No more typing reviews! Try our Samantha, our new voice AI agent.

Forcepoint Next Generation Firewall vs KerioControl vs Trellix Intrusion Prevention System comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

Firewalls Mindshare Distribution
ProductMindshare (%)
Forcepoint Next Generation Firewall1.0%
Fortinet FortiGate13.0%
Cisco Secure Firewall8.0%
Other78.0%
Firewalls
Firewalls Mindshare Distribution
ProductMindshare (%)
KerioControl1.2%
Fortinet FortiGate13.0%
Cisco Secure Firewall8.0%
Other77.8%
Firewalls
Intrusion Detection and Prevention Software (IDPS) Mindshare Distribution
ProductMindshare (%)
Trellix Intrusion Prevention System3.1%
Darktrace10.2%
Fortinet FortiGate7.4%
Other79.3%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

Ajit Pratap Kundan - PeerSpot reviewer
Manager Solution Consulting at Accops Systems Pvt Ltd
Unified security management has improved traffic control and simplified remote workforce access
Forcepoint Next Generation Firewall does help in vulnerability identification and response by providing a single unified console through which I am able to monitor and manage infrastructure. The URL filtering capability of Forcepoint Next Generation Firewall helps in blocking malicious sites. We have to take care of both known threats and unknown threats. The firewall takes care of known threats, and we protect ourselves from unknown threats such as malicious code and malware that we cannot create firewall rules for. With these routing capabilities and policies, only whitelisted things get processed or passed. The biggest advantages of Forcepoint Next Generation Firewall, especially as a partner, service provider, and integrator, are that it is very easy to integrate these APIs with our solution, and most of the features I am getting in the clientless mode. Even with the client mode, it is easy to integrate with our client, allowing the customer to get a single client to address all the features of the firewall as well as the GTNA perspective. The flexibility of deployment, especially for the government and defense sectors, is that they want an on-premises solution, while the rest of the PSUs or enterprise segment are comfortable with the cloud offering, which is the SaaS offering and the way to go in the future.
Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…
BS
Large account Manager at Softcell Technologies Limited
Has offered reliable threat protection and detailed network insights but could expand features beyond existing capabilities
The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs). They track and collect data from APTs, which allows them to track malicious files entering the environment. The system offers inline prevention and real-time automatic blocking of malicious packets before they reach the network. It integrates with the Trellix ecosystem and provides application visibility and control. The solution provides deep insight into network traffic, applications, and protocols for better information. All packets coming through the application are analyzed and reported. They share intelligence updates regularly to protect from different malicious files and sector-specific threats. It supports both on-premise and cloud environments.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Forcepoint Next Generation Firewall has impacted my organization positively by making it very easy to work and offering a more competitive price compared to other vendors."
"The most valuable features of Forcepoint Next Generation Firewall are the advanced threat protection, including features like IPS and DDoS prevention, which help avoid internal DDoS attacks."
"We are a platinum partner of Forcepoint, and it is a stable solution with no issues so far."
"Forcepoint Next Generation Firewall is quite affordable, cheaper than other brands like Palo Alto or Check Point, with a lot of capabilities, very stable, and very well-made, making it a really good product for its price when compared to other vendors."
"This solution is very reliable."
"The product's initial setup phase is easy."
"When it comes to the detection rate of the IP, it is the most powerful solution for detection-ready tests, like evasion techniques etc."
"It is stable and scalable. In addition, their support is great. When you ask them for something, they provide support, and if required, they also involve the R&D team to help you to resolve the issues in your configuration."
"It works well as it is, and I don't have a problem with how it works."
"The anti-virus and perimeter security functionality minimizes vulnerabilities in our network and better secures our data, and this also decreases downtime of devices due to viruses and malware attacks."
"The initial setup is a breeze."
"I find this solution to be rich in features and does all that I require, for example, it is easily manageable and has comprehensive virus detection."
"The installation is straightforward."
"This solution has improved my organization because we can access remotely."
"The comprehensiveness of the security features that Kerio Control provides us with is good. Before GFI had it, they would have more updates. The updates have been slower, but I like the things that they keep adding like the ability to block by country. I use pretty much every feature."
"I want to have access to my computer from the outside and Kerio Control plays a role because it has a VPN... It is more reliable because it's a smaller group of computers to target for hackers and the like. The VPN works very well. I use it to work remotely very easily and exchange information, both to and from the location where it's deployed, and there have been no problems there."
"It works very well overall, and is excellent for enterprise-level businesses."
"The product is worth the investment."
"The threat intelligence updates are very accurate."
"Great monitoring feature."
"It improved my security by stopping an attack to the signature base, or the behavior base."
"The solution can scale."
"It has a lot of functions, such as firewall. We are administrators, and we create some rules to protect our network. We also monitor the traffic in and out and have disk encryption on-premises. When we detect malware, we scan for the virus on the PC. We can then delete or block the malware."
"We feel safer now."
 

