No more typing reviews! Try our Samantha, our new voice AI agent.

KerioControl vs Netwrix Change Tracker vs Trellix Intrusion Prevention System comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of June 2026, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of KerioControl is 3.0%, down from 3.5% compared to the previous year. The mindshare of Netwrix Change Tracker is 1.2%, up from 0.4% compared to the previous year. The mindshare of Trellix Intrusion Prevention System is 3.0%, up from 2.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS) Mindshare Distribution
ProductMindshare (%)
Trellix Intrusion Prevention System3.0%
KerioControl3.0%
Netwrix Change Tracker1.2%
Other92.8%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…
reviewer2322963 - PeerSpot reviewer
Security Engineer at a tech services company with 11-50 employees
A stable solution that can be used for secure configuration management and file integrity monitoring
We use Change Tracker Gen7 R2 for secure configuration management and file integrity monitoring Whitelisting services are the most valuable feature of Change Tracker Gen7 R2. The solution could include more integrations. Change Tracker Gen7 R2 is a stable solution. The solution's initial setup…
BS
Large account Manager at Softcell Technologies Limited
Has offered reliable threat protection and detailed network insights but could expand features beyond existing capabilities
The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs). They track and collect data from APTs, which allows them to track malicious files entering the environment. The system offers inline prevention and real-time automatic blocking of malicious packets before they reach the network. It integrates with the Trellix ecosystem and provides application visibility and control. The solution provides deep insight into network traffic, applications, and protocols for better information. All packets coming through the application are analyzed and reported. They share intelligence updates regularly to protect from different malicious files and sector-specific threats. It supports both on-premise and cloud environments.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I am impressed with the tool's firewall filtering capacity."
"Technical support is good. They respond right away."
"The initial setup is a breeze."
"The anti-virus and perimeter security functionality minimizes vulnerabilities in our network and better secures our data, and this also decreases downtime of devices due to viruses and malware attacks."
"I love the VPN that we set up. A few of us have it on our computers so that if we leave, we can still access the stores. And we can work from home if needed. When I sign into that Kerio VPN, it links me like I'm sitting in the store. It puts me in our secure network so that I can sign on to each individual store and I can run numbers... If I have to work from home, it's so much faster than the way we used to do it."
"But for us, it covers almost everything we do with it, which makes it quite a suitable product for us."
"One very good thing about the Kerio device is its authentication. I don't have a Windows domain for authentication. Instead, I use the Kerio product because it can separate users by Mac addresses and give them IP addresses based on their usernames, automatically logging them in. This makes for a very simple authentication system."
"It just works, it does what it is meant to do."
"Whitelisting services are the most valuable feature of Change Tracker Gen7 R2."
"I have contacted the support once and the experience was good, I was satisfied."
"Change Tracker Gen7 R2 can be used in the health sector for compliance and can secure the patient's information."
"It's definitely more effective compared to the next-generation firewall that has a built-in IPS."
"The most valuable features are the customization of the signature and the unlimited amount of custom signatures in IPS."
"McAfee NSP is much more stable than Cisco."
"We use a lot of the functions this solution provides such as the firewall and the ability to check aliases, and we can monitor and show the traffic that's moving in and out."
"Great monitoring feature."
"Overall the solution is very good. It offers great protection and gives us a good overview of what is on the network."
"The most valuable features of the solution stem from the fact that it is a good product for dealing with DDoS attacks and for the inspection of network traffic."
"The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs)."
 

