Check Point NGFW vs KerioControl comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Number of Reviews
314
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (2nd), WAN Edge (1st)
Check Point NGFW
Ranking in Firewalls
6th
Average Rating
8.8
Number of Reviews
286
Ranking in other categories
Unified Threat Management (UTM) (1st)
KerioControl
Ranking in Firewalls
29th
Average Rating
8.2
Number of Reviews
56
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (16th), Unified Threat Management (UTM) (11th)
 

Mindshare comparison

As of July 2024, in the Firewalls category, the mindshare of Fortinet FortiGate is 22.6%, up from 18.8% compared to the previous year. The mindshare of Check Point NGFW is 2.9%, down from 3.9% compared to the previous year. The mindshare of KerioControl is 2.5%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
Unique Categories:
Software Defined WAN (SD-WAN) Solutions
19.7%
WAN Edge
21.4%
Unified Threat Management (UTM)
16.8%
Intrusion Detection and Prevention Software (IDPS)
1.9%
 

Featured Reviews

Costa Mitsios - PeerSpot reviewer
Apr 10, 2022
Useful URL filtering, scalable, and quick installation
I am using Fortinet FortiGate as a firewall appliance The most valuable feature of Fortinet FortiGate is URL filtering. Fortinet FortiGate could improve the user interface. There should be more functionality and options through the GUI. I used Fortinet FortiGate within the last 12 months.…
TK
Oct 24, 2023
Robust network security with advanced features, user-friendly management, and good scalability
The primary use case is to enhance security by safeguarding the internet connection for both servers and users Its greatest asset lies in its user-friendly interface, making it exceptionally suitable and reliable for managing gateways. When it comes to Check Point's small business gateway…
CK
Jul 2, 2020
The comprehensiveness of the security feature is exceptional but speed needs improvement
The VPN is the most valuable feature. We filter out outgoing NAT packets by port. So we locked down incoming and outgoing packets with the Kerio software. It's a lot less money than our FortiGate solutions that we installed, for instance. The value in it is money savings and flexibility. Kerio is a lot clearer to set up to do particular things, whereas when I do it on a Cisco or a FortiGate I have to go fight with it per week sometimes to do something I can do in 20 minutes on Kerio. For the money, the comprehensiveness of the security feature is exceptional. The next level of security is the sandbox and FortiGate charges me $120,000 a year for that sandbox. I don't see that as something that Kerio would ever be adding. The next step is a big, drastic step up in company size. So for medium and small businesses, I think Kerio is about as good as I can get. It gives us everything we need in one product for our small-size business. For medium to small businesses, the firewall and intrusion detection features are very well priced and just excellent. The functionality for the amount that we're paying for them is excellent. The malware and antivirus features are okay. I add stuff on top of Kerio, I have Malwarebytes. So I would give it an okay. Malwarebytes still catches quite a bit that Kerio doesn't. I used the content filtering a little bit and it works alright. I've got a hundred VPNs at the University of New Mexico. I don't put it anywhere else though, so I don't know. I don't really have any kind of input on that, I suppose. Their graphical user interface that allows me to open up particular ports to particular internal IPs with one external IP is very flexible and easy to use. It is also much clearer than when I go into my larger systems with two competitors, Cisco and FortiGate. Kerio enables me to use one external IP address to cut it into multiples server solutions based on different port numbers. It saves them money if my customers are creative enough to use those features.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution can scale well."
"Fortinet FortiGate is user-friendly and affordable."
"Our project needs to link two sides through the internet. One of these was in Cairo and the other in another city. We used FortiGate as the integrating solution between the two locations, i.e. the Fortinet 30E & 100E."
"The virtual firewall feature is the most valuable. We have around 1,500 firewalls. We did not buy individual hardware, and the virtual firewalls made sense because we don't have to keep on buying the hardware. FortiGate is easier to use as compared to Checkpoint devices. It is user friendly and has a good UI. You don't need much expertise to work on this firewall. You don't need to worry much about DCLA, commands, and things like that."
"Their interface is very easy to use, it is without bugs."
"The most valuable feature of FortiGate is FortiView which provides proactive monitoring."
"The wireless control is helpful."
"The features that we have found most valuable are the SSL VPN and the User Portal."
"My customers cite performance and ease of configuration as two of the solution's most valuable features."
"We like the way it protects our network, how easy it is to see and filter logs, and how easy it is to manage next-generation firewall policies."
"Its simplified management, enhanced remote support capabilities, and the ability to facilitate secure VPN connectivity for numerous offices and employees are highly beneficial."
"The security posture assessment with two-factor authentication has saved more time and commercial costs by avoiding deploying having to deploy another solution."
"The tool has solid firmware with very few vulnerabilities."
"The packet inspections have been a strong point. Our identity collectors have also been helpful. In many ways, Check Point has been a step up from our SonicWalls that we had in-house before that. There's a lot of additional flexibility that we didn't have before."
"The best feature is the ability to increase the capacity of the solution by exactly what you add, not losing anything for High Availability."
"AV, IPS, AntiSpam, Sandbox. That's gentlemen set for any basic security, and it was implemented very well. In our reports, the most exciting results belong to AV and IPS. It can be explained by using ThreatCloud - a global knowledge base, which accumulates signatures for all existing and new coming malware, and all the Check Point solutions are always up to date with potential threats."
"​It helps us better control internal and external communications.​"
"The reporting needs to be improved. It is hard to get a domain."
"When one of the employees of my customers is using the VPN Client, I have created for them that they will always get a message. When the VPN Client connects to Kerio Control from the outside, they will get an email so they know when they are connected and when they are disconnected what is happening to their network."
"We also like the security. We can control what sites users can go to and we can make sure that where they're going is appropriate and that it's work-related."
"I like intrusion detection and prevention and bandwidth management. The routing part is also awesome. It is a good firewall. We never had a major breach from outside. We've never been impacted by ransomware, and our systems have never been infiltrated."
"The firewall and intrusion detection features are good. It has blocked certain things. We have a lot of blocked sites that the staff or anyone using it, the public, etc., can't go on. It works for that. I get quite a few messages every now and again, saying that a virus has been detected and I can go in and block the user who's causing the problem."
"The stability of Kerio Control is good."
"What I like the most about Kerio is that I can use the software appliance as a solution, so if the hardware fails for any reason then I can quickly replace it with hardware that I have in stock."
 

