No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point Harmony SASE (formerly Perimeter 81) vs KerioControl comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.9
Fortinet FortiGate offers a high ROI through enhanced productivity, efficiency, security, cost savings, and simplified management.
Sentiment score
6.1
Check Point Harmony SASE users see cost savings, productivity boosts, and security improvements, though some find returns complex to quantify.
Sentiment score
6.8
KerioControl delivered significant financial benefits through bandwidth optimization, VPN efficiency, and reduced support, maintenance, and security expenses.
The automation part is giving us a cost benefit and speed; we can react faster.
BDM Fortinet & BDM Teamlead at Exclusive Networks
It's a very useful tool to mitigate and protect your enterprise.
Staff Infrastructure & Security Engineer at Mozn Systems
When investing in cybersecurity with Fortinet FortiGate 200, which costs more than $10,000, companies that are growing directly can expect ROI within 1.5 to 3 years.
Manager, Information Technology Operation/Presales at TechMonarch
Check Point Harmony SASE (formerly Perimeter 81) blocked access to those URLs at the network level before users could click through.
Pre Sales Consultant at Redington Group
We are saving 40% of our time, which is good.
Cloud Security Engineer at Punch Powertrain nv
 

Customer Service

Sentiment score
6.5
Fortinet FortiGate's 24/7 support is generally well-rated but needs improvement in response speed for urgent issues.
Sentiment score
7.0
Check Point Harmony SASE provides responsive, knowledgeable, and professional support, with most users expressing high satisfaction despite occasional delays.
Sentiment score
5.3
KerioControl support receives mixed reviews, with some praise but many report slow responses and reliance on online communities.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
IT Manager at a consultancy with 10,001+ employees
I would rate the technical support for Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
Manager, Information Technology Operation/Presales at TechMonarch
I would rate support 10 out of 10.
Pre Sales Consultant at Redington Group
People working really hard, listening to every issue and request, and replying within hours.
Security Support Engineer at a tech vendor with 51-200 employees
I have never needed to contact customer support as the product is easy to use.
Product manger at Asbis Mediteranean
 

Scalability Issues

Sentiment score
7.1
Fortinet FortiGate is praised for scalability and adaptability across enterprises, though some users face cloud scaling and upgrade challenges.
Sentiment score
7.8
Check Point Harmony SASE offers impressive scalability and flexibility, smoothly adapting to growing user bases and organizational needs.
Sentiment score
6.7
KerioControl suits small to medium businesses but faces scalability issues in larger enterprises, requiring hardware upgrades for increased capacity.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
IT Manager at Daltons Limited
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
Cewa Solutions Architect at a tech services company with 11-50 employees
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
General Surgery Specialist at Helwan University Cairo
The cloud-native model ensures we are not tied to any specific location or hardware, which has been a great game changer in terms of agility.
Pre Sales Consultant at Redington Group
I would rate it nine out of ten for scalability.
Cloud Security Engineer at Punch Powertrain nv
Check Point Harmony SASE's scalability is good; it can handle growth easily, allowing me to easily add another region and gateway to have more people join in.
Security Support Engineer at a tech vendor with 51-200 employees
KerioControl has met some of the network infrastructure needs yet could improve in terms of scalability.
Product manger at Asbis Mediteranean
 

Stability Issues

Sentiment score
7.7
Fortinet FortiGate offers reliable and consistent performance, with quick resolution for occasional bugs, ensuring minimal downtime and high availability.
Sentiment score
7.7
Check Point Harmony SASE is praised for stability, reliability, and minimal issues, with high uptime and efficient performance.
Sentiment score
7.2
KerioControl is stable and reliable, with minor hardware or update challenges, and performs well according to user assessments.
We're experiencing 99.999% availability consistently.
Manager, Information Technology at a consumer goods company with 11-50 employees
I would rate the stability of Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
CISO at a financial services firm with 1,001-5,000 employees
There are some lags and glitches with connectivity, so I would rate the stability as between seven or eight out of ten.
Cloud Security Engineer at Punch Powertrain nv
After the last improvement, I can say it is much more stable now.
Technical Lead at Netsmart
Check Point Harmony SASE is stable most of the time, but there are still some issues that are hard to troubleshoot.
Security Support Engineer at a tech vendor with 51-200 employees
 

