No more typing reviews! Try our Samantha, our new voice AI agent.

Forcepoint Next Generation Firewall vs KerioControl vs Trellix Intrusion Prevention System comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

Firewalls Mindshare Distribution
ProductMindshare (%)
Forcepoint Next Generation Firewall1.0%
Fortinet FortiGate14.5%
OPNsense8.2%
Other76.3%
Firewalls
Firewalls Mindshare Distribution
ProductMindshare (%)
KerioControl1.2%
Fortinet FortiGate14.5%
OPNsense8.2%
Other76.1%
Firewalls
Intrusion Detection and Prevention Software (IDPS) Mindshare Distribution
ProductMindshare (%)
Trellix Intrusion Prevention System3.0%
Darktrace10.2%
Fortinet FortiGate9.2%
Other77.6%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

Ajit Pratap Kundan - PeerSpot reviewer
MANAGER SOLUTION CONSULTING at a manufacturing company with 201-500 employees
Unified security management has improved traffic control and simplified remote workforce access
Forcepoint Next Generation Firewall does help in vulnerability identification and response by providing a single unified console through which I am able to monitor and manage infrastructure. The URL filtering capability of Forcepoint Next Generation Firewall helps in blocking malicious sites. We have to take care of both known threats and unknown threats. The firewall takes care of known threats, and we protect ourselves from unknown threats such as malicious code and malware that we cannot create firewall rules for. With these routing capabilities and policies, only whitelisted things get processed or passed. The biggest advantages of Forcepoint Next Generation Firewall, especially as a partner, service provider, and integrator, are that it is very easy to integrate these APIs with our solution, and most of the features I am getting in the clientless mode. Even with the client mode, it is easy to integrate with our client, allowing the customer to get a single client to address all the features of the firewall as well as the GTNA perspective. The flexibility of deployment, especially for the government and defense sectors, is that they want an on-premises solution, while the rest of the PSUs or enterprise segment are comfortable with the cloud offering, which is the SaaS offering and the way to go in the future.
Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…
BS
Large account Manager at Softcell Technologies Limited
Has offered reliable threat protection and detailed network insights but could expand features beyond existing capabilities
The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs). They track and collect data from APTs, which allows them to track malicious files entering the environment. The system offers inline prevention and real-time automatic blocking of malicious packets before they reach the network. It integrates with the Trellix ecosystem and provides application visibility and control. The solution provides deep insight into network traffic, applications, and protocols for better information. All packets coming through the application are analyzed and reported. They share intelligence updates regularly to protect from different malicious files and sector-specific threats. It supports both on-premise and cloud environments.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I have found that Forcepoint Next Generation Firewall is easy to use, highly secure, and the main VPN tunnel is created automatically which is a benefit."
"The support is great. They also have very good categorization. It's very good. It captures a lot of threats."
"The initial setup is very easy."
"When it comes to the detection rate of the IP, it is the most powerful solution for detection-ready tests, like evasion techniques etc."
"Forcepoint Next Generation Firewall has impacted my organization positively by making it very easy to work and offering a more competitive price compared to other vendors."
"They offer templates that provide detailed reports categorized by user, device, and internal network access."
"I have two offices, and I can route the internet of both offices using the same product. The connectivity is great."
"Forcepoint Next Generation Firewall has positively impacted my organization by providing always-on perimeter security."
"I use Kerio Control for user statistics, intrusion detection and prevention (IPS), web filtering, etc."
"The statistic feature enables us to better use bandwidth management. We monitored the use by mobile, type of application, department, and by users. The bandwidth was solid. Our internet speed is optimized for our research."
"Kerio Control can be scaled easily."
"It has saved a lot of time and it was a secure way of doing it too. We had a whole contact center that worked from home for a period of time and that's a 21 hour a day contact center that we moved, that was spread out across the greater Brisbane region and working on home internet connections. Surprisingly, we didn't have a lot of stability issues anyway on those connections, but Kerio didn't blink, so that was good."
"At the end of the day, our customers are being managed, looked after, and they're secure, so they're happy."
"I want to have access to my computer from the outside and Kerio Control plays a role because it has a VPN... It is more reliable because it's a smaller group of computers to target for hackers and the like. The VPN works very well. I use it to work remotely very easily and exchange information, both to and from the location where it's deployed, and there have been no problems there."
"Instead of using a cloud-based product for accessing information, and putting my data at risk in the cloud and in someone else's hands, it has allowed me to use a VPN and access my data directly from a laptop when I am out in the field. That has made my life a lot easier, where I'm able to access any information I need to be able access, basically on demand, with an Internet connection. That alone has been great."
"It is very comprehensive and simple. It has all the active protections. It's updated. We love that you can set how often it is updated so you can work what is right for you. A large company with a lot of bandwidth can update the virus definitions and security definitions hourly, if they want. A smaller site that's remote, where maybe updating the definitions will eat into the bandwidth, we can schedule those more to go later at night. It's very flexible and works for us in all types of situations. This is great because then we don't have to learn seven different products to be able to work with seven different scenarios."
"The solution is very stable, reliable, and free of bugs or glitches, and it does not crash or freeze."
"Great monitoring feature."
"There's a good dashboard you can drill down into. It helps you easily locate intrusions and the source of attacks."
"We use a lot of the functions this solution provides such as the firewall and the ability to check aliases, and we can monitor and show the traffic that's moving in and out."
"The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs)."
"The ability to centrally manage all the IPS sensors, track the different security events generated by it, and customize the different policies, depending on their location."
"The feature I found most valuable is the network threat analyzer in the security platform. It also integrates with GTI, or Global Threat Intelligence. Otherwise, I just use the basic features."
"The best feature of the Trellix Intrusion Prevention System is the rules that Trellix provides, I think that's the best value from IPS."
 