Cons

"The firmware updates are sometimes not stable. The stability issues can vary, sometimes happening once a month or quarterly. New firmware updates can occasionally introduce bugs, causing some policies to fail. We then have to raise a ticket, and Fortinet usually provides a fix within a few days."
"The cloud features and integration could be improved."
"The firewall engine is not so strong as of now, in my opinion... My second concern is that, while they have Zero-day vulnerability and anti-malware features, the threat engine needs to be strengthened, its efficiency can be increased."
"I think the only issue that needs improvement is the interface."
"Fortinet FortiGate could improve by having more storage in the hardware for log data."
"The command line is complicated, and the interface could be better."
"They can do more tests before they release new versions because I would like to be more assured. We had some experiences where they release something new and great, but some of the old features are disabled or they don't work well, which impacts the product satisfaction. The manufacturer should be able to prove that everything works or not only that it might work. This is applicable to most of the other services, software, and hardware companies. They all should work on this. We cannot trust every new release, such as a beta release, on the first day. We wait for some comments on the forums and from other companies that we know. We always wait a few weeks before we use the updated version. They should also extend the VPN client application, especially for Linux versions. Currently, it has an application for Linux devices, but it doesn't work the way we want to connect to the VPN. They use only the old connection, not the new one. They have VPN client applications for Windows and Mac, but they can add more useful features to better manage the devices and monitor the current health of each device. Such features would be helpful for our company."
"I don't really have anything negative to say as far as Fortinet firewalls are concerned. If anything, they can support a user a little bit better. They can stop being so time-sensitive about how much time the support call has taken, and they can help you do it yourself."
"I would rate the technical support as a seven out of 10. Sometimes, it's difficult to get them to understand what the issue is. Sometimes, the issue is not resolved, then we solve it by ourselves with Check Point's documentation, which can be useful. When you open a case with Check Point, they can be a little slow. Sometimes, they don't solve things."
"The Check Point TAC support has, in recent years, deteriorated."
"While it does enhance network security, it tends to consume substantial resources, including CPU, memory, and storage."
"The tool must improve its support."
"Error logs can be more specific."
"The training for Check Point Firewall should increase, including the number of Training Centers. For most new people in our organization, we have to provide them training from our end, as they are not trained in Check Point Firewalls. So, we have to do the training, from our point of view, to make our engineers able to use Check Point Firewalls. However, with other firewalls, they are already trained, so we are not require to provide them training. This could be improved by the Check Point Community."
"We find the GUI to be wrong and the CLI doesn't always show all of the connections."
"The end-user VPN could be improved. It could benefit from some modification."
"The antivirus seemed to be a bit laggy on the connection so I disconnected that. It's definitely good. The only issue we've had with any sort of cyber attack seemed to be coming from a couple of distinct locations, people trying to get into known ports on remote desktops and stuff like that. The fact that we can block all that traffic is just great. It simplifies it."
"Kerio Control could improve by having higher availability and adding a mobile VPN channel. These additions are needed. The VPN is working fine on the Kerio Control but there needs to be a VPN client on the mobile phones, both for iOS and Android. This would be very good for us."
"They should improve the remote connectivity feature for users."
"Kerio Control has just improved on their biggest problem, which was to introduce better support for high-availability requirements in production."
"Support responses need improvement."
"I would like to see them develop a bit more flexibility creating VLANs."
"The improvement that we are looking for is for when decide to move some part of our application to the cloud."
"The denial of service could also be improved. There recently was a big issue with denial of service attacks and it was a bit laborious."
 

