No more typing reviews! Try our Samantha, our new voice AI agent.

KerioControl vs Palo Alto Networks CN-Series comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

KerioControl
Ranking in Firewalls
27th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
58
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (13th), Unified Threat Management (UTM) (8th)
Palo Alto Networks CN-Series
Ranking in Firewalls
37th
Average Rating
9.6
Reviews Sentiment
7.4
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Firewalls category, the mindshare of KerioControl is 1.2%, down from 1.3% compared to the previous year. The mindshare of Palo Alto Networks CN-Series is 0.5%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
KerioControl1.2%
Palo Alto Networks CN-Series0.5%
Other98.3%
Firewalls
 

Featured Reviews

Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…
Ahmed_Shalaby - PeerSpot reviewer
Senior Cyber Security Engineer at Beta Information Technology
Application control excels and integration with monitoring system boosts efficiency
I am an integrator working with Palo Alto Networks CN-Series and Panorama. I have been involved with the implementation of Palo Alto Networks CN-Series The stability of Palo Alto Networks CN-Series is excellent. Application control is one of the most valuable features. Its monitoring capability…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Kerio's VPN has easily saved us 50 percent, maybe more, in terms of time spent on support."
"The tool shows what has been blocked externally. It's very good because once installed and correctly set up, it allows you to work from home as if you are in the office, without any errors or issues. It's very simple to use, click to connect or disconnect."
"The most valuable features include geo-tagging, which blocks all other IPs except for the specified accounts, and web filtering."
"The traffic insight page or the administrative portal is really helpful because you can see all the internet usage down to the point where you can see if it's big files or streams. It gives us a good view of what the internet usage is of users who are coupled to an IP address. That way, if there are problems with, for example, a lot of data usage or problems with the connection, we can narrow it down to a single user or server and address the problem. It's really helpful for diagnostic data."
"Navigation through options and configure them is just two mouse clicks away, with lots of information available without the need of an external tool."
"I am impressed with the tool's firewall filtering capacity."
"On an annual basis, we save not just hundreds of hours but also labor costs, and over the life of the product, I'm sure it's in the tens of thousands of hours because we don't need an inhouse specialist in Kerio technology."
"It has helped our organization with testing."
"The app inspection is very helpful for network security."
"The stability of Palo Alto Networks CN-Series is excellent."
 

Cons

"The product's technical support is not good as it used to be."
"The improvement that we are looking for is for when we decide to move some part of our application to the cloud."
"If you have to dive deeper into the firewall or any other features, then you really have to read up a bit about how to set it up properly."
"I would like to be able to inspect https packets for the purpose of virus scanning."
"I would like the customer statistics to be more user-friendly. It should explain more what users have been doing throughout the day. Sometimes, it'll just say they downloaded a big file. Meanwhile, they were connected through a VPN."
"I would like to see geo-IP filtering added to the filtering rules. Incorporating these rules would be very beneficial if you have different ideas or reasons to filter, such as communication to the email server or specific websites."
"Sometimes you get a few challenges joining to a domain."
"The filtering on the unlicensed version of Kerio Control is inefficient - you have to add each website manually, which isn't feasible."
"I'd like to see more IOPs features."
"Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive."
 

Pricing and Cost Advice

"On the low-end device that I use, it has unlimited IP addresses. So, they have a subscription model where, on the higher models, you pay X dollars for 10 IP addresses. Then, if you want any more, you have to pay more on the model. On the low-end model, it has unlimited IP addresses, because if you have too many users, the thing will just slow you down and stop working. At some point, you need to say, "Okay, I've grown to a point where performance is impacted. I need to get some bigger hardware." If I get to that stage, I will possibly look at using one of the virtual appliances and putting it on some bigger hardware."
"Its licensing is yearly. You renew every year. Its price is all-inclusive."
"The yearly maintenance fee is a bit high for the Kerio Control Boxes. The end of life for the devices is kind of short. It seems like they're making you upgrade within a short period of time. They should at least allow five years, but it seems like they are changing their end of life to be shorter to generate revenue."
"There is a yearly upkeep fee."
"The fixed model of users and devices is a bit of a problem for us. We want to be able to expand it fast and not have to contact our supplier first to get a license... If they had a larger fixed price with unlimited users or devices, that would help. Now, it's five users each time. A pack of 100 or 200 users for a certain price would make it more dynamic and user-scalable."
"Our clients see ROI with Kerio Control, as they are saving bandwidth costs."
"Pricing is good, but the licensing took a lot of time."
"My advice is to use your own hardware, and do not use theirs."
Information not available
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
11%
Computer Software Company
10%
Comms Service Provider
10%
Manufacturing Company
10%
University
11%
Construction Company
9%
Financial Services Firm
9%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the product is rated as ten out of ten.
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use KerioControl as our solution.
What is your experience regarding pricing and costs for Palo Alto Networks CN-Series?
The pricing of Palo Alto Networks CN-Series is quite expensive, rating around eight on a scale of one to ten for cost.
What needs improvement with Palo Alto Networks CN-Series?
Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive. The SD-WAN implementation using Panorama needs enhancement because it involves a specific plugin and configuring ...
What is your primary use case for Palo Alto Networks CN-Series?
I am an integrator working with Palo Alto Networks CN-Series ( /products/palo-alto-networks-cn-series-reviews ) and Panorama. I have been involved with the implementation of Palo Alto Networks CN-S...
 

Overview

 

Sample Customers

Triton Technical, McDonald's
Information Not Available
Find out what your peers are saying about KerioControl vs. Palo Alto Networks CN-Series and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.