Try our new research platform with insights from 80,000+ expert users

KerioControl vs Netgate pfSense comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 7, 2022
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Number of Reviews
314
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
KerioControl
Ranking in Firewalls
29th
Average Rating
8.2
Number of Reviews
56
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (15th), Unified Threat Management (UTM) (11th)
Netgate pfSense
Ranking in Firewalls
1st
Average Rating
8.6
Number of Reviews
204
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2024, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.4%, up from 16.7% compared to the previous year. The mindshare of KerioControl is 1.2%, up from 0.8% compared to the previous year. The mindshare of Netgate pfSense is 21.7%, down from 24.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Q&A Highlights

KH
Aug 16, 2023
 

Featured Reviews

Syed Ali Waqas - PeerSpot reviewer
Jan 29, 2024
Provides centralized management, enhanced visibility, and reduces cybersecurity risks
Fortinet FortiGate offers enhanced visibility and segmentation for our industrial devices, a crucial process when some machines utilize systems demanding high-level security. We have implemented Fortinet Security Fabric on our VM infrastructure, and it has provided great service in helping us meet regulations, governance, and compliance requirements. This is important to us because Fortinet Security Fabric connects to our sandbox, allowing us to scan shares across all clusters and enabling FortiGate to resolve any online issues. Fortinet FortiGate has enhanced our organization's security by enabling secure VPN access and restricting access to social media sites, thus ensuring that employees can focus on their work. We saw the benefits of FortiGate within weeks of the deployment. FortiGate helps reduce the risk of cyberattacks that could disrupt our production by isolating the affected traffic and creating a log for us. It also helps to centralize the management of our network and security operations. The centralized management allows us to access all of our firewalls and policies using a single interface. Fortinet provides actionable data to help us make informed decisions about the actions to take. For example, if one of our firewalls goes down, the solution helps us rectify the issue by providing details on the problem and how to address it. By consolidating the numerous individually connected batches, FortiGate helped us reduce operational expenses associated with the extra costs they incurred. Fortinet FortiGate has helped us mature our approach to cybersecurity for protecting our industrial equipment. Their knowledge and daily webinars on email security and virus prevention have empowered us to stop attacks and maximize our efficiency.
Timur Assembayev - PeerSpot reviewer
Dec 2, 2022
Easy to configure, user-friendly, and useful online information
There were some issues with our main firewall and it went down. In a short time, I deployed KerioControl and save our business The most valuable features of KerioControl are ease of configuration, user-friendliness, and comfortable to use. It is an all-in-one solution, it comes with many…
JM
Jan 25, 2024
Offers robust features, including advanced firewalling, routing, VPN connectivity and traffic shaping
We use pfSense to handle VPN connections, extending to remote workers in our various branches as well. The feature I find most valuable for fulfilling network security requirements is pfBlockerNG. It offers exceptional visibility and filtering capabilities, without the need for dedicated hardware or recurring expenses. Unlike other solutions, pfBlockerNG operates seamlessly and continuously without additional costs or maintenance concerns. The traffic shaping and bandwidth management features of pfSense significantly enhance our network performance. The inclusion of a QoS wizard simplifies the process, eliminating the complexity often associated with configuring QoS on other platforms like Cisco routers. With pfSense, utilizing the wizard streamlines the setup process, making it accessible and effective for users without requiring an advanced understanding of networking intricacies. There have been specific incidents where the reporting and monitoring tools of pfSense played a crucial role in identifying and resolving network issues. In one instance, we received complaints about internet connectivity problems affecting productivity across the business. Upon investigation, I discovered that the issue stemmed from excessive bandwidth consumption caused by multiple HD camera streams being watched simultaneously. Utilizing pfSense's reporting and monitoring tools, I quickly pinpointed the source of the problem and implemented measures to alleviate the network congestion. These tools are invaluable for identifying resource-intensive processes and resolving performance issues effectively. The process of integrating pfSense with other tools and services has proven to be quite straightforward thus far. While there may be a slight learning curve at the outset, particularly for those less familiar with networking concepts, it becomes manageable with experience.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of this solution is Quota."
"Its performance in fulfilling our requirements has been satisfactory."
"This solution made it very easy to manage our bandwidth."
"Their proxy-based inspection is responsive and secure."
"From the firewall perspective, the rules and policies are very sufficient and easy to use."
"The strengths of Fortinet FortiGate include network security, VPN, site-to-site tunnels, client VPN solutions, two-factor authentication for VPN clients, and SD-WAN for branch level. We have implemented these solutions for various customers."
"Customers are more inclined towards FortiGate because of application control, web filtering, and anti-spam features. The support from the FortiGate team is good, and price-wise, it is affordable."
"It's a user-friendly firewall. Most of the tasks are very simple. It's simple to configure and troubleshoot this firewall."
"In terms of the comprehensiveness of the security features, it does a great job of laying out what it does. It's fairly easy to edit and research. Some of the features were turned on by our IT company and I was able to easily find other features on my own by searching for videos on the internet. I've been able to block certain websites, and content filter, as well as manage some of our bandwidth because we live stream on Sunday. I'm able to dedicate bandwidth for the encoder that goes to the internet. It always has enough bandwidth, no matter how many people are on the network. That's really helpful."
"I have found the most valuable features of Kerio Control to be the IPS and firewall."
"I did not face any issues with stability while using the tool's trial version."
"What I like the most about Kerio is that I can use the software appliance as a solution, so if the hardware fails for any reason then I can quickly replace it with hardware that I have in stock."
"The flexibility of the system, the capacity to provide the right level of security, and the ability to be integrated into different kinds of infrastructures are the most valuable features."
"The routing of the multiple internet physical routers I have is the most valuable feature of this solution. Instead of me physically unplugging a cable from one router to the server, if one connection goes down, it automatically switches for me. So I can have all three of them plugged in. If one goes down, it just picks up the other one automatically. There's no physical cable swapping."
"The top features are ones that we're not using yet but we soon will be because we've just had broadband upgraded in Australia. We've got something called the National Broadband Network, which is forced onto you, so you have to take it when it arrives. We'll be trying the high availability out soon. We tried that with some load balancing, it didn't quite work as we expected, but I think that was more of a configuration thing rather than a product thing."
"Kerio Control is easy to use and provides the ability to deliver customized solutions."
"It has a very nice web interface, and it is very simple to use. The way policies are working is also good."
"I like how easy it is to access VPNs and stuff like that. It's so simple to set up a site-to-site VPN."
"The scalability is very good, where you can do an HA configuration and then bring in another box, if necessary."
"I like pfSense's reports and how I can control access to the policies on the firewall."
"A valuable feature is that the solution is open source."
"Creation of certificates and the facility to administer services are valuable features."
"Being able to configure VLANs on such a small device is one of the key unique features that made it attractive to me."
"My favorite thing about pfSense is its overall stability of the product. It's rock solid and low maintenance. I like that aspect. It doesn't cost much, and it's feature-rich, including mobile VPN, pfBlocker, and IPS."
 

