No more typing reviews! Try our Samantha, our new voice AI agent.

Forcepoint Next Generation Firewall vs KerioControl vs Trellix Intrusion Prevention System comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

Firewalls Mindshare Distribution
ProductMindshare (%)
Forcepoint Next Generation Firewall1.0%
Fortinet FortiGate13.3%
Cisco Secure Firewall7.8%
Other77.9%
Firewalls
Firewalls Mindshare Distribution
ProductMindshare (%)
KerioControl1.2%
Fortinet FortiGate13.3%
Cisco Secure Firewall7.8%
Other77.7%
Firewalls
Intrusion Detection and Prevention Software (IDPS) Mindshare Distribution
ProductMindshare (%)
Trellix Intrusion Prevention System3.0%
Darktrace9.8%
Fortinet FortiGate7.9%
Other79.3%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

Ajit Pratap Kundan - PeerSpot reviewer
Manager Solution Consulting at Accops Systems Pvt Ltd
Unified security management has improved traffic control and simplified remote workforce access
Forcepoint Next Generation Firewall does help in vulnerability identification and response by providing a single unified console through which I am able to monitor and manage infrastructure. The URL filtering capability of Forcepoint Next Generation Firewall helps in blocking malicious sites. We have to take care of both known threats and unknown threats. The firewall takes care of known threats, and we protect ourselves from unknown threats such as malicious code and malware that we cannot create firewall rules for. With these routing capabilities and policies, only whitelisted things get processed or passed. The biggest advantages of Forcepoint Next Generation Firewall, especially as a partner, service provider, and integrator, are that it is very easy to integrate these APIs with our solution, and most of the features I am getting in the clientless mode. Even with the client mode, it is easy to integrate with our client, allowing the customer to get a single client to address all the features of the firewall as well as the GTNA perspective. The flexibility of deployment, especially for the government and defense sectors, is that they want an on-premises solution, while the rest of the PSUs or enterprise segment are comfortable with the cloud offering, which is the SaaS offering and the way to go in the future.
Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…
BS
Large account Manager at Softcell Technologies Limited
Has offered reliable threat protection and detailed network insights but could expand features beyond existing capabilities
The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs). They track and collect data from APTs, which allows them to track malicious files entering the environment. The system offers inline prevention and real-time automatic blocking of malicious packets before they reach the network. It integrates with the Trellix ecosystem and provides application visibility and control. The solution provides deep insight into network traffic, applications, and protocols for better information. All packets coming through the application are analyzed and reported. They share intelligence updates regularly to protect from different malicious files and sector-specific threats. It supports both on-premise and cloud environments.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Overall, it is an excellent product, highly reliable, and among the top contenders; Forcepoint Next Generation Firewall is well known."
"One of the most valuable features is having the ability to cluster multiple firewalls even if they are different versions."
"This solution is very reliable."
"Forcepoint Next Generation Firewall's IPS feature has four operational modes, including IPS, Layer 2 and Layer 3 Firewalls, and the IPS mode offers many controls, profiles, and signatures for inspecting traffic while allowing for applying firewall rules followed by IPS engine inspection so that many decisions including blocking and controlling traffic actions are possible."
"This is a good product and I have already recommended it to one of my friends that is now implementing it in the educational sector."
"We find the product to be stable and reliable in terms of performance."
"Forcepoint has great security functionality."
"The solution offers sandboxing, which can be integrated at any time."
"​It helps us better control internal and external communications.​"
"We use Kerio Control for controlling access to the web, and to protect the inside of the network."
"The firewall appliance itself is the most valuable feature."
"Kerio has improved my organization's security."
"Its support is very good, and it is stable product.​"
"The product is easy to use."
"The firewall and intrusion detection features are very useful these days because hackers have a lot of tricks that they use to get into a system. With Kerio Control you can see something that's happening. Otherwise, you have to use other tools to see what's happening on the firewalls. Having IPS in it is quite useful for us."
"The initial setup is a breeze."
"The most valuable features of the solution stem from the fact that it is a good product for dealing with DDoS attacks and for the inspection of network traffic."
"The best feature of the Trellix Intrusion Prevention System is the rules that Trellix provides, I think that's the best value from IPS."
"Great monitoring feature."
"The solution is very stable, reliable, and free of bugs or glitches, and it does not crash or freeze."
"The most valuable features are the customization of the signature and the unlimited amount of custom signatures in IPS."
"It's definitely more effective compared to the next-generation firewall that has a built-in IPS."
"The most valuable features in Trellix for me are the automated signature updates. It is a great and convenient feature."
"The threat intelligence updates are very accurate."
 