Cons

"While they offer a comprehensive bundled solution, some users may prefer on-premise deployments for certain features, such as URL filtering."
"Their support should be faster. We have received complaints that they are not responding fast, which is not good for the vendor and us."
"Management could be better. They can improve the management."
"The security features need to be improved."
"Forcepoint Next Generation Firewall could change its interface, allowing standard or direct connect modes to be configured."
"They should have a local vendor who can provide support. Most of the support is overseas, so the time zones can be a problem."
"The support from Forcepoint Next Generation Firewall is not good, their response is not quick, we have had to wait a while."
"The optimization is not really ready. If you want very good optimization, you have to add it to the network."
"The solution can be improved to create the capability for larger bandwidths that support our business needs."
"Improvements are needed to the Next Generation Firewall Protection, specifically with user-level protection."
"I would like to see them develop a bit more flexibility creating VLANs."
"My experience with the solutions technical support is fine but they could be faster in responding."
"There isn't a lot to be improved. It works well as it is, but they can maybe improve the reporting side."
"Sometimes you get a few challenges joining to a domain."
"It has a VPN back to our data center but I don't think it has increased the number of VPN clients extended to those outside our environment"
"The trial duration of the product should be extended."
"I haven't seen threat intelligence and machine learning for predictive threat analysis in the Trellix Intrusion Prevention System yet."
"The platform’s GUI could be the latest."
"Currently, the settings and confirmations on the McAfee console are complex and complicated for our branches."
"Integration with Global Thereat Intelligence could be better. Also, I think management solutions are end of life now at McAfee. Network threat analyzer may be used for endpoint quarantines. Integration between these sides, as well as endpoint APO, will help you quarantine the risky endpoints."
"The solution could improve some aspects of detection."
"The technical support has room for improvement."
"The solution needs to improve the graphical interface. And they had a limitation in some of the sensor modems as well."
"The management component could be simplified."
 

Pricing and Cost Advice

"The pricing should be more competitive against other vendors in the market."
"We have found the price could be reduced. It is a little expensive."
"The cost is fair, but it could be improved."
"Everything in Forcepoint comes with an individual license, which is kind of a problem. In our last meeting, they said that it may change at the beginning of 2021, and they will try to merge some licenses together. Customers will get more features than what they got previously. We will wait and see."
"The big advantage of this solution is that we can select the right model for our requirements, which is not too expensive."
"The solution is expensive."
"It is expensive."
"It requires a yearly subscription."
"It's too expensive. The license, in the last year or so, has gone up by over a £100. We're almost being out-priced by the annual license at the minute."
"The yearly maintenance fee is a bit high for the Kerio Control Boxes. The end of life for the devices is kind of short. It seems like they're making you upgrade within a short period of time. They should at least allow five years, but it seems like they are changing their end of life to be shorter to generate revenue."
"There is a yearly upkeep fee."
"Licensing is easier with Kerio Control. With FortiGate, we realized the licensing is really hectic, because if you skip one year, you have to back pay that year. If you skip two years, you have to back pay two years. With Kerio Control, if a license expires, one year later you can just reactivate and go on."
"My advice is to use your own hardware, and do not use theirs."
"It gives us a lot. It does prove to be a very robust product for the cost."
"Its licensing is yearly. You renew every year. Its price is all-inclusive."
"It is priced low enough for entry-level, but it has the power to grow with a company without them having to replace it."
"The tool is competitively priced."
"I rate the product’s pricing an eight out of ten."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
919,003 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
11%
Outsourcing Company
11%
Manufacturing Company
10%
Financial Services Firm
10%
Construction Company
11%
Comms Service Provider
11%
Manufacturing Company
10%
Computer Software Company
10%
Manufacturing Company
11%
Comms Service Provider
8%
Construction Company
8%
Outsourcing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise11
Large Enterprise14
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise6
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?
In terms of price, I would say Forcepoint Next Generation Firewall is not expensive. It is very much comparable to ot...
What needs improvement with Forcepoint Next Generation Firewall?
The negative side of Forcepoint Next Generation Firewall is that the ZTNA part is missing. For that, we have to integ...
What is your primary use case for Forcepoint Next Generation Firewall?
The major use cases for Forcepoint Next Generation Firewall are in government turnkey projects where we require a lot...
What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the p...
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use K...
What needs improvement with McAfee Network Security Platform?
Trellix Intrusion Prevention System does not provide virtual patching. Patching involves updates on the OS side to ad...
What is your primary use case for McAfee Network Security Platform?
We do not use Trellix Intrusion Prevention System; rather, we sell the Trellix Intrusion Prevention System solution. ...
What advice do you have for others considering McAfee Network Security Platform?
I have experience working with other tools, specifically Trellix solutions such as DLP, EDR, and MDR, as well as with...
 

Also Known As

Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform
No data available
McAfee Network Security Platform, McAfee NSP, IntruShield Network Intrusion Prevention System, IntruShield Network IPS
 

Overview

 

Sample Customers

California Department of Corrections and Rehabilitation (CDCR)
Triton Technical, McDonald's
Desjardins Group, HollyFrontier, Nubia, Agbar, WNS Global Services, INAIL, Universidad de Las Américas Puebla (UDLAP), Cook County, China Pacific Insurance, Bank Central Asia, California Department of Corrections and Rehabilitation, City of Chicago, Macquarie Telecom, Sutherland Global Services, Texas Tech University Health Sciences Center, United Automotive Electronic Systems
Find out what your peers are saying about Fortinet, Cisco, Netgate and others in Firewalls. Updated: October 2026.
919,003 professionals have used our research since 2012.