Cons

"The reports are very basic."
"The sniffing packets or packet captures, can be simplified and improved because it's a little confusing."
"Improvement is needed in the Web Filter quotas to restrict users with allocated quotas."
"Fortinet FortiGate needs to improve the protection, it did not prevent us from being attacked. Additionally, Fortinet FortiGate could provide more features for WAF devices. I should not have to purchase two solutions, it would be a benefit to combine these features into one solution."
"It should provide better visibility over the network and more information in the form of reports for the end users. Its installation should also be easier."
"If I had any criticism that I would give FortiGate, it would be that they need to stop changing their logging format. Every time we do a firmware upgrade, it is a massive issue on the SIM. Parsers have to be rebuilt. Even the FortiGate guys came in and said that they don't play well in the sandbox."
"Backup can be improved."
"The advanced models are expensive."
"They should improve the remote connectivity feature for users."
"The reporting needs to be improved. It is hard to get a domain."
"After the takeover by GFI, one of the things that Kerio built was MyKerio environment. This has not been very reliable because I get many messages that MyKerio is not functioning. For some reason, there are things that they changed and it is not very reliable at this moment, instead I have to connect to the firewall to see what is happening."
"Their support is getting better but still needs improvement."
"One of the problems we do have causes problems with the VPN. The software slows the throughput down too much. You could have a one-gigabit connection from the internet, and it slows it down to the area of upload and download is extremely slow. There's too much content filtering at that point."
"Kerio Control could improve content filtering."
"Improvements are needed to the Next Generation Firewall Protection, specifically with user-level protection."
"We'd like to have more integrations Kerio Operator."
"The tool is just a little bit slow to release patches, so it is probably one of the things where the tool can improve."
"My only observation is about the quality of the IPSec logs, which are difficult to interpret and are poor in filters."
"Sometimes it's a bit of a challenge to know how to do something when you want to do something, for instance, setting up a point to point VPN."
"It would be great to add more to security."
"We do not have a single pane of glass management."
"We're doing a lot of OpenVPN tunnels, and some of the fields in the OpenVPN setup on the server side do not lend themselves to multiple sites. It's kind of ugly. It's a big list of allowed IP addresses. I'd much rather see that via the table individually."
"PfSense could better utilize the interface and dashboard and include some packages in the built-in solution. For example, pfSense is sharing some other packages. You have to download and configure them within the package manager of pfSense. Some of those important ones, like the IPS and the monitor, could be installed on the solution's image and configured."
"It could use a little bit of improvement in the reporting."
 