Room For Improvement

Fortinet FortiGate users face high costs, integration and stability issues, sluggish support, and need improvements in usability and security features.
Check Point Harmony SASE needs improvements in performance, user interface, integration, documentation, scalability, and features like SD-WAN and firewalls.
KerioControl requires improvements in VPN, user interface, support, security, performance, and customization features for large networks.
It would be better for customers to get immediate replacements even with a standard subscription.
Director at a tech services company with 11-50 employees
It is how quickly each of these companies adapts to that and brings in more value to the customer.
Principal Consultant at Epitome Infotech Solutions (P) Ltd
The main area for improvement in Fortinet FortiGate is the firmware versions, as we face uncertainties regarding upgrades and frequent bugs that require self-fixing of problems.
Senior Manager IT at a tech services company with 1,001-5,000 employees
A local data center in Turkey would enhance the product, as currently, our Internet traffic goes to another country, which is problematic for us.
Technical Lead at Netsmart
One area for improvement is integration with third-party identity providers.
Pre Sales Consultant at Redington Group
The product is lacking features that other competitors have, making it quite challenging to migrate customers to this solution because it feels very much unfinished.
Security Support Engineer at a tech vendor with 51-200 employees
 

Setup Cost

Fortinet FortiGate is cost-effective with a good feature set, ideal for mid to large enterprises, though complex licensing.
Check Point Harmony SASE offers competitive value for large enterprises, though its pricing isn't the cheapest for smaller firms.
KerioControl offers affordable pricing with complex licensing, appreciated features, but high annual fees can be challenging for small offices.
It offers cost savings as it is generally cheaper than the competition.
IT Infrastructure Architect at Apotek 1
It is about 20% cheaper.
Network Security Engineer at TD SYNNEX
The advantages of Fortinet FortiGate over its competitors include good pricing and meeting our requirements at a lower cost.
Information Technology Infrastructure Section Head at a consumer goods company with 11-50 employees
Cost efficiency is a consideration, as SASE products are not the cheapest security products.
Technical Lead at Netsmart
The cost is a bit expensive for most users.
Security Engineer at a tech vendor with 51-200 employees
It is a bit expensive.
Cloud Security Engineer at Punch Powertrain nv
The price for the product is rated as ten out of ten.
Product manger at Asbis Mediteranean
 

Valuable Features

Fortinet FortiGate offers robust security, ease of use, and integration, with cost-effectiveness and reliable support, enhancing network efficiency.
Check Point Harmony SASE offers secure, efficient, and centralized network management with real-time threat intelligence and zero trust access.
KerioControl provides user-friendly navigation, robust security features, VPN support, and efficient network management with positive feedback on ease of use.
They put in a thing called the FortiCookbook, which is very easy to read with real-life scenarios that make networking tasks like joining networks very straightforward.
IT Manager at Daltons Limited
The firewall and VPN features are the most valuable in protecting our customers' networks.
Sales & Support at a tech services company with 1-10 employees
The most valuable feature is the deep inspection for traffic, which is capable of identifying zero-day attacks.
Consultant at SKYE AS
The firewall management is the most valuable feature for me.
Cloud Security Engineer at Punch Powertrain nv
The Zero Trust Network Access (ZTNA) feature is a major highlight as it gives users seamless and secure access to internal resources without requiring a full-blown VPN, which improves both security and user experience.
Pre Sales Consultant at Redington Group
The Zero Trust and segmentation have helped my team and our customers significantly because we are able to protect every scope and allow the work-from-home users to access internal resources while passing through a threat prevention gateway, ensuring that everything is safe.
Security Support Engineer at a tech vendor with 51-200 employees
The most valuable features include geo-tagging, which blocks all other IPs except for the specified accounts, and web filtering.
Product manger at Asbis Mediteranean
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
592
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Check Point Harmony SASE (f...
Ranking in Firewalls
15th
Average Rating
8.8
Reviews Sentiment
7.1
Number of Reviews
61
Ranking in other categories
Secure Web Gateways (SWG) (7th), Anti-Malware Tools (8th), Enterprise Infrastructure VPN (6th), ZTNA as a Service (6th), ZTNA (3rd), Secure Access Service Edge (SASE) (6th)
KerioControl
Ranking in Firewalls
28th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
58
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (15th), Unified Threat Management (UTM) (8th)
 

