No more typing reviews! Try our Samantha, our new voice AI agent.

Hillstone T-Series vs KerioControl comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
592
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Hillstone T-Series
Ranking in Firewalls
41st
Average Rating
7.4
Number of Reviews
3
Ranking in other categories
No ranking in other categories
KerioControl
Ranking in Firewalls
28th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
58
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (15th), Unified Threat Management (UTM) (8th)
 

Mindshare comparison

As of June 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 15.1%, down from 21.7% compared to the previous year. The mindshare of Hillstone T-Series is 0.5%, up from 0.1% compared to the previous year. The mindshare of KerioControl is 1.2%, down from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate15.1%
KerioControl1.2%
Hillstone T-Series0.5%
Other83.2%
Firewalls
 

Featured Reviews

JK
IP Network Security Specialist at MTN Ghana
Process-Level CPU Visibility: Introduce detailed CPU-usage metrics per subsystem (e.g., IPS engine, logging) so administrators can quickly identify and address performance spikes.
Analytics with FortiAnalyzer. Being able to pull in logs not just from our FortiGates but from all our other firewalls and then get them in one view has been a game changer. Whether I’m building an executive dashboard or doing a deep dive forensics session, I get everything I need without navigating consoles.Straightforward Application Control. FortiGate spots and blocks unwanted apps (eq. like BitTorrent or streaming services) with accuracy. Segmentation with VDOMs. We’ve carved our data center into four logical ‘mini-firewalls’ enterprise, core, billing, and WAF—all on one box. Each has its own rules and logs, and any traffic between them still gets inspected. It’s like having multiple appliances without the extra hardware. Always-Up-to-Date Threat Feeds. Daily signature updates and AI-driven threat sensing mean we’re blocking the latest vulnerabilities almost as soon as they’re announced.
TahirMahmood - PeerSpot reviewer
IT Manager at Zubair Feeds
Is stable and has a user-friendly dashboard and a good interface
We installed Hillstone T-Series after a ransomware attack. The dashboard and user interface are very good We cannot secure a specific IP class with this firewall. Another loophole with Hillstone T-Series is that when we connect through WiFi and turn our hot spot on, all who connect through the…
Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Customers keep on improving their licenses. The solution remains scalable and flexible. On-premises deployments may have some limitations. However, cloud deployments offer a high degree of flexibility."
"The stability of the solution is excellent, as it is with other Fortinet products."
"These features have proven effective in protecting our network, handling large volumes of traffic smoothly without any issues."
"The key features include SD-WAN, firewall use, intrusion prevention, intrusion detection, and application control."
"The main benefits that Fortinet FortiGate brings to customers include that if you're going for a single fabric with core switches, access switches, and APs, compared to legacy Cisco or Aruba, the Fortinet FortiGate does not require a controller for the access points."
"It performs very well."
"The main reason we chose Fortinet FortiGate was that the price was better than the competition."
"Fortinet FortiGate has many valuable features, such as IDS, and intrusion detection. It has security features that are in part with the technologies that are available in the market."
"We found some limitations with Fortinet FortiGate, and we are satisfied with Hillstone T-Series right now."
"We installed Hillstone T-Series after a ransomware attack. The dashboard and user interface are very good."
"It has been stable so far."
"The only firewall able to monitor traffic from a CCTV network. Can detect unauthorized devices plugged into the network, which standard firewalls can't do."
"Hillstone supports IOT setup and detecting intrusions from IOT or CCTV connectivity, and with this solution, we can also detect unauthorized devices plugged into the CCTV network and sound the alarm to the administrator."
"When one of the employees of my customers is using the VPN Client, I have created for them that they will always get a message. When the VPN Client connects to Kerio Control from the outside, they will get an email so they know when they are connected and when they are disconnected what is happening to their network."
"The product is affordable."
"Navigation through options and configure them is just two mouse clicks away, with lots of information available without the need of an external tool."
"Out-of-the-box, the overall comprehensiveness of the security features is pretty good; it's not just a firewall, it's kind of a firewall proxy, reverse proxy, everything out-of-the-box sort of solution, and it's pretty comprehensive."
"One thing we use quite a lot, as well, is the DHCP Server, because we do a lot of work where all our devices need to have static IP addresses. Rather than going around and configuring every box, we do it all through DHCP reservations. It's easier. We've got a record of it. We can manipulate it if we need to change something or change some hardware. It's all easy. Even guys who are not used to using it can pick it up quite quickly."
"The most valuable feature is to provide users with the ability to log in to the portal page, keep track of their data usage and perform bandwidth management."
"The comprehensiveness of the security features that Kerio Control provides us with is good. Before GFI had it, they would have more updates. The updates have been slower, but I like the things that they keep adding like the ability to block by country. I use pretty much every feature."
"Kerio is a lot clearer to set up to do particular things, whereas when I do it on a Cisco or a FortiGate I have to go fight with it per week sometimes to do something I can do in 20 minutes on Kerio."
 

