Try our new research platform with insights from 80,000+ expert users

KerioControl vs Palo Alto Networks Advanced Threat Prevention comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 19, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.0
KerioControl provides cost savings through bandwidth optimization, VPN efficiency, and management ease, despite concerns about rising licensing fees.
Sentiment score
7.5
Palo Alto Networks Advanced Threat Prevention offers fast, comprehensive security, boosting user satisfaction and revenue despite high costs.
It offers insights into security threats, despite the inability to quantify its impact in numbers.
 

Customer Service

Sentiment score
5.5
KerioControl's support is responsive yet sometimes delayed, with users desiring faster response times and fewer additional charges.
Sentiment score
6.4
Palo Alto Networks' support is generally effective despite communication issues and regional differences, with most users rating it positively.
I have never needed to contact customer support as the product is easy to use.
I rate technical support from Palo Alto as eight out of ten.
 

Scalability Issues

Sentiment score
6.9
KerioControl is ideal for small to medium businesses, offering robust features but may require upgrades for extensive scaling.
Sentiment score
7.9
Palo Alto Networks Advanced Threat Prevention is highly scalable, adaptable across environments, but cost considerations may affect scalability.
KerioControl has met some of the network infrastructure needs yet could improve in terms of scalability.
Palo Alto Networks Advanced Threat Prevention is scalable and works well wherever enforcement points exist.
 

Stability Issues

Sentiment score
7.4
KerioControl offers reliable performance with robust security for small to medium enterprises, despite minor hardware and configuration issues.
Sentiment score
7.9
Palo Alto Networks Advanced Threat Prevention is preferred for its stability, outperforming competitors, and requires proper firewall sizing.
Proper sizing of the firewall models ensures that the system does not experience crippling performance issues.
 

Room For Improvement

KerioControl needs improvements in VPN, user interface, support, performance, diagnostics, scalability, reliability, licensing, and logging features.
Palo Alto Networks needs improvements in email security, user support, and analytics, while addressing complexity, false positives, and integration.
The behavioral detection capabilities could be expanded to address all threats at the perimeter, reducing the reliance on endpoint detection and response systems.
 

Setup Cost

KerioControl is affordable with robust features, though some find the licensing model complex and renewal costs concerning.
Palo Alto Networks Advanced Threat Prevention is costly yet valued for its features, particularly in threat detection and scalability.
The price for the product is rated as ten out of ten.
Palo Alto Networks Advanced Threat Prevention requires an add-on license and is considered expensive compared to competitors like Cisco AMP and FortiGate firewalls.
 

Valuable Features

KerioControl offers comprehensive security, ease of use, reliable VPN, and a user-friendly interface for efficient management and protection.
Palo Alto Networks Advanced Threat Prevention provides intuitive threat prevention with machine learning, excellent reporting, and seamless integration with other tools.
The most valuable features include geo-tagging, which blocks all other IPs except for the specified accounts, and web filtering.
As traditional signature-based mechanisms become less effective due to the evolving nature of attacks, this solution's focus on behavioral analysis is crucial.
 

Categories and Ranking

KerioControl
Ranking in Intrusion Detection and Prevention Software (IDPS)
19th
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
57
Ranking in other categories
Firewalls (34th), Unified Threat Management (UTM) (11th)
Palo Alto Networks Advanced...
Ranking in Intrusion Detection and Prevention Software (IDPS)
6th
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
27
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2025, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of KerioControl is 1.7%, up from 1.2% compared to the previous year. The mindshare of Palo Alto Networks Advanced Threat Prevention is 7.4%, down from 8.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

Constantnos Achilleos - PeerSpot reviewer
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…
Carlos Bracamonte - PeerSpot reviewer
Robust, reliable, simple to install and good technical support
We are attempting to improve the use of URL filtering beyond threat protection. I'm not sure what the remaining threat protection features are off the top of my head. But beyond that, we use URL filtering. We have three approved cases for using external dynamic lists that are stored in a bucket repository. Then, for each URL site that needs to be whitelisted, we add it to the external dynamic list in order to gain access to this email. I would like Wildfire to be implemented. We use the equivalent in Cisco is the integration policies. We have the Wildfire but we are not currently implementing it. We don't have the license to use it, but we are not currently implementing it until we present the use cases that the company gives some value to and they approve the use of it.
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
850,671 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
23%
Comms Service Provider
9%
Financial Services Firm
9%
Media Company
8%
Computer Software Company
16%
Financial Services Firm
10%
Manufacturing Company
9%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about KerioControl?
The solution provides feasibility regarding cyber privacy.
What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the product is rated as ten out of ten.
What needs improvement with KerioControl?
The logs could be improved for better clarity. It is difficult to understand when there is a threat attack, and handling firmware requires experience.
Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Arbor would be the best bid, apart from Arbor, Palo Alto and Fortinet have good solutions. As this is an ISP, I would prefer Arbor.
What is your experience regarding pricing and costs for Palo Alto Networks Threat Prevention?
The pricing is competitive, and with current campaigns and discounts, it provides an excellent device for a reasonable price.
 

Overview

 

Sample Customers

Triton Technical, McDonald's
University of Arkansas, JBG SMITH, SkiStar AB, TRI-AD, Temple University, Telkom Indonesia
Find out what your peers are saying about KerioControl vs. Palo Alto Networks Advanced Threat Prevention and other solutions. Updated: April 2025.
850,671 professionals have used our research since 2012.