Cons

"There's also room for improvement in the Traffic Rules. We define networks to use a specific outgoing interface, say VSAT, shore, or marine WiFi, which is okay. But then all we have is a checkbox that says "Use other internet interfaces if this one is unavailable." What we would prefer would be to have a priority list. So if VSAT is unavailable, try to use 4G, etc. We haven't really found a reliable way of doing that in the current release."
"They don't provide content filtering when it comes to search engine results. We had an incident on the network where a blocked site was showing up in search results. We are in a school environment, so we have blocked a site with some of the explicit content so that kids wouldn't see it. When one of them did a search, the results came on the search engine part. When you try to drill down to the website, it blocks, but when you search by image, it brings up all the images. That's one of the reasons why we are looking at Juniper."
"I have had a few issues with HTTPS decryption. The solution also does not show the actual user's Internet usage."
"The VPN features are the ones that we really like, but we are using a VPN client to be able to use them. We would like to have an SSL implementation for this same feature so we don't need to install anything on the client side. That's a feature I really miss and that should really be embedded in the product. We really would love to use it via a web browser."
"One area that confused me a bit when I was building my current network. I use VLANs to have separate functionality on the network, and the appliance I got was the WiFi model, but I discovered that you can't assign WiFi channels to the VLAN. So, you can have WiFi, but its own subnet. You can't run that over the VLAN. Effectively, I can't use the WiFi facility in the appliance and had to purchase a separate web that supports VLANs. In the end, I had to go to GFI support. They confirmed this is just a limited functionality of that device, as it is a low-end device. I don't know if any of their high-end models have a better facility or not."
"I would like it if the interface section had multiple failovers. Although I do have three connections, just in case our physical cables get disconnected, I can only set up one failover as a backup. So, if for some reason our fiber and our AFM went down together, I would have to have it search for our 4G modem. I'd love to have extra backups running."
"Support responses need improvement."
"I can no longer renew my subscription directly with GFI but we have to go through third-party resellers like CDW. The first time I did it with CDW. I went to CDW and it was almost like they didn't even know anything. They didn't know what package I was supposed to get. Then after I got it, it took almost five days to get everything working."
"The solution could include more integrations."
"The solution could improve by being more secure and have better integration."
"The deployment was a little difficult, I did it myself."
"The area of concern where the tool needs improvement is how the product prompts users at a network level that helps prevent any wireless network attacks through alerts and notifications."
"The platform’s GUI could be the latest."
"The pricing could be improved."
"In terms of high-security attacks, not all of them are developed. You cannot do a rule that includes all high severities."
"The solution could improve some aspects of detection."
"The management component could be simplified."
"Currently, the settings and confirmations on the McAfee console are complex and complicated for our branches."
 

Pricing and Cost Advice

"Licensing is easier with Kerio Control. With FortiGate, we realized the licensing is really hectic, because if you skip one year, you have to back pay that year. If you skip two years, you have to back pay two years. With Kerio Control, if a license expires, one year later you can just reactivate and go on."
"The yearly maintenance fee is a bit high for the Kerio Control Boxes. The end of life for the devices is kind of short. It seems like they're making you upgrade within a short period of time. They should at least allow five years, but it seems like they are changing their end of life to be shorter to generate revenue."
"I think it is a bit on the pricey side, but it's okay. I've got 50 licenses which I think is $250 a year or something like that."
"It's too expensive. The license, in the last year or so, has gone up by over a £100. We're almost being out-priced by the annual license at the minute."
"The pricing is in-line with our expectations in terms of the quality that we get for it."
"I am living in Iran and we cannot buy the product from Kerio because of sanctions."
"GFI has made a stupid decision regarding small office licensing. For offices where there are only three to five employees and had five years towards a five user product, they now force these customers to a 10-year user license. I really don't understand it. It's a stupid decision for the small offices who want a good solution for security because they'll probably decide to go to another product. Why should they buy something that they don't use?"
"My advice is to use your own hardware, and do not use theirs."
"There is a license required for this solution."
"The tool is competitively priced."
"I rate the product’s pricing an eight out of ten."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
899,204 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Comms Service Provider
11%
Construction Company
10%
Financial Services Firm
8%
No data available
Manufacturing Company
12%
Comms Service Provider
11%
Financial Services Firm
9%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
No data available
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise6
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the p...
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use K...
Ask a question
Earn 20 points
What needs improvement with McAfee Network Security Platform?
Trellix Intrusion Prevention System does not provide virtual patching. Patching involves updates on the OS side to ad...
What is your primary use case for McAfee Network Security Platform?
We do not use Trellix Intrusion Prevention System; rather, we sell the Trellix Intrusion Prevention System solution. ...
What advice do you have for others considering McAfee Network Security Platform?
I have experience working with other tools, specifically Trellix solutions such as DLP, EDR, and MDR, as well as with...
 

Also Known As

No data available
NNT Change Tracker Enterprise
McAfee Network Security Platform, McAfee NSP, IntruShield Network Intrusion Prevention System, IntruShield Network IPS
 

Overview

 

Sample Customers

Triton Technical, McDonald's
US Army, Xerox, Hewlett Packard, LiveTV, Universal Studios, Guadalupe Valley Electric Cooperative, ACAS, Chanel, Live Nation, Union Bank, Ohio Valley Electric Corporation, Bank of China, Cornell University, Jetblue, Royal Albert Hall, Chaparral Energy, RyanAir
Desjardins Group, HollyFrontier, Nubia, Agbar, WNS Global Services, INAIL, Universidad de Las Américas Puebla (UDLAP), Cook County, China Pacific Insurance, Bank Central Asia, California Department of Corrections and Rehabilitation, City of Chicago, Macquarie Telecom, Sutherland Global Services, Texas Tech University Health Sciences Center, United Automotive Electronic Systems
Find out what your peers are saying about Fortinet, Darktrace, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS). Updated: May 2026.
899,204 professionals have used our research since 2012.