KerioControl vs Palo Alto Networks CN-Series comparison

GFI and Palo Alto Networks are both solutions in the Firewalls category. GFI is ranked #27 with an average rating of 9.3, while Palo Alto Networks is ranked #32 with an average rating of 9.5. GFI holds a 1.2% mindshare in Firewalls, compared to Palo Alto Networks’s 0.4% mindshare. Additionally, 88% of GFI users are willing to recommend the solution, compared to 100% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between KerioControl and Palo Alto Networks CN-Series based on real PeerSpot user reviews.

Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed KerioControl vs. Palo Alto Networks CN-Series Report (Updated: April 2026).

Buyer's Guide

KerioControl vs. Palo Alto Networks CN-Series

April 2026

Download the complete report

Helped 894,738 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of May 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 16.0%, down from 21.6% compared to the previous year. The mindshare of KerioControl is 1.2%, down from 1.5% compared to the previous year. The mindshare of Palo Alto Networks CN-Series is 0.4%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Mindshare Distribution
Product	Mindshare (%)
Fortinet FortiGate	16.0%
KerioControl	1.2%
Palo Alto Networks CN-Series	0.4%
Other	82.4%

Firewalls

Featured Reviews

Abhinandan Yadav

Network Security Engineer at Arrow PC Network Pvt Ltd

Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches

Users report stability issues in certain versions, which requires regular updates. Real-world attacks have also highlighted the need for urgent patching of vulnerabilities.Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.

Read full review

Constantnos Achilleos

Product manger at Asbis Mediteranean

Leveraging geo-tagging and web filtering for enhanced network security

The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…

Read full review

Ahmed_Shalaby

Senior Cyber Security Engineer at Beta Information Technology

Application control excels and integration with monitoring system boosts efficiency

I am an integrator working with Palo Alto Networks CN-Series and Panorama. I have been involved with the implementation of Palo Alto Networks CN-Series The stability of Palo Alto Networks CN-Series is excellent. Application control is one of the most valuable features. Its monitoring capability…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Fortinet has got great firewalls; they do everything, from FortiTokens for two-factor to IPsec VPNs and SSL VPNs, with a great GUI that makes it easy to use while the support is great."

"Fortigate represents a really scalable way of delivering perimeter network security, some level of layer 7 security, WAF, and also a way to create a meshed ADVPN solution."

"We find the most valuable aspect of this solution is the price."

"FortiGate's ability to perform as expected and fulfil our needs has been the most compelling feature for network security."

"The solution is stable and quite reliable; there are no bugs or glitches and it doesn't crash or freeze."

"The most useful functionality of Fortinet FortiGate is the user interface, multiple engines, and their cloud with the latest integrations, and additionally, the Security Fabric tool is very good."

"Fortigate's most valuable feature is that it doesn't need a push policy when writing rules."

"The most valuable features of Fortinet FortiGate are the different types of profiling. It has been the most effective for me. The WAF and the antivirus profile are the most effective in network protection."

More Fortinet FortiGate pros

"It just works, it does what it is meant to do."

"We also like the security. We can control what sites users can go to and we can make sure that where they're going is appropriate and that it's work-related."

"The solution is user-friendly."

"Kerio is a lot clearer to set up to do particular things, whereas when I do it on a Cisco or a FortiGate I have to go fight with it per week sometimes to do something I can do in 20 minutes on Kerio."

"Kerio Control can be scaled easily."

"The solution has also saved us a lot of time in managing security."

"The firewall appliance itself is the most valuable feature."

"I did not face any issues with stability while using the tool's trial version."

More KerioControl pros

"The app inspection is very helpful for network security."

"The stability of Palo Alto Networks CN-Series is excellent."

Cons

"It should come integrated or have its own type of network monitor tool in a module. There should just be one package, and you are good to go."

"The solution is quite expensive and I'd like to see the cost reduced."

"I use the FortiGate 60D model and realized the 300Mbps bandwidth limitation. Because it is a product that offers many services, I think it could have greater bandwidth capacity."

"At first glance, the interface for the device is very confusing."

"I have to say that the initial setup was complex. The deployment took a few days to get set up. Initially, we were using an IPVanish. We switched to this tool since we thought it would be easier. But it turns out it wasn't easier to set up and run."

"My only complaint about FortiGate is a lack of QinQ VLAN tunneling. I haven't found this feature in any Fortinet product. You can do this on all Cisco routers, including the smaller models. However, QinQ isn't available on the biggest, most expensive Fortinet units. They still don't have that. I think now we're on software version 6.0, and they still haven't found a solution for QinQ. It isn't a dealbreaker, but that's my main complaint."

