KerioControl vs Menlo Secure comparison

GFI and Menlo Security are both solutions in the Firewalls category. GFI is ranked #27 with an average rating of 9.3, while Menlo Security is ranked #51. GFI holds a 1.2% mindshare in Firewalls, compared to Menlo Security’s 0.3% mindshare. Additionally, 88% of GFI users are willing to recommend the solution, compared to 100% of Menlo Security users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Menlo Secure and KerioControl both compete in the web security and network protection category. KerioControl seems to have the upper hand due to its flexibility and user-friendly deployment.

Features: Menlo Secure is praised for its robust threat isolation, seamless integration with existing security protocols, and advanced security capabilities. KerioControl is noted for flexible policy management, extensive reporting tools, and configurability paired with in-depth analytics.

Room for Improvement: Menlo Secure could improve user customization, make management more intuitive, and provide better support during complex configurations. KerioControl could enhance scalability, improve performance during peak usage, and refine specific reporting tools.

Ease of Deployment and Customer Service: Menlo Secure has a straightforward deployment process, with some users needing more support during complex configurations. KerioControl is appreciated for clear setup instructions and responsive customer service, offering more user-friendly deployment overall.

Pricing and ROI: Menlo Secure users find the setup cost reasonable but see room for better ROI. KerioControl users feel they receive significant value for the cost, with an expected and reliable ROI, often delivering better financial value.

To learn more, read our detailed KerioControl vs. Menlo Secure Report (Updated: April 2026).

Buyer's Guide

KerioControl vs. Menlo Secure

April 2026

Download the complete report

Helped 894,738 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of May 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 16.0%, down from 21.6% compared to the previous year. The mindshare of KerioControl is 1.2%, down from 1.5% compared to the previous year. The mindshare of Menlo Secure is 0.3%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Mindshare Distribution
Product	Mindshare (%)
Fortinet FortiGate	16.0%
KerioControl	1.2%
Menlo Secure	0.3%
Other	82.5%

Firewalls

Featured Reviews

Abhinandan Yadav

Network Security Engineer at Arrow PC Network Pvt Ltd

Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches

Users report stability issues in certain versions, which requires regular updates. Real-world attacks have also highlighted the need for urgent patching of vulnerabilities.Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.

Read full review

Constantnos Achilleos

Product manger at Asbis Mediteranean

Leveraging geo-tagging and web filtering for enhanced network security

The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…

Read full review

reviewer2701794

Head Of Bluechip Enterprise at a manufacturing company with 51-200 employees

Provides strong protection and multiple use cases but struggles with market recognition

There aren't specific areas for improvement; however, they're not as well known as the big vendors such as Palo Alto. Menlo Secure is a smaller company with limited resources and funding, which makes it challenging to compete with larger companies such as Palo and Cisco. What can be improved is market awareness and adoption of the technology. When selling it in the channel, regardless of how good the technology might be, success depends more on market adoption and awareness.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution is very user-friendly."

"The technical support is great."

"The most useful functionality of Fortinet FortiGate is the user interface, multiple engines, and their cloud with the latest integrations, and additionally, the Security Fabric tool is very good."

"The solution provides an easy way to filter information and Fortinet lab is a great place to discover new things."

"Load Sharing VDOM Security Profiles Vulnerability Assessment"

"I would rate the scalability of this product a nine out of ten because it is highly scalable. We have not had problems with customers in terms of scalability."

"The product is so stable I don't need to have a cluster."

"FortiGate NGF is simple compared to other firewalls. It is easy to use and you don't need any training. Any person with basic firewall knowledge can use it."

More Fortinet FortiGate pros

"The solution has also saved us a lot of time in managing security."

"The initial setup is a breeze."

"What I like the most about Kerio is that I can use the software appliance as a solution, so if the hardware fails for any reason then I can quickly replace it with hardware that I have in stock."

"The product is easy to use."

"But for us, it covers almost everything we do with it, which makes it quite a suitable product for us."

"What I like the most about Kerio is that I can use the software appliance as a solution, so if the hardware fails for any reason then I can quickly replace it with hardware that I have in stock."

"The most valuable features of Kerio Control are the IPS and traffic rules, the traffic rules are very user-friendly and the IPS is working well, and additionally, the anti-virus is effective with quick options, such as filtering."

