No more typing reviews! Try our Samantha, our new voice AI agent.

KerioControl vs Netwrix Change Tracker vs Trellix Intrusion Prevention System comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of September 2026, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of KerioControl is 3.1%, down from 3.2% compared to the previous year. The mindshare of Netwrix Change Tracker is 1.4%, up from 0.5% compared to the previous year. The mindshare of Trellix Intrusion Prevention System is 3.0%, up from 2.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS) Mindshare Distribution
ProductMindshare (%)
Trellix Intrusion Prevention System3.0%
KerioControl3.1%
Netwrix Change Tracker1.4%
Other92.5%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…
reviewer2322963 - PeerSpot reviewer
Security Engineer at a tech services company with 11-50 employees
A stable solution that can be used for secure configuration management and file integrity monitoring
We use Change Tracker Gen7 R2 for secure configuration management and file integrity monitoring Whitelisting services are the most valuable feature of Change Tracker Gen7 R2. The solution could include more integrations. Change Tracker Gen7 R2 is a stable solution. The solution's initial setup…
BS
Large account Manager at Softcell Technologies Limited
Has offered reliable threat protection and detailed network insights but could expand features beyond existing capabilities
The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs). They track and collect data from APTs, which allows them to track malicious files entering the environment. The system offers inline prevention and real-time automatic blocking of malicious packets before they reach the network. It integrates with the Trellix ecosystem and provides application visibility and control. The solution provides deep insight into network traffic, applications, and protocols for better information. All packets coming through the application are analyzed and reported. They share intelligence updates regularly to protect from different malicious files and sector-specific threats. It supports both on-premise and cloud environments.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Kerio Control gives us everything we need in one product."
"The fact that the setup is so easy is one of the solution's great selling points."
"Only trust in the product."
"The interface control manager where we can allocate LAN connections to certain VLANs is the most valuable feature. The other feature that's important for us is because obviously everything is remote with MyKerio, as long as the boat has an internet connection, we can log onto the Kerio and get statistics, as well as provide support."
"The most valuable features of Kerio Control are the IPS and traffic rules, the traffic rules are very user-friendly and the IPS is working well, and additionally, the anti-virus is effective with quick options, such as filtering."
"With Kerio, everything is just a bit more cohesive; everything fits together, and with Kerio, of course, everything is already there."
"The most valuable feature is the reliability of VPN capabilities. The VPN has been very reliable and secure. The security has been very good and the VPN connections are reliable in that they stay up. We don't have a lot of problems with downtime and that type of thing."
"The solution’s firewall and intrusion detection features are quite good because you can see exactly who is attacking you and who is getting blocked."
"I have contacted the support once and the experience was good, I was satisfied."
"Whitelisting services are the most valuable feature of Change Tracker Gen7 R2."
"Change Tracker Gen7 R2 can be used in the health sector for compliance and can secure the patient's information."
"We use a lot of the functions this solution provides such as the firewall and the ability to check aliases, and we can monitor and show the traffic that's moving in and out."
"The feature I found most valuable is the network threat analyzer in the security platform. It also integrates with GTI, or Global Threat Intelligence. Otherwise, I just use the basic features."
"It's definitely more effective compared to the next-generation firewall that has a built-in IPS."
"It works very well overall, and is excellent for enterprise-level businesses."
"The solution can scale."
"The solution is very stable, reliable, and free of bugs or glitches, and it does not crash or freeze."
"The most valuable features of the solution stem from the fact that it is a good product for dealing with DDoS attacks and for the inspection of network traffic."
"The initial setup is straightforward."
 