"Some features of Fortinet FortiGate are actually fee enabled that are inconvenient for deploying in production. Other issues relate to isolation with Cisco products and your server."

"Fortinet FortiGate IPS could improve the VPN. There are times it is slow."

More Fortinet FortiGate cons

"The logs could be improved for better clarity."

"If I would suggest anything, it would be to expand on its multifactor authentication to be a little bit more user-friendly."

"Kerio Control could improve content filtering."

"If you have to dive deeper into the firewall or any other features, then you really have to read up a bit about how to set it up properly."

"Filtering of pages and greater personalization in services need improvement."

"I would like it if the interface section had multiple failovers. Although I do have three connections, just in case our physical cables get disconnected, I can only set up one failover as a backup. So, if for some reason our fiber and our AFM went down together, I would have to have it search for our 4G modem. I'd love to have extra backups running."

"I would like to be able to inspect https packets for the purpose of virus scanning."

"The one thing that did put me off of the solution was that, after they were taken over by GFI, the licensing and a few other items have gotten very complicated."

More KerioControl cons

"Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive."

"I'd like to see more IOPs features."

Pricing and Cost Advice

"The support subscription for the solution is annual. You are paying for support and there are two levels of support, professional and advanced."

"It has been two years. I don't remember the actual price, but it was affordable. We buy the boxes and then use the license for three years."

"They are more expensive than others."

"Fortinet FortiGate has different licensing models, depending on what you're going to do. Services included would depend on the license model. Licenses can be renewed annually."

"Fortinet FortiGate IPS is cheaper than other solutions like Cisco or Check Point."

"I'll rate FortiGate's pricing a five out of ten since it is moderately priced."

"A year or two years back, its price was competitive and reasonable. That was one of the reasons that people easily switched to Fortinet. Over the last two years, the prices have increased drastically. However, the prices of others have also increased. An advantage is there from the price point but not as much as it was previously."

"Fortinet FortiGate as a less expensive solution than Palo Alto."

More Fortinet FortiGate pricing and cost advice

"There's a one-time fee. For KerioConnect, it's just a server. With KerioControl, you have an option. You can virtualize it on a VMware system or have the hardware. I think mid-range or desktop KerioControl hardware could cost around 2000 dollars for a 25 user client. You need annual renewal for additional features like antivirus."

"Pricing is good, but the licensing took a lot of time."

"Search and compare."

"The biggest advice that I could probably give people is when you buy the solution be prepared to either buy the unlimited license or buy more licenses than you think. Each user license gives you one employee and each a user gives you five devices. In the world nowadays where everybody has a cellphone, tablet, desktop, and laptop, that's four devices. You still get one more device per person. That covers your servers and back-ends."

"KerioControl's pricing is good."

"I am living in Iran and we cannot buy the product from Kerio because of sanctions."

"It is priced low enough for entry-level, but it has the power to grow with a company without them having to replace it."

"The pricing is in-line with our expectations in terms of the quality that we get for it."

More KerioControl pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

894,738 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

10%

Comms Service Provider

10%

Manufacturing Company

Financial Services Firm

Computer Software Company

14%

Comms Service Provider

12%

Financial Services Firm

Manufacturing Company

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	367
Midsize Enterprise	135
Large Enterprise	193

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	9
Large Enterprise	3

No data available

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What is your experience regarding pricing and costs for KerioControl?

KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the p...

See all answers

What needs improvement with KerioControl?

Regarding KerioControl's application awareness and control feature, I have not used it much.

See all answers

What is your primary use case for KerioControl?

With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use K...

See all answers

What is your experience regarding pricing and costs for Palo Alto Networks CN-Series?

The pricing of Palo Alto Networks CN-Series is quite expensive, rating around eight on a scale of one to ten for cost.

See all answers

What needs improvement with Palo Alto Networks CN-Series?

Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive. The SD-WAN implementation using P...

See all answers

What is your primary use case for Palo Alto Networks CN-Series?

I am an integrator working with Palo Alto Networks CN-Series ( /products/palo-alto-networks-cn-series-reviews ) and P...