Pricing and Cost Advice

"The price of Fortinet FortiGate is better than Cisco, Check Point, and Palo Alto. In terms of pricing, it's probably a better-priced firewall solution overall."
"We are on an annual license to use Fortinet FortiGate."
"It is affordable. Palo Alto is much more expensive than Fortinet."
"We just pay a flat monthly fee to the vendor for the support."
"The pricing for this solution is good."
"They are very competitive, but we like to have the factory warranty taken care of."
"The price of FortiGate support is too expensive."
"The main reason we chose Fortinet FortiGate was that the price was better than the competition."
"Check Point offers the same applications and features as Palo Alto for roughly a third of the price."
"We have to consider things, cost-wise, when we are expanding into other locations. We don't have the budget to use it in other platforms... Check Point is really costly."
"It comes with a significant price."
"It is not a cheap solution, which is why we are looking for another one."
"The pricing of Check Point is fair when compared to others."
"The price of the appliance should be decreased."
"This product is not cheap and there are additional costs that depend on what model or package that you buy."
"It's expensive."
"There's a one-time fee. For KerioConnect, it's just a server. With KerioControl, you have an option. You can virtualize it on a VMware system or have the hardware. I think mid-range or desktop KerioControl hardware could cost around 2000 dollars for a 25 user client. You need annual renewal for additional features like antivirus."
"The price is inexpensive."
"Pricing is good, but the licensing took a lot of time."
"Its initial cost is less as compared to other products. It becomes a bit costly when you pay for the products that you don't use. We paid for almost all the products through subscription, but we are using only a few products. We use EndPointSecurity, Kerio Connect, WebMonitor, and LanGuard. We don't use the rest of the products."
"It gets expensive pretty quickly if you need to purchase license packs."
"The price is fine."
"I think it is a bit on the pricey side, but it's okay. I've got 50 licenses which I think is $250 a year or something like that."
"The price of Kerio Control could be better, it is a bit overpriced compared to other solutions."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
793,295 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
21%
Computer Software Company
15%
Manufacturing Company
6%
Comms Service Provider
6%
Educational Organization
54%
Computer Software Company
8%
Financial Services Firm
5%
Government
4%
Computer Software Company
24%
Media Company
8%
Financial Services Firm
8%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
How does Check Point NGFW compare with Fortinet Fortigate?
I have experience on both from Disti and channel experience. Please find below my comments (nothing new as such). -Ch...
Which would you recommend - Azure Firewall or Check Point NGFW?
Azure Firewall is easy to use and provides excellent support. Valuable features include integration into the overall ...
What do you like most about Check Point NGFW?
Check Point NGFW provides essential security, featuring no-obligation access for secure connections, strong intrusion...
What do you like most about KerioControl?
The solution provides feasibility regarding cyber privacy.
What is your experience regarding pricing and costs for KerioControl?
KerioControl's pricing is reasonable. The license for KerioControl is annual. It's difficult to specify an exact cost...
What needs improvement with KerioControl?
I would like to see geo-IP filtering added to the filtering rules. Incorporating these rules would be very beneficial...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
Check Point NG Firewall, Check Point Next Generation Firewall
No data available
 

Overview

 

Sample Customers

1. Amazon Web Services 2. Microsoft 3. IBM 4. Cisco 5. Dell 6. HP 7. Oracle 8. Verizon 9. AT&T 10. T-Mobile 11. Sprint 12. Vodafone 13. Orange 14. BT Group 15. Telstra 16. Deutsche Telekom 17. Comcast 18. Time Warner Cable 19. CenturyLink 20. NTT Communications 21. Tata Communications 22. SoftBank 23. China Mobile 24. Singtel 25. Telus 26. Rogers Communications 27. Bell Canada 28. Telkom Indonesia 29. Telkom South Africa 30. Telmex 31. Telia Company 32. Telkom Kenya
Control Southern, Optimal Media
Triton Technical, McDonald's
Find out what your peers are saying about Check Point NGFW vs. KerioControl and other solutions. Updated: June 2024.
793,295 professionals have used our research since 2012.