"The comprehensiveness of the security features that Kerio Control provides us with is good. Before GFI had it, they would have more updates. The updates have been slower, but I like the things that they keep adding like the ability to block by country. I use pretty much every feature."

More KerioControl pros

"Either you have access to something or don't have access to it, and if you do, we can ensure, 100 percent of the time, that there is nothing malicious that is going to impact our system in any way."

"We have definitely seen ROI, as we save a ton of money and time because the numerous hits that we were receiving from our security tools prior to implementing them had to all be chased down, dispositioned, and endpoints had to be reimaged."

"The fact that it is a cloud proxy solution is another feature we like. For example, if you acquire a new company, you can use it to protect that new company without the need to install anything physically on their networks."

"It has reduced security events to follow up on. While it is not 100%, there has been probably a 90% or more reduction. We were getting hit left, right, and center constantly from people browsing the Internet and hitting bad websites. It was not just bad websites that were stood up to be malicious, but good sites that were compromised."

"For us, the primary goal is protection on the web, and that's extremely important. We're not using any of the other services at this time. The web part is key to the success of the organization. It gives us the ability to protect. It can isolate. It opens the session in an isolated format so that the code isn't running locally. It is running over in the Menlo environment, not in ours. It is not running on the local computer, whereas if you were to go to a normal website, it would run Java or something else on the local machine and potentially execute the malicious code locally. So, it does give us that level of protection."

"We are not aware of a single compromise from the web since implementing the solution."

"Accessing the internet with a proxy from anywhere is the most valuable feature. It ensures that users are only able to browse legitimate websites. If they happen to go to a legitimate website with a malicious payload, the isolation feature will take care of that."

"The solution is invisible to our end users, so it doesn't have any impact on their work or performance."

More Menlo Secure pros

Cons

"From a reporting perspective, there's room for improvement. They're providing FortiAnalyzer through which one can get some enhancements, but the visibility and reporting still need slight improvement."

"Customer support needs improvement. I have had to take the direct internal sources, such as sales contacts, and after that I rarely see support response."

"With the addition of some features, it is possible that FortiGate can be used in all verticals."

"I think the only issue that needs improvement is the interface."

"The solution needs to improve its integration with cybersecurity."

"It would be better if they had a dashboard where we could see what attacks were happening. It would be good to see who's trying to get into our network."

"The Web-filter in this solution is not very good."

"The license renewal process, annual renewal price, and the web application firewall features should be improved."

More Fortinet FortiGate cons

"Their support is getting better but still needs improvement."

"One area that confused me a bit when I was building my current network. I use VLANs to have separate functionality on the network, and the appliance I got was the WiFi model, but I discovered that you can't assign WiFi channels to the VLAN. So, you can have WiFi, but its own subnet. You can't run that over the VLAN. Effectively, I can't use the WiFi facility in the appliance and had to purchase a separate web that supports VLANs. In the end, I had to go to GFI support. They confirmed this is just a limited functionality of that device, as it is a low-end device. I don't know if any of their high-end models have a better facility or not."

"The denial of service could also be improved. There recently was a big issue with denial of service attacks and it was a bit laborious."

"One of the problems we do have causes problems with the VPN. The software slows the throughput down too much. You could have a one-gigabit connection from the internet, and it slows it down to the area of upload and download is extremely slow. There's too much content filtering at that point."

"The Kerio hardware devices look cheap and could be improved. Some of our clients are switching to Sophos because their hardware has a more sleek design."

"They should add wireless features."

"Kerio Control could improve content filtering."

"Effectively, I can't use the WiFi facility in the appliance and had to purchase a separate web that supports VLANs."

More KerioControl cons

"We are now transitioning to another solution. The main reason for that is that managing all of the exceptions and troubleshooting all of the issues our users have had connecting to the internet has become too significant in terms of workload, compared to what we hope we will have with another solution."

"In the best of all worlds, we wouldn't have to make any exceptions. However, that is a big ask because a lot of that depends on how websites are constructed. For example, there are some very complex, application-oriented sites that we end up making exceptions for. It is really not that big an issue for us to make the exceptions. We feel like we are doing that without a huge impact on our security posture, but we do have to make some exceptions for complex sites, e.g., mostly SaaS-type sites and applications."