Cons

"The comprehensiveness of the security features could be improved upon. However, for the most part, it is pretty good. They could add more logs. I would like to see more detailed reporting, custom reporting from the logs, and more of a streamlined interface for certain aspects."
"The antivirus seemed to be a bit laggy on the connection so I disconnected that. It's definitely good. The only issue we've had with any sort of cyber attack seemed to be coming from a couple of distinct locations, people trying to get into known ports on remote desktops and stuff like that. The fact that we can block all that traffic is just great. It simplifies it."
"I would like for them to add more security features."
"Because of all the security features within Kerio Control, e.g., it can do a deep packet inspection, this can slow down the traffic."
"When we did our last update, we had some trouble with the initial syncing process to get our messaging to go through."
"Kerio Control could improve by having higher availability and adding a mobile VPN channel. These additions are needed. The VPN is working fine on the Kerio Control but there needs to be a VPN client on the mobile phones, both for iOS and Android. This would be very good for us."
"Kerio Control has just improved on their biggest problem, which was to introduce better support for high-availability requirements in production."
"If you put the appliance in Fail-Over mode it will simply FAIL, and will bypass your routing rules."
"The solution could improve by being more secure and have better integration."
"The solution could include more integrations."
"Currently, the settings and confirmations on the McAfee console are complex and complicated for our branches."
"Some of the documentation is not as straightforward as it could be. It's much too general - especially in areas related to updates."
"There are limited resources for configuration guidance."
"The deployment was a little difficult, I did it myself."
"We would like to have a simpler version. Some settings and functions on the McAfee console are complex and complicated. I want the management console to be simpler."
"The system isn't fool-proof. Sometimes, based on the network or other reasons, McAfee cannot detect the actual attack."
"I haven't seen threat intelligence and machine learning for predictive threat analysis in the Trellix Intrusion Prevention System yet."
"The solution needs to improve the graphical interface. And they had a limitation in some of the sensor modems as well."
 

Pricing and Cost Advice

"It gets expensive pretty quickly if you need to purchase license packs."
"Pricing is good, but the licensing took a lot of time."
"The fixed model of users and devices is a bit of a problem for us. We want to be able to expand it fast and not have to contact our supplier first to get a license... If they had a larger fixed price with unlimited users or devices, that would help. Now, it's five users each time. A pack of 100 or 200 users for a certain price would make it more dynamic and user-scalable."
"KerioControl's pricing is reasonable. The license for KerioControl is annual. It's difficult to specify an exact cost since it varies depending on the number of users and additional software combined with it. For example, a basic box might cover 25 users, but licenses can be purchased starting from 10 users."
"The price is fine."
"Our clients see ROI with Kerio Control, as they are saving bandwidth costs."
"Its price is fair. There are no additional costs."
"On the low-end device that I use, it has unlimited IP addresses. So, they have a subscription model where, on the higher models, you pay X dollars for 10 IP addresses. Then, if you want any more, you have to pay more on the model. On the low-end model, it has unlimited IP addresses, because if you have too many users, the thing will just slow you down and stop working. At some point, you need to say, "Okay, I've grown to a point where performance is impacted. I need to get some bigger hardware." If I get to that stage, I will possibly look at using one of the virtual appliances and putting it on some bigger hardware."
"There is a license required for this solution."
"The tool is competitively priced."
"I rate the product’s pricing an eight out of ten."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
912,565 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
11%
Comms Service Provider
11%
Computer Software Company
11%
Outsourcing Company
9%
No data available
Comms Service Provider
13%
Manufacturing Company
11%
Construction Company
8%
Outsourcing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
No data available
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise6
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the p...
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use K...
Ask a question
Earn 20 points
What needs improvement with McAfee Network Security Platform?
Trellix Intrusion Prevention System does not provide virtual patching. Patching involves updates on the OS side to ad...
What is your primary use case for McAfee Network Security Platform?
We do not use Trellix Intrusion Prevention System; rather, we sell the Trellix Intrusion Prevention System solution. ...
What advice do you have for others considering McAfee Network Security Platform?
I have experience working with other tools, specifically Trellix solutions such as DLP, EDR, and MDR, as well as with...
 

Also Known As

No data available
NNT Change Tracker Enterprise
McAfee Network Security Platform, McAfee NSP, IntruShield Network Intrusion Prevention System, IntruShield Network IPS
 

Overview

 

Sample Customers

Triton Technical, McDonald's
US Army, Xerox, Hewlett Packard, LiveTV, Universal Studios, Guadalupe Valley Electric Cooperative, ACAS, Chanel, Live Nation, Union Bank, Ohio Valley Electric Corporation, Bank of China, Cornell University, Jetblue, Royal Albert Hall, Chaparral Energy, RyanAir
Desjardins Group, HollyFrontier, Nubia, Agbar, WNS Global Services, INAIL, Universidad de Las Américas Puebla (UDLAP), Cook County, China Pacific Insurance, Bank Central Asia, California Department of Corrections and Rehabilitation, City of Chicago, Macquarie Telecom, Sutherland Global Services, Texas Tech University Health Sciences Center, United Automotive Electronic Systems
Find out what your peers are saying about Fortinet, Darktrace, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS). Updated: August 2026.
912,565 professionals have used our research since 2012.