Mindshare comparison

As of June 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 15.1%, down from 21.7% compared to the previous year. The mindshare of Check Point Harmony SASE (formerly Perimeter 81) is 1.0%, up from 0.1% compared to the previous year. The mindshare of KerioControl is 1.2%, down from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate15.1%
Check Point Harmony SASE (formerly Perimeter 81)1.0%
KerioControl1.2%
Other82.7%
Firewalls
 

Featured Reviews

JK
IP Network Security Specialist at MTN Ghana
Process-Level CPU Visibility: Introduce detailed CPU-usage metrics per subsystem (e.g., IPS engine, logging) so administrators can quickly identify and address performance spikes.
Analytics with FortiAnalyzer. Being able to pull in logs not just from our FortiGates but from all our other firewalls and then get them in one view has been a game changer. Whether I’m building an executive dashboard or doing a deep dive forensics session, I get everything I need without navigating consoles.Straightforward Application Control. FortiGate spots and blocks unwanted apps (eq. like BitTorrent or streaming services) with accuracy. Segmentation with VDOMs. We’ve carved our data center into four logical ‘mini-firewalls’ enterprise, core, billing, and WAF—all on one box. Each has its own rules and logs, and any traffic between them still gets inspected. It’s like having multiple appliances without the extra hardware. Always-Up-to-Date Threat Feeds. Daily signature updates and AI-driven threat sensing mean we’re blocking the latest vulnerabilities almost as soon as they’re announced.
Nasseer Qureshi - PeerSpot reviewer
Pre Sales Consultant at Redington Group
Delivers seamless and secure remote access while enhancing security posture
Check Point Harmony SASE (formerly Perimeter 81) offers strong features, but there are areas that could be improved. One area for improvement is integration with third-party identity providers. It works with standard SAML and SSO, but we would prefer deeper integrations with solutions such as Ping for more advanced identity-based policies. Additionally, a mobile-specific client or lightweight agent would be helpful for securing access from smartphones, especially in BYOD environments. We would appreciate more granular reporting and analytics, including better drill-down capabilities to investigate specific users or app activity. The logs are comprehensive, but filtering them can sometimes feel messy. The user interface on the management portal could be more intuitive, especially when managing multiple sites or remote offices. Some of the policy configuration steps are nested and could be streamlined.
Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
902,495 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
10%
Computer Software Company
9%
Manufacturing Company
9%
Financial Services Firm
7%
Construction Company
12%
Financial Services Firm
9%
Computer Software Company
7%
Comms Service Provider
7%
Computer Software Company
12%
Comms Service Provider
11%
Construction Company
11%
Financial Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business369
Midsize Enterprise139
Large Enterprise195
By reviewers
Company SizeCount
Small Business53
Midsize Enterprise19
Large Enterprise14
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Harmony Connect?
I am not aware of the pricing, setup cost, and licensing, but I would say the setup cost is our resource, and we have...
What needs improvement with Harmony Connect?
When I'm raising a ticket for Check Point Harmony SASE (formerly Perimeter 81), it's a bit technical for non-technica...
What is your primary use case for Harmony Connect?
I have experience with this product as a user. Currently, the Check Point product that I worked with mostly was the F...
What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the p...
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use K...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Check Point Quantum SASE
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Aqua Security, Cognito, Multipoint, Kustomer, Postman, Meredith
Triton Technical, McDonald's
Find out what your peers are saying about Check Point Harmony SASE (formerly Perimeter 81) vs. KerioControl and other solutions. Updated: June 2026.
902,495 professionals have used our research since 2012.