Try our new research platform with insights from 80,000+ expert users

KerioControl vs Sophos Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 19, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.8
Fortinet FortiGate offers cost-effective, robust security, reducing expenses, enhancing efficiency, easy implementation, quick ROI, and improved network management.
Sentiment score
6.8
KerioControl delivered significant financial benefits through bandwidth optimization, VPN efficiency, and reduced support, maintenance, and security expenses.
Sentiment score
6.8
Sophos Firewall provides high ROI by enhancing security and efficiency, though some users are concerned about licensing costs.
Clients are now comfortable and not wasting productive hours on IT support.
Managing Director at a manufacturing company with 10,001+ employees
The automation part is giving us a cost benefit and speed; we can react faster.
BDM Fortinet & BDM Teamlead at Exclusive Networks
It's a very useful tool to mitigate and protect your enterprise.
Staff Infrastructure & Security Engineer at Mozn Systems
The costs have increased with Sophos XGS in the last few years, with license prices going up by 30%, doubling from $2,500 to about $5,000, which is a big challenge for us.
IT Manager at Bavaria Egypt S.A.E.
The graphical interface of Sophos XG simplifies configurations, saving time in support and troubleshooting compared to the Linux-based solution I previously used.
Head ICT at NIC Uganda
We purchased endpoint security for the first time last year, and even without endpoint security, it provides comprehensive security.
IT Manager , SAP HANA Administrator at Tara Paints & Chemicals
 

Customer Service

Sentiment score
6.6
Fortinet FortiGate's customer service is generally praised for responsiveness, though some users experience delays in critical situations.
Sentiment score
5.3
KerioControl support receives mixed reviews, with some praise but many report slow responses and reliance on online communities.
Sentiment score
6.4
Sophos Firewall's customer support receives varied feedback, with some praising responsiveness, while others cite delays and language barriers.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
IT Manager at a consultancy with 10,001+ employees
I would rate the technical support for Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
Manager, Information Technology Operation/Presales at TechMonarch
I have never needed to contact customer support as the product is easy to use.
Product manger at Asbis Mediteranean
I rate the technical support a ten out of ten.
IT Manager at Jabalpur Motors Ltd
Their team was quick to diagnose and resolve the problem by exchanging the equipment within two weeks.
Network and Infrastructure Manager at Sonysugar
Any issues are quickly addressed by their support team, which is not common among all OEM manufacturers.
Owner at a marketing services firm with 11-50 employees
 

Scalability Issues

Sentiment score
7.1
Fortinet FortiGate is scalable and popular for SMEs but requires careful design and may incur scaling costs and licensing constraints.
Sentiment score
6.7
KerioControl suits small to medium businesses but faces scalability issues in larger enterprises, requiring hardware upgrades for increased capacity.
Sentiment score
7.0
Sophos Firewall meets user expectations for network expansion, praised for medium-sized businesses but may limit large enterprise scalability.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
IT Manager at Daltons Limited
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
Cewa Solutions Architect at a tech services company with 11-50 employees
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
General Surgery Specialist at Helwan University Cairo
KerioControl has met some of the network infrastructure needs yet could improve in terms of scalability.
Product manger at Asbis Mediteranean
You can scale up to multiple firewalls with centralized management.
Technical Consultant at a media company with 1,001-5,000 employees
You can't upgrade memory or storage on a specific model, which limits scalability.
Technical Services Lead at Telenet Solutions
I rate the scalability a nine out of ten.
Technical Support Engineer at Digitaltrack
 

Stability Issues

Sentiment score
7.7
Fortinet FortiGate is praised for its stability, with effective long-term performance and improvements in newer firmware versions.
Sentiment score
7.2
KerioControl is stable and reliable, with minor hardware or update challenges, and performs well according to user assessments.
Sentiment score
7.9
Sophos Firewall offers stable, reliable performance with quick support response, resolving occasional glitches despite previous stability issues.
We're experiencing 99.999% availability consistently.
Manager, Information Technology at a consumer goods company with 11-50 employees
I would rate the stability of Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
CISO at a financial services firm with 1,001-5,000 employees
It is rated at nine out of ten for stability and is very reliable.
Director Technical Services at TechnoBIZ
Sophos XG is very stable, even when serving as a DHCP server.
Global IT Manager at Express KItchen
Sophos XGS is stable now, and I would rate its stability as a ten out of ten.
IT Manager at Bavaria Egypt S.A.E.
 