See all answers

Comparisons

Sophos Firewall vs Fortinet FortiGate

Compared 18% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 5% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 3% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Netgate pfSense vs KerioControl

Compared 11% of the time

OPNsense vs KerioControl

Compared 10% of the time

Sophos UTM vs KerioControl

Compared 7% of the time

Sophos Firewall vs KerioControl

Compared 4% of the time

Cisco Secure Firewall vs KerioControl

Compared 4% of the time

More KerioControl Competitors

Palo Alto Networks VM-Series vs Palo Alto Networks CN-Series

Compared 26% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Palo Alto Networks CN-Series

Compared 22% of the time

Netgate pfSense vs Palo Alto Networks CN-Series

Compared 11% of the time

Azure Firewall vs Palo Alto Networks CN-Series

Compared 11% of the time

Zscaler Cloud Firewall vs Palo Alto Networks CN-Series

Compared 4% of the time

More Palo Alto Networks CN-Series Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

May 2026

Download Fortinet FortiGate product report

Buyer's Guide

KerioControl

May 2026

Download KerioControl product report

Buyer's Guide

Firewalls

April 2026

Download Palo Alto Networks CN-Series product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

No data available

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

KerioControl is a comprehensive network security solution integrating firewall, antivirus, and VPN in an easy-to-use interface for small to medium businesses seeking robust protection.

KerioControl offers a blend of essential security features wrapped in a user-friendly graphical interface that enables effective network management. It supports firewall protection, intrusion detection, real-time monitoring, and flexible VPN capabilities ensuring high reliability and productivity. Despite being suitable for small to medium enterprises, improvements could enhance its overall performance, such as better GUI updates, stronger connectivity, and advanced VPN functionality. Common uses include unified threat management, bandwidth management, remote access, and web filtering.

What are the important features of KerioControl?

Ease of Use: Intuitive interface for effortless security management.
Firewall and VPN Integration: Combines essential security tools seamlessly.
Real-time Monitoring: Offers constant insight into network activities.
Intrusion Detection: Advanced system for prevention and alerts.
Bandwidth Management: Efficient allocation for optimized network usage.

What benefits and ROI should users consider?

Cost Savings: Economical security solution for smaller businesses.
Productivity Gains: Simplified management increases operational efficiency.
Enhanced Security: Comprehensive coverage with antivirus and malware protection.
Remote Access: Streamlined management of multiple sites and networks.

KerioControl is effectively implemented in industries needing strong security measures, supporting small to medium businesses in sectors like IT services, retail, and education. It's particularly well-suited for companies requiring efficient threat management and convenient internet service management across various sites.

GFI

Palo Alto Networks CN-Series offers advanced container security and micro-segmentation for Kubernetes environments, known for robust threat prevention, ease of deployment, and seamless integration with existing security infrastructure.

Palo Alto Networks CN-Series enables application-level visibility and control, providing comprehensive protection for dynamic workloads. Its scalable architecture suits modern cloud-native applications, making it a top choice for securing containerized environments and microservices. Users appreciate its automated policy creation, granular micro-segmentation, and enhanced container security. Although it offers great features, users suggest improvement in integration with other security tools, better scalability for larger environments, and enhanced documentation. Performance in high-traffic scenarios and intuitive configuration processes are areas for potential enhancement, along with improved customer support.

What are the key features of Palo Alto Networks CN-Series?

Advanced Threat Protection: Addresses and mitigates security threats efficiently.
Seamless Kubernetes Integration: Integrates easily within Kubernetes environments.
Comprehensive Visibility: Offers visibility across multi-cloud environments.
Automated Policy Creation: Simplifies the policy creation process.
Granular Micro-segmentation: Provides detailed network traffic segmentation.
Enhanced Container Security: Strengthens security measures for containerized applications.
Ease of Deployment: Simplifies overall deployment process.
Scalability: Adapts to growing needs of cloud-native applications.

What benefits or ROI can users expect from Palo Alto Networks CN-Series?

Increased Security: Effective protection against sophisticated threats.
Improved Operational Efficiency: Streamlined deployment and policy management.
Greater Visibility: Enhanced insight into network traffic and potential vulnerabilities.
Cost Savings: Reduced costs through automation and integration of security processes.
Enhanced Compliance: Helps meet regulatory requirements with strong security controls.

Palo Alto Networks CN-Series is implemented across diverse industries including finance, healthcare, and technology. In financial institutions, it addresses stringent security and compliance requirements. In healthcare, it ensures patient data protection within dynamic cloud environments. In tech, it supports innovative cloud-native applications with robust security measures.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Triton Technical, McDonald's

Information Not Available

Buyer's Guide

KerioControl vs. Palo Alto Networks CN-Series

April 2026

Free Report: KerioControl vs. Palo Alto Networks CN-Series

Find out what your peers are saying about KerioControl vs. Palo Alto Networks CN-Series and other solutions. Updated: April 2026.

DOWNLOAD NOW

894,738 professionals have used our research since 2012.

See our KerioControl vs. Palo Alto Networks CN-Series report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.