Cons

"The solution's support could use improvement."
"Intel could ditch the Java-based GUI rendering and could use some serious revamp on the way they manage their GUI."
"The initial setup of the Forcepoint Next Generation Firewall has areas that are difficult."
"However, one downside that I see is that they need to improve some network functionality."
"My team is looking for more throughput and better integration with our security framework."
"The endpoint protection capabilities of the product are an area of concern where improvements are required."
"A VPN client feature is missing in our region, which we hope Forcepoint will address in future updates."
"Forcepoint would be improved if there were more training available."
"Kerio Control could improve content filtering."
"If a hardware issue arises with a firewall, then it takes at least a week, maybe a week-and-a-half, to get a new firewall sent by GFI; that's really not acceptable."
"The reliability is its biggest downfall; I don't expect to be rebooting a product like this every couple of days."
"There's also room for improvement in the Traffic Rules. We define networks to use a specific outgoing interface, say VSAT, shore, or marine WiFi, which is okay. But then all we have is a checkbox that says "Use other internet interfaces if this one is unavailable." What we would prefer would be to have a priority list. So if VSAT is unavailable, try to use 4G, etc. We haven't really found a reliable way of doing that in the current release."
"If I would suggest anything, it would be to expand on its multifactor authentication to be a little bit more user-friendly."
"There isn't a lot to be improved. It works well as it is, but they can maybe improve the reporting side."
"If you have to dive deeper into the firewall or any other features, then you really have to read up a bit about how to set it up properly. Some of my colleagues, in the beginning, jumped in and made a bunch of rules but then it got really messy. If Kerio had a template or guidelines for best practices, at the beginning, that would really help. With Kerio Control it's basically 'find out for yourself.'"
"Support responses need improvement."
"The pricing could be improved."
"Some of the documentation is not as straightforward as it could be. It's much too general - especially in areas related to updates."
"The technical support must be improved."
"The area of concern where the tool needs improvement is how the product prompts users at a network level that helps prevent any wireless network attacks through alerts and notifications."
"Integration with Global Thereat Intelligence could be better. Also, I think management solutions are end of life now at McAfee. Network threat analyzer may be used for endpoint quarantines. Integration between these sides, as well as endpoint APO, will help you quarantine the risky endpoints."
"The management component could be simplified."
"We would like to have a simpler version. Some settings and functions on the McAfee console are complex and complicated. I want the management console to be simpler."
"The solution needs to improve the graphical interface. And they had a limitation in some of the sensor modems as well."
 