Room For Improvement

Fortinet FortiGate needs enhanced UI, simplified licensing, improved performance, reporting, third-party integration, and expanded automation features.
KerioControl requires improvements in VPN, user interface, support, security, performance, and customization features for large networks.
Users seek interface improvements, enhanced VPN, DNS filter, better support, and simplified HTTPS for mobile with faster response times.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
Managing Director at a manufacturing company with 10,001+ employees
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
Senior Systems Engineer at Caribbean Development Company
It would be better for customers to get immediate replacements even with a standard subscription.
Director at a tech services company with 11-50 employees
The solution should have the ability to be up to date with the most recent threats.
CIO at Nuotek Limited
This suggests a vulnerability that needs addressing to ensure administrators can update patches without losing access.
Adjunct Professor, Cybersecurity at University of the People
Business cannot stop just because of issues with support.
Sr. Manager (Technology) at Contessabd
 

Setup Cost

Enterprise buyers find Fortinet FortiGate costly initially, but cheaper overall, despite some high renewal and setup costs.
KerioControl offers affordable pricing with complex licensing, appreciated features, but high annual fees can be challenging for small offices.
Enterprise buyers find Sophos Firewall competitively priced with value in bundled features and reasonable costs compared to Fortinet and Palo Alto.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
Network & System Admin at Invoke Studios
It offers cost savings as it is generally cheaper than the competition.
IT Infrastructure Architect at Apotek 1
It is about 20% cheaper.
Network Security Engineer at TD SYNNEX
The price for the product is rated as ten out of ten.
Product manger at Asbis Mediteranean
I rate the pricing a ten out of ten.
Owner at Computer Services Professionals
Currently, it costs about four million shillings in Kenya.
Network and Infrastructure Manager at Sonysugar
The cost depends on the package you are in, such as full threat management or basic.
Technical Services Lead at Telenet Solutions
 

Valuable Features

Fortinet FortiGate provides robust, flexible security solutions with key features like web filtering, SSL VPN, SD-WAN, and centralized management.
KerioControl provides user-friendly navigation, robust security features, VPN support, and efficient network management with positive feedback on ease of use.
Sophos Firewall excels with secure VPNs, endpoint integration, centralized management, threat prevention, and user-friendly configuration capabilities.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
Head IT at Burraq Cyber Security Solutions
The most valuable feature of FortiGate is FortiView which provides proactive monitoring.
General Manager Group IT at DART GLOBAL LOGISTICS PTE. LTD.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
Owner at Mindware Computer Solutions
The most valuable features include geo-tagging, which blocks all other IPs except for the specified accounts, and web filtering.
Product manger at Asbis Mediteranean
The firewall feature of Sophos XG has been the most effective for threat prevention.
Information Technology Specialist at stelios@biolandenergy.com
Integration with endpoint security products ensures seamless traffic flow and rule enforcement, even when endpoints are not directly connected to the firewall.
Founder/Director at Augesys Solutions Pvt Ltd
Visibility features are included in XDR. This provides information on user impact, potential threats on specific machines, source and destination IPs, setup firewall details, and unique identifiers for each machine.
Pre-Sales Architect at network techlab
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
580
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
KerioControl
Ranking in Firewalls
27th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
58
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (16th), Unified Threat Management (UTM) (10th)
Sophos Firewall
Ranking in Firewalls
3rd
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
302
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.7%, down from 20.5% compared to the previous year. The mindshare of KerioControl is 1.1%, down from 1.4% compared to the previous year. The mindshare of Sophos Firewall is 8.4%, down from 10.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Market Share Distribution
ProductMarket Share (%)
Fortinet FortiGate18.7%
Sophos XG8.4%
KerioControl1.1%
Other71.8%
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
MM
Senior Systems Tech/Admin at Samco Software Inc.
Comprehensive Security Features and High Ease of Setup Elevate User Experience
The best features for KerioControl are its proprietary VPN protocol, which does not connect easily with other firewalls unless you enable IPsec. It will only connect to KerioControl. KerioControl is very valuable for business. Key points where KerioControl is valuable include its own anti-spam, intrusion prevention, and antivirus, which is included in the yearly subscription renewals. The VPN capabilities are helpful in managing my remote or distributed workforce, as we create documents and set up a location for clients to download. Clients can download KerioControl's VPN client online, and they just have to log in from the VPN client, which connects easily. I assess the firewall function in filtering both incoming and outgoing network traffic with KerioControl as excellent. Everything is logged, and any intrusion, antivirus, virus, or anything foreign to the system trying to hack in gets logged, and we can easily block those IPs.
Nassif  Kaleny - PeerSpot reviewer
IT Manager at Bavaria Egypt S.A.E.
Dynamic web and mail filtering contribute to improved security measures
The reporting system is very poor. I cannot trace any traffic to our site if it feels some threats. It just tells me that there is something during a certain time but does not provide information about the type of threats or how to get rid of them. This needs improvement.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
880,511 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
18%
Comms Service Provider
9%
Manufacturing Company
7%
Media Company
7%
Computer Software Company
13%
Comms Service Provider
10%
Manufacturing Company
7%
Educational Organization
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business357
Midsize Enterprise133
Large Enterprise188
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
By reviewers
Company SizeCount
Small Business203
Midsize Enterprise62
Large Enterprise52
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the p...
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use K...
Which is better - Palo Alto Networks NG Firewalls or Sophos XG?
Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...
What are the main differences in features between Sophos XG and FortiGate 80F?
Hi Arvind P , The Sophos XG firewall has a number of models right from XG86 to XG135w under the 1U Desktop Form Fact...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
No data available
Sophos XG, Sophos XGS
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Triton Technical, McDonald's
Information Not Available
Find out what your peers are saying about KerioControl vs. Sophos Firewall and other solutions. Updated: December 2025.
880,511 professionals have used our research since 2012.