Try our new research platform with insights from 80,000+ expert users

KerioControl vs Palo Alto Networks Advanced Threat Prevention comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 19, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.8
KerioControl delivered significant financial benefits through bandwidth optimization, VPN efficiency, and reduced support, maintenance, and security expenses.
Sentiment score
5.7
Palo Alto Networks Advanced Threat Prevention offers financial benefits and high user satisfaction despite its cost, boosting revenues, especially in Italy.
It offers insights into security threats, despite the inability to quantify its impact in numbers.
Sr. Cloud Security Architect at a tech services company with 11-50 employees
 

Customer Service

Sentiment score
5.3
KerioControl support receives mixed reviews, with some praise but many report slow responses and reliance on online communities.
Sentiment score
5.9
Palo Alto Networks' support is praised for expertise but faces inconsistent response times and communication challenges with third-party facilitation.
I have never needed to contact customer support as the product is easy to use.
Product manger at Asbis Mediteranean
Overall, I find the technical support from Palo Alto Networks quite good, although getting a hold of the TAC can be challenging and sometimes requires long phone calls.
Global Network Tech Lead at a tech vendor with 10,001+ employees
I have proof of this rating - when I escalate a case, I receive a reply from TAC support after two days.
Presales Engineer at SAUDI PARAMOUNT COMPUTER SYSTEMS
I rate technical support from Palo Alto as eight out of ten.
Sr. Cloud Security Architect at a tech services company with 11-50 employees
 

Scalability Issues

Sentiment score
6.7
KerioControl suits small to medium businesses but faces scalability issues in larger enterprises, requiring hardware upgrades for increased capacity.
Sentiment score
7.7
Palo Alto Networks Advanced Threat Prevention is scalable, adaptable, and efficient, though cost may constrain its broad deployment.
KerioControl has met some of the network infrastructure needs yet could improve in terms of scalability.
Product manger at Asbis Mediteranean
Palo Alto Networks Advanced Threat Prevention is scalable and works well wherever enforcement points exist.
Sr. Cloud Security Architect at a tech services company with 11-50 employees
 

Stability Issues

Sentiment score
7.2
KerioControl is stable and reliable, with minor hardware or update challenges, and performs well according to user assessments.
Sentiment score
7.7
Palo Alto Networks Advanced Threat Prevention is praised for its superior stability and performance, though requires careful version selection.
Proper sizing of the firewall models ensures that the system does not experience crippling performance issues.
Sr. Cloud Security Architect at a tech services company with 11-50 employees
 

Room For Improvement

KerioControl requires improvements in VPN, user interface, support, security, performance, and customization features for large networks.
Palo Alto Networks needs improvements in email filtering, setup ease, user experience, support services, and enhanced security features.
Palo Alto needs to focus on how to bring that technology to end users and how easy it is to use, especially in a hybrid environment where users work from various locations.
Global Network Tech Lead at a tech vendor with 10,001+ employees
The behavioral detection capabilities could be expanded to address all threats at the perimeter, reducing the reliance on endpoint detection and response systems.
Sr. Cloud Security Architect at a tech services company with 11-50 employees
 

Setup Cost

KerioControl offers affordable pricing with complex licensing, appreciated features, but high annual fees can be challenging for small offices.
Palo Alto Networks Advanced Threat Prevention is costly but valued for strong threat detection, with pricing challenging for smaller businesses.
The price for the product is rated as ten out of ten.
Product manger at Asbis Mediteranean
Palo Alto Networks Advanced Threat Prevention requires an add-on license and is considered expensive compared to competitors like Cisco AMP and FortiGate firewalls.
Sr. Cloud Security Architect at a tech services company with 11-50 employees
 