"Currently, I don't have a good way to see which of my rules are being used in the access control lists."

"The user monitoring could still be improved."

"Menlo Secure is a smaller company with limited resources and funding, which makes it challenging to compete with larger companies such as Palo and Cisco."

"In the best of all worlds, we wouldn't have to make any exceptions. For example, there are some very complex, application-oriented sites that we end up making exceptions for."

More Menlo Secure cons

Pricing and Cost Advice

"The product pricing is reasonable."

"We are currently evaluating a Palo Alto solution, and the pricing could be a reason for going for Palo Alto."

"Its pricing is fine. It is on a yearly basis. Other than the licensing fee, there is no extra fee."

"It is a good product from a price perspective versus functionality."

"The price of FortiGate is good."

"You need to pay a license for this solution. Our licensing is now done in our subsidiary."

"Licensing for Fortinet FortiGate is on a yearly basis. Pricing for it is a bit high. It could be cheaper."

"The licensing scheme of Fortinet is better than Cisco. It is more logical."

More Fortinet FortiGate pricing and cost advice

"Our clients see ROI with Kerio Control, as they are saving bandwidth costs."

"KerioControl's pricing is good."

"There's a one-time fee. For KerioConnect, it's just a server. With KerioControl, you have an option. You can virtualize it on a VMware system or have the hardware. I think mid-range or desktop KerioControl hardware could cost around 2000 dollars for a 25 user client. You need annual renewal for additional features like antivirus."

"Search and compare."

"The price of Kerio Control could be better, it is a bit overpriced compared to other solutions."

"The biggest advice that I could probably give people is when you buy the solution be prepared to either buy the unlimited license or buy more licenses than you think. Each user license gives you one employee and each a user gives you five devices. In the world nowadays where everybody has a cellphone, tablet, desktop, and laptop, that's four devices. You still get one more device per person. That covers your servers and back-ends."

"There is a yearly upkeep fee."

"It's pretty expensive in licensing costs, especially if you use the product longer than one or two years. The licensing costs are still high, which I don't think is reasonable for a product like this."

More KerioControl pricing and cost advice

"It is appropriately priced for what they're doing for us. Considering the protection provided, I feel their pricing is spot-on."

"We save a ton of money and time. Previously, the numerous hits that we were receiving from our security tools, prior to implementing them, had to all be chased down, dispositioned, and endpoints had to be reimaged. It was just a ton of effort to do all that. That is where the savings from time and money come in."

"The solution is expensive. It's more expensive than the solution I previously used. Compared with the other cloud-based solutions, it's very competitive."

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

894,738 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

10%

Comms Service Provider

10%

Manufacturing Company

Financial Services Firm

Computer Software Company

14%

Comms Service Provider

12%

Financial Services Firm

Manufacturing Company

15%

Retailer

10%

Computer Software Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	367
Midsize Enterprise	135
Large Enterprise	193

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	9
Large Enterprise	3

No data available

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What is your experience regarding pricing and costs for KerioControl?

KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the p...

See all answers

What needs improvement with KerioControl?

Regarding KerioControl's application awareness and control feature, I have not used it much.

See all answers

What is your primary use case for KerioControl?

With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use K...

See all answers

What needs improvement with Menlo Security Secure Web Gateway?

There aren't specific areas for improvement; however, they're not as well known as the big vendors such as Palo Alto....

See all answers

What is your primary use case for Menlo Security Secure Web Gateway?

People are mainly using it for zero trust web access. Menlo Secure is built from the ground up to provide zero basic ...

See all answers

What advice do you have for others considering Menlo Security Secure Web Gateway?

Secure file sharing and data protection is not exactly what Menlo Secure is designed to do. While it can handle some ...