Cons

"However, we did have a horrible experience with Forcepoint in the past."
"The ability to dynamically change policies could be improved."
"The capacity for reading the users in a domain and the capacity to integrate the solution with the active directory or any kind of directory services need improvement."
"If you have Cisco integration, then I wouldn't recommend this solution — it won't integrate."
"My team is looking for more throughput and better integration with our security framework."
"Making this solution easier to use would be an improvement. The implementation could be made easier."
"I found one problem with Forcepoint Next Generation Firewall. They still do not have any VPN clients for Windows computers with ARM processors."
"The solution needs to build upon its network functionality. It needs to be a bit smarter."
"At the moment, our workaround is just to reboot the box every two weeks, which is inconvenient, but if they're going to solve this, then we just have to wait."
"There were certain things I didn't know about it, but I've always been able to just contact our IT company."
"There were certain things I didn't know about it, but I've always been able to just contact our IT company. They've been able to walk me through certain things. It was quite a monumental task to set up a public site. Support really had to help me with setting up the VLANs and walk me through it. It was not possible for me to figure that out on my own, but that's what they're here for. That could have been a little bit easier laid out."
"The logs could be improved for better clarity."
"The filtering on the unlicensed version of Kerio Control is inefficient - you have to add each website manually, which isn't feasible."
"Because of all the security features within Kerio Control, e.g., it can do a deep packet inspection, this can slow down the traffic."
"Filtering of pages and greater personalization in services need improvement."
"Their support is getting better but still needs improvement."
"Currently, the settings and confirmations on the McAfee console are complex and complicated for our branches."
"In terms of high-security attacks, not all of them are developed. You cannot do a rule that includes all high severities."
"The Network Security Managers could be more stable, agile, and work faster. When it comes to instability, there is room for improvement."
"Some of the documentation is not as straightforward as it could be. It's much too general - especially in areas related to updates."
"We would like to have a simpler version. Some settings and functions on the McAfee console are complex and complicated. I want the management console to be simpler."
"Trellix Intrusion Prevention System does not provide virtual patching."
"The deployment was a little difficult, I did it myself."
"The management component could be simplified."
 

Pricing and Cost Advice

"We would love to take other solution from Forcepoint, but unfortunately the price is too high. That's why we are not considering using Forcepoing for our proxy and DLB. They have a very good DLB, but the matter in the end is the cost."
"Forcepoint Next Generation Firewall is reasonable, it is priced the same as other firewalls."
"I believe the licensing fee is for one year, three years, and five years, or something like that. If you wants to increase the support level from a simpler level to platinum, I think that there's a cost. There are differences between every kind of support, but I don't know the numbers."
"The pricing of the solution is normally competitive with other products."
"Forcepoint is very expensive but it's really secure."
"It could be cheaper like Fortinet."
"I consider Forcepoint Next Generation Firewall's price to be good."
"We have just a subscription for the cloud, and this license is great. The license is so good."
"KerioControl's pricing is good."
"The price of Kerio Control could be better, it is a bit overpriced compared to other solutions."
"The price is inexpensive."
"I pay approximately $50 for the solution on an annual basis."
"The fixed model of users and devices is a bit of a problem for us. We want to be able to expand it fast and not have to contact our supplier first to get a license... If they had a larger fixed price with unlimited users or devices, that would help. Now, it's five users each time. A pack of 100 or 200 users for a certain price would make it more dynamic and user-scalable."
"The biggest advice that I could probably give people is when you buy the solution be prepared to either buy the unlimited license or buy more licenses than you think. Each user license gives you one employee and each a user gives you five devices. In the world nowadays where everybody has a cellphone, tablet, desktop, and laptop, that's four devices. You still get one more device per person. That covers your servers and back-ends."
"It gives us a lot. It does prove to be a very robust product for the cost."
"My advice is to use your own hardware, and do not use theirs."
"The tool is competitively priced."
"I rate the product’s pricing an eight out of ten."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
912,565 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Financial Services Firm
10%
Outsourcing Company
9%
Manufacturing Company
9%
Construction Company
11%
Comms Service Provider
11%
Computer Software Company
11%
Outsourcing Company
9%
Comms Service Provider
13%
Manufacturing Company
11%
Construction Company
8%
Outsourcing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise11
Large Enterprise14
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise6
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?
In terms of price, I would say Forcepoint Next Generation Firewall is not expensive. It is very much comparable to ot...
What needs improvement with Forcepoint Next Generation Firewall?
The negative side of Forcepoint Next Generation Firewall is that the ZTNA part is missing. For that, we have to integ...
What is your primary use case for Forcepoint Next Generation Firewall?
The major use cases for Forcepoint Next Generation Firewall are in government turnkey projects where we require a lot...
What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the p...
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use K...
What needs improvement with McAfee Network Security Platform?
Trellix Intrusion Prevention System does not provide virtual patching. Patching involves updates on the OS side to ad...
What is your primary use case for McAfee Network Security Platform?
We do not use Trellix Intrusion Prevention System; rather, we sell the Trellix Intrusion Prevention System solution. ...
What advice do you have for others considering McAfee Network Security Platform?
I have experience working with other tools, specifically Trellix solutions such as DLP, EDR, and MDR, as well as with...
 

Also Known As

Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform
No data available
McAfee Network Security Platform, McAfee NSP, IntruShield Network Intrusion Prevention System, IntruShield Network IPS
 

Overview

 

Sample Customers

California Department of Corrections and Rehabilitation (CDCR)
Triton Technical, McDonald's
Desjardins Group, HollyFrontier, Nubia, Agbar, WNS Global Services, INAIL, Universidad de Las Américas Puebla (UDLAP), Cook County, China Pacific Insurance, Bank Central Asia, California Department of Corrections and Rehabilitation, City of Chicago, Macquarie Telecom, Sutherland Global Services, Texas Tech University Health Sciences Center, United Automotive Electronic Systems
Find out what your peers are saying about Fortinet, Netgate, Cisco and others in Firewalls. Updated: August 2026.
912,565 professionals have used our research since 2012.