Nubia, Agbar, WNS Global Services, INAIL, Universidad de Las Américas Puebla (UDLAP), Cook County, China Pacific Insurance, Bank Central Asia, California Department of Corrections and Rehabilitation, City of Chicago, Macquarie Telecom, Sutherland Global Services, Texas Tech University Health Sciences Center, United Automotive Electronic Systems
Find out what your peers are saying about Fortinet, Darktrace, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS). Updated: September 2026.
919,003 professionals have used our research since 2012.