See all answers

Comparisons

Sophos Firewall vs Fortinet FortiGate

Compared 18% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 5% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 3% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Netgate pfSense vs KerioControl

Compared 11% of the time

OPNsense vs KerioControl

Compared 10% of the time

Sophos UTM vs KerioControl

Compared 7% of the time

Sophos Firewall vs KerioControl

Compared 4% of the time

Cisco Secure Firewall vs KerioControl

Compared 4% of the time

More KerioControl Competitors

Prisma Access Browser vs Menlo Secure

Compared 21% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Menlo Secure

Compared 13% of the time

Netskope Next Gen Secure Web Gateway vs Menlo Secure

Compared 8% of the time

Cloudflare One vs Menlo Secure

Compared 7% of the time

Silo by Authentic8 vs Menlo Secure

Compared 7% of the time

More Menlo Secure Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

May 2026

Download Fortinet FortiGate product report

Buyer's Guide

KerioControl

May 2026

Download KerioControl product report

Buyer's Guide

Menlo Secure

April 2026

Download Menlo Secure product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

No data available

Menlo Security Web Security, Menlo Web Security

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

KerioControl is a comprehensive network security solution integrating firewall, antivirus, and VPN in an easy-to-use interface for small to medium businesses seeking robust protection.

KerioControl offers a blend of essential security features wrapped in a user-friendly graphical interface that enables effective network management. It supports firewall protection, intrusion detection, real-time monitoring, and flexible VPN capabilities ensuring high reliability and productivity. Despite being suitable for small to medium enterprises, improvements could enhance its overall performance, such as better GUI updates, stronger connectivity, and advanced VPN functionality. Common uses include unified threat management, bandwidth management, remote access, and web filtering.

What are the important features of KerioControl?

Ease of Use: Intuitive interface for effortless security management.
Firewall and VPN Integration: Combines essential security tools seamlessly.
Real-time Monitoring: Offers constant insight into network activities.
Intrusion Detection: Advanced system for prevention and alerts.
Bandwidth Management: Efficient allocation for optimized network usage.

What benefits and ROI should users consider?

Cost Savings: Economical security solution for smaller businesses.
Productivity Gains: Simplified management increases operational efficiency.
Enhanced Security: Comprehensive coverage with antivirus and malware protection.
Remote Access: Streamlined management of multiple sites and networks.

KerioControl is effectively implemented in industries needing strong security measures, supporting small to medium businesses in sectors like IT services, retail, and education. It's particularly well-suited for companies requiring efficient threat management and convenient internet service management across various sites.

GFI

Menlo Security Secure Application Access

Menlo Security Secure Application Access makes zero trust access easy, giving users secure connectivity to private applications, including web and legacy applications. At the core of Secure Application Access is the Menlo Secure Cloud Browser, which fetches, secures and delivers the content for users.

In addition to providing simple-to-deploy, clientless ZTA, Secure Application Access and the Menlo Secure Cloud Browser protect applications from attacks such as session hijacking, cookie manipulation, and other tactics that employ protocol manipulation.

Secure Application Access protects applications from Internet threats and provides granular controls for added protection of the application and associated data. These security controls include Read-only/Read-write, Upload/download, Copy/paste, AV scanning, Sandboxing, and Data Loss Prevention.

Last Mile Data Protection

Menlo Last-Mile Data Protection identifies and prevents sensitive data from leaving your company by meticulously inspecting all file uploads and user input across browsing sessions. Leveraging the Secure Cloud Browser, users are protected from the internet and you can protect your organization from data loss with comprehensive traffic monitoring and controls. This approach addresses the growing concerns surrounding data leakage in the age of AI tools like ChatGPT.

By identifying sensitive data through file types, regular expressions, or predefined libraries, Menlo Last-Mile Data Protection empowers security teams to regulate data input into AI platforms and prevent unauthorized uploads. This capability provides crucial protection for intellectual property, PII, and other confidential information.

The solution leverages the Menlo Cloud Security Platform's visibility and control over traffic to reliably detect and prevent data leaks originating from both browser submission forms and non-browser traffic. With the ability to inspect encrypted web traffic, Menlo Last-Mile Data Protection enforces DLP policies consistently across all users and devices, ensuring comprehensive data protection.

Menlo Security

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Triton Technical, McDonald's

Information Not Available

Buyer's Guide

KerioControl vs. Menlo Secure

April 2026

Free Report: KerioControl vs. Menlo Secure

Find out what your peers are saying about KerioControl vs. Menlo Secure and other solutions. Updated: April 2026.

DOWNLOAD NOW

894,738 professionals have used our research since 2012.

See our KerioControl vs. Menlo Secure report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.