Valuable Features

KerioControl provides user-friendly navigation, robust security features, VPN support, and efficient network management with positive feedback on ease of use.
Palo Alto Networks excels in threat prevention with features like sandboxing, machine learning, and user-friendly design, enhancing efficiency.
The most valuable features include geo-tagging, which blocks all other IPs except for the specified accounts, and web filtering.
Product manger at Asbis Mediteranean
As traditional signature-based mechanisms become less effective due to the evolving nature of attacks, this solution's focus on behavioral analysis is crucial.
Sr. Cloud Security Architect at a tech services company with 11-50 employees
We are satisfied with the analytic capabilities of Palo Alto Networks Advanced Threat Prevention, especially the reporting features available in the Palo Alto portal in terms of their application visibility interface, which is very good for us to get visibility on all critical applications and the associated users, as well as the risks associated with every category of traffic.
Global Network Tech Lead at a tech vendor with 10,001+ employees
 

Categories and Ranking

KerioControl
Ranking in Intrusion Detection and Prevention Software (IDPS)
16th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
58
Ranking in other categories
Firewalls (26th), Unified Threat Management (UTM) (10th)
Palo Alto Networks Advanced...
Ranking in Intrusion Detection and Prevention Software (IDPS)
10th
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
29
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2026, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of KerioControl is 2.7%, down from 3.9% compared to the previous year. The mindshare of Palo Alto Networks Advanced Threat Prevention is 5.6%, up from 4.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS) Market Share Distribution
ProductMarket Share (%)
Palo Alto Networks Advanced Threat Prevention5.6%
KerioControl2.7%
Other91.7%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

MM
Senior Systems Tech/Admin at Samco Software Inc.
Comprehensive Security Features and High Ease of Setup Elevate User Experience
The best features for KerioControl are its proprietary VPN protocol, which does not connect easily with other firewalls unless you enable IPsec. It will only connect to KerioControl. KerioControl is very valuable for business. Key points where KerioControl is valuable include its own anti-spam, intrusion prevention, and antivirus, which is included in the yearly subscription renewals. The VPN capabilities are helpful in managing my remote or distributed workforce, as we create documents and set up a location for clients to download. Clients can download KerioControl's VPN client online, and they just have to log in from the VPN client, which connects easily. I assess the firewall function in filtering both incoming and outgoing network traffic with KerioControl as excellent. Everything is logged, and any intrusion, antivirus, virus, or anything foreign to the system trying to hack in gets logged, and we can easily block those IPs.
Partha Dash - PeerSpot reviewer
Global Network Tech Lead at a tech vendor with 10,001+ employees
Advanced protection enables us to confidently secure against evolving threats
Palo Alto Networks can improve Advanced Threat Prevention by catering to the growing adoption of AI and agentic tooling. The Threat Protection modules should have the necessary intelligence to protect against those types of threats, as AI will be there to do a human job; this is an evolving area. From an Advanced Threat Protection perspective, the technology associated with Palo Alto Networks, such as their sandboxing environment, is quite good. However, Palo Alto needs to focus on how to bring that technology to end users and how easy it is to use, especially in a hybrid environment where users work from various locations. While Palo Alto excels in certain setups, they need to improve the user experience in distributed working conditions.
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
881,114 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Comms Service Provider
10%
Manufacturing Company
7%
Financial Services Firm
7%
Computer Software Company
10%
Financial Services Firm
9%
Manufacturing Company
8%
Performing Arts
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise14
 

Questions from the Community

What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the product is rated as ten out of ten.
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use KerioControl as our solution.
Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Arbor would be the best bid, apart from Arbor, Palo Alto and Fortinet have good solutions. As this is an ISP, I would prefer Arbor.
What is your experience regarding pricing and costs for Palo Alto Networks Threat Prevention?
Palo Alto Networks Advanced Threat Prevention requires an add-on license and is considered expensive compared to competitors like Cisco AMP and FortiGate ( /products/fortinet-fortigate-reviews ) fi...
What needs improvement with Palo Alto Networks Threat Prevention?
Palo Alto Networks can improve Advanced Threat Prevention by catering to the growing adoption of AI and agentic tooling. The Threat Protection modules should have the necessary intelligence to prot...
 

Overview

 

Sample Customers

Triton Technical, McDonald's
University of Arkansas, JBG SMITH, SkiStar AB, TRI-AD, Temple University, Telkom Indonesia
Find out what your peers are saying about KerioControl vs. Palo Alto Networks Advanced Threat Prevention and other solutions. Updated: December 2025.
881,114 professionals have used our research since 2012.