Pricing and Cost Advice

"The big advantage of this solution is that we can select the right model for our requirements, which is not too expensive."
"We have found the price could be reduced. It is a little expensive."
"It could be cheaper like Fortinet."
"It is expensive."
"There is a license required to use this solution and we can purchase it for one, two, three, or five years."
"Forcepoint Next Generation Firewall is reasonable, it is priced the same as other firewalls."
"Everything in Forcepoint comes with an individual license, which is kind of a problem. In our last meeting, they said that it may change at the beginning of 2021, and they will try to merge some licenses together. Customers will get more features than what they got previously. We will wait and see."
"The training that they offer to their end-customers. It's quite expensive, I believe it costs roughly $11,000"
"There is a yearly upkeep fee."
"Its price is fair. There are no additional costs."
"It is a good fit for SMBs because of its maintainability. When you want to keep your costs low, then Kerio Control is a very good solution. It's not an expensive product that is well integrated. It has a complete set of features within it that make it a very strong product."
"I am living in Iran and we cannot buy the product from Kerio because of sanctions."
"Our clients see ROI with Kerio Control, as they are saving bandwidth costs."
"KerioControl's pricing is good."
"My advice is to use your own hardware, and do not use theirs."
"KerioControl's pricing is reasonable. The license for KerioControl is annual. It's difficult to specify an exact cost since it varies depending on the number of users and additional software combined with it. For example, a basic box might cover 25 users, but licenses can be purchased starting from 10 users."
"I rate the product’s pricing an eight out of ten."
"The tool is competitively priced."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
906,887 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
12%
Financial Services Firm
11%
Manufacturing Company
9%
Outsourcing Company
8%
Comms Service Provider
12%
Computer Software Company
12%
Construction Company
11%
Financial Services Firm
8%
Comms Service Provider
12%
Manufacturing Company
12%
Construction Company
7%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise11
Large Enterprise14
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise6
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?
In terms of price, I would say Forcepoint Next Generation Firewall is not expensive. It is very much comparable to ot...
What needs improvement with Forcepoint Next Generation Firewall?
The negative side of Forcepoint Next Generation Firewall is that the ZTNA part is missing. For that, we have to integ...
What is your primary use case for Forcepoint Next Generation Firewall?
The major use cases for Forcepoint Next Generation Firewall are in government turnkey projects where we require a lot...
What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the p...
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use K...
What needs improvement with McAfee Network Security Platform?
Trellix Intrusion Prevention System does not provide virtual patching. Patching involves updates on the OS side to ad...
What is your primary use case for McAfee Network Security Platform?
We do not use Trellix Intrusion Prevention System; rather, we sell the Trellix Intrusion Prevention System solution. ...
What advice do you have for others considering McAfee Network Security Platform?
I have experience working with other tools, specifically Trellix solutions such as DLP, EDR, and MDR, as well as with...
 

Also Known As

Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform
No data available
McAfee Network Security Platform, McAfee NSP, IntruShield Network Intrusion Prevention System, IntruShield Network IPS
 

Overview

 

Sample Customers

California Department of Corrections and Rehabilitation (CDCR)
Triton Technical, McDonald's
Desjardins Group, HollyFrontier, Nubia, Agbar, WNS Global Services, INAIL, Universidad de Las Américas Puebla (UDLAP), Cook County, China Pacific Insurance, Bank Central Asia, California Department of Corrections and Rehabilitation, City of Chicago, Macquarie Telecom, Sutherland Global Services, Texas Tech University Health Sciences Center, United Automotive Electronic Systems
Find out what your peers are saying about Fortinet, Netgate, Cisco and others in Firewalls. Updated: July 2026.
906,887 professionals have used our research since 2012.