Cons

"There's room for improvement in the interface, especially following their upgrade to version nineteen."
"The solution’s stability could be improved because we sometimes faced some drops."
"Scalability is one of the disadvantages. When it comes to scalability, you have to actually change the box. If you want to upgrade it, you need to actually change the existing box and probably you take the system off to other sites."
"The cloud management should improve."
"They could improve performance with all the UTM features working. Sometimes, we have seen that when you enable the antivirus sensor, customers report slow web browsing."
"We would like to see an improvement in the consistency of the product's performance levels."
"Its reporting can be improved. Sometimes, I don't get proper reports."
"There's always something new that can be added or fixed."
"They have a very good technical support team, but I think there are some communication issues due to language differences."
"Licensing is not cheap, but there are customers who will buy because they understand that this has a cost involved and they will cater their budget for that."
"Another loophole with Hillstone T-Series is that when we connect through WiFi and turn our hot spot on, all who connect through the hotspot get all the functions, and the security does not work."
"Licensing is not cheap."
"The reporting needs to be improved. It is hard to get a domain."
"The solution should offer more dashboards."
"One area that confused me a bit when I was building my current network. I use VLANs to have separate functionality on the network, and the appliance I got was the WiFi model, but I discovered that you can't assign WiFi channels to the VLAN. So, you can have WiFi, but its own subnet. You can't run that over the VLAN. Effectively, I can't use the WiFi facility in the appliance and had to purchase a separate web that supports VLANs. In the end, I had to go to GFI support. They confirmed this is just a limited functionality of that device, as it is a low-end device. I don't know if any of their high-end models have a better facility or not."
"I would like to be able to automatically send email from Kerio Control and have it tell me what my external IPs are, because on one of my lines I have a fixed IP address and on the other it is variable. If there were a permanent way for me to figure out, "Okay, my current external VPN and my firm IP is this," it would help. I need to know the IP address to connect with the VPN and, at the moment, one of the lines sometimes changes its IP address without me knowing it. It's a hassle to figure out what it is."
"I can no longer renew my subscription directly with GFI but we have to go through third-party resellers like CDW. The first time I did it with CDW. I went to CDW and it was almost like they didn't even know anything. They didn't know what package I was supposed to get. Then after I got it, it took almost five days to get everything working."
"If you put the appliance in Fail-Over mode it will simply FAIL, and will bypass your routing rules."
"Because of all the security features within Kerio Control, e.g., it can do a deep packet inspection, this can slow down the traffic."
"Filtering of pages and greater personalization in services need improvement."
 

Pricing and Cost Advice

"The pricing is reasonable."
"The pricing is justified. It's a little pricey, but what you pay for is what you get."
"If you are looking for a quality product, it will come at a higher price. Expecting them to be significantly cheaper is unrealistic. In terms of pricing, it is a bit costly. However, the functionality and support offered are worth it."
"The price for the device and software is high. However, the solution is of good quality and has a lot of features."
"Fortinet is the least expensive solution."
"The solution's pricing is competitive."
"The setup cost was good. The Egyptian pound is declining, and upgrading Fortinet FortiGate yearly costs about $2000 USD, which equals one hundred Egyptian pounds. I maintain a business relationship with the vendor and receive support from them."
"Compared to other firewall products, it's a little cheaper in terms of pricing."
"On a scale from one to ten, with one being low and ten being high price, I would rate the price of Hillstone T-Series at three. There are no additional costs other than renewal costs."
"We got a much cheaper price than that provided by Fortinet right now."
"There is a yearly upkeep fee."
"The price is fine."
"It is priced low enough for entry-level, but it has the power to grow with a company without them having to replace it."
"On the low-end device that I use, it has unlimited IP addresses. So, they have a subscription model where, on the higher models, you pay X dollars for 10 IP addresses. Then, if you want any more, you have to pay more on the model. On the low-end model, it has unlimited IP addresses, because if you have too many users, the thing will just slow you down and stop working. At some point, you need to say, "Okay, I've grown to a point where performance is impacted. I need to get some bigger hardware." If I get to that stage, I will possibly look at using one of the virtual appliances and putting it on some bigger hardware."
"My advice is to use your own hardware, and do not use theirs."
"I am living in Iran and we cannot buy the product from Kerio because of sanctions."
"Its initial cost is less as compared to other products. It becomes a bit costly when you pay for the products that you don't use. We paid for almost all the products through subscription, but we are using only a few products. We use EndPointSecurity, Kerio Connect, WebMonitor, and LanGuard. We don't use the rest of the products."
"Its licensing is yearly. You renew every year. Its price is all-inclusive."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
902,495 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
10%
Computer Software Company
9%
Manufacturing Company
9%
Financial Services Firm
7%
Construction Company
15%
Manufacturing Company
12%
Real Estate/Law Firm
10%
Comms Service Provider
10%
Computer Software Company
12%
Comms Service Provider
11%
Construction Company
11%
Financial Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business369
Midsize Enterprise139
Large Enterprise195
No data available
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Ask a question
Earn 20 points
What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the p...
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use K...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Hillstone T-Series Intelligent Next-Generation Firewalls, Hillstone iNGFW
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
University of Córdoba
Triton Technical, McDonald's
Find out what your peers are saying about Hillstone T-Series vs. KerioControl and other solutions. Updated: June 2026.
902,495 professionals have used our research since 2012.