Pricing and Cost Advice

"The price of Fortinet FortiGate is the lowest in the market."
"Fortinet FortiGate is reasonably priced."
"It is a good product from a price perspective versus functionality."
"Fortinet FortiGate has different licensing models, depending on what you're going to do. Services included would depend on the license model. Licenses can be renewed annually."
"The price of the license and warranty can be better because it is very expensive."
"For our organization, the licensing costs are approximately $7,000 per year."
"Fortinet is the least expensive solution."
"The pricing is justified. It's a little pricey, but what you pay for is what you get."
"The price of the solution is reasonable. For additional costs, you can add on more features such as antivirus."
"My advice is to use your own hardware, and do not use theirs."
"The price is fine."
"Its initial cost is less as compared to other products. It becomes a bit costly when you pay for the products that you don't use. We paid for almost all the products through subscription, but we are using only a few products. We use EndPointSecurity, Kerio Connect, WebMonitor, and LanGuard. We don't use the rest of the products."
"It gives us a lot. It does prove to be a very robust product for the cost."
"It's very affordable."
"I think it is a bit on the pricey side, but it's okay. I've got 50 licenses which I think is $250 a year or something like that."
"Search and compare."
"The price point is highly competitive."
"We just have a yearly support subscription."
"I would recommend it for a small business or a startup as a starting point. It's also good for companies that are on a tight budget."
"Unlike many firewalls that require annual licensing fees, making them expensive for small businesses, pfSense is an affordable option."
"For what they charge for it, which is maybe $100 a year, it's still good. If you wanted to build your own router, pfSense is more than worth $100 a year to have all that flexibility and maybe your own piece of custom hardware that you want to run it on."
"It works quite well for an open source product."
"There is an open-source community version that is available."
"I think Netgate pfSense is very fairly priced."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
801,314 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
22%
Computer Software Company
15%
Manufacturing Company
6%
Comms Service Provider
5%
Computer Software Company
23%
Media Company
9%
Financial Services Firm
8%
Manufacturing Company
6%
Computer Software Company
15%
Government
9%
Comms Service Provider
8%
Educational Organization
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about KerioControl?
The solution provides feasibility regarding cyber privacy.
What is your experience regarding pricing and costs for KerioControl?
KerioControl's pricing is reasonable. The license for KerioControl is annual. It's difficult to specify an exact cost...
What needs improvement with KerioControl?
I would like to see geo-IP filtering added to the filtering rules. Incorporating these rules would be very beneficial...
Help me find the best open source router
You don't really specify what type of router you are looking for but if you are talking about a gateway router I reco...
How do I choose between Fortinet FortiGate and pfSense?
Fortinet’s Fortigate is a firewall solution we use and are very much satisfied with its performance. We find Fortigat...
What is the difference between PfSense and OPNsense?
Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
No data available
No data available
 

Learn More

Video not available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Triton Technical, McDonald's
Nerds On Site Inc., RKC Development Inc., Expertech, Fisher's Technology, Ncisive, Consulting, CPURX, Vaughn's Computer House Calls, Imeretech LLC, Digital Crisis, Carolina Digital Phone, Technigogo Technology Services, The Simple Solution, SwiftecITInc, Rocky Mountain Tech Team, Free Range Geeks, Alaska Computer Geeks, Lark Information Technology, Renaissance Systems Inc., Cutting Edge Computers, Caretech LLC, GoVanguard, Network Touch Ltd, P.C. Solutions.Net, Vision Voice and Data Systems LLC, Montgomery Technologies, Techforce, Concero Networks, ASONInc, CPS Electronics and Consulting, Darkwire.net LLC, IT Specialists, MBS-Net Inc., VOICE1 LLC, Advantage Networking Inc., Powerhouse Systems, Doxa Multimedia Inc., Pro Computer Service, Virtual IT Services, A&J Computers Inc., Envision IT LLC, CommunicaONE Inc., Bone Computer Inc., Amax Engineering Corporation, QPG Ltd. Co., IT 101 Inc., Perfect Cloud Solutions, Applied Technology Group Inc., The Digital Sun Group LLC, Firespring
Find out what your peers are saying about KerioControl vs. Netgate pfSense and other solutions. Updated: September 2024.
801,314 professionals have used our research since 2012.