No more typing reviews! Try our Samantha, our new voice AI agent.

KerioControl vs Stormshield Network Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 7, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Unified Threat Management (UTM)
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
592
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st)
KerioControl
Ranking in Unified Threat Management (UTM)
8th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
58
Ranking in other categories
Firewalls (28th), Intrusion Detection and Prevention Software (IDPS) (15th)
Stormshield Network Security
Ranking in Unified Threat Management (UTM)
14th
Average Rating
7.8
Reviews Sentiment
5.4
Number of Reviews
18
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2026, in the Unified Threat Management (UTM) category, the mindshare of Fortinet FortiGate is 24.9%, down from 36.6% compared to the previous year. The mindshare of KerioControl is 4.0%, up from 3.5% compared to the previous year. The mindshare of Stormshield Network Security is 3.7%, up from 3.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Unified Threat Management (UTM) Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate24.9%
KerioControl4.0%
Stormshield Network Security3.7%
Other67.4%
Unified Threat Management (UTM)
 

Featured Reviews

JK
IP Network Security Specialist at MTN Ghana
Process-Level CPU Visibility: Introduce detailed CPU-usage metrics per subsystem (e.g., IPS engine, logging) so administrators can quickly identify and address performance spikes.
Analytics with FortiAnalyzer. Being able to pull in logs not just from our FortiGates but from all our other firewalls and then get them in one view has been a game changer. Whether I’m building an executive dashboard or doing a deep dive forensics session, I get everything I need without navigating consoles.Straightforward Application Control. FortiGate spots and blocks unwanted apps (eq. like BitTorrent or streaming services) with accuracy. Segmentation with VDOMs. We’ve carved our data center into four logical ‘mini-firewalls’ enterprise, core, billing, and WAF—all on one box. Each has its own rules and logs, and any traffic between them still gets inspected. It’s like having multiple appliances without the extra hardware. Always-Up-to-Date Threat Feeds. Daily signature updates and AI-driven threat sensing mean we’re blocking the latest vulnerabilities almost as soon as they’re announced.
Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…
Zsolt Jónás - PeerSpot reviewer
System Administrator at NaxoNet
Advanced GUI and layered security have supported compliance and simplified intrusion prevention
I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability solution would be beneficial because currently, if you build a high availability solution with Stormshield Network Security, you have a main device and another one is a backup device. The HA can switch between them, but it would be good to have a master-master solution, not just a master-slave one. I could set a URL that I can call to update the DNS record. Currently, Stormshield Network Security devices support DynDNS, which is not a usual feature request from a server environment. I have my own solution instead of DynDNS because I don't prefer it, so I have my own service for that. However, the GUI does not support using a custom service instead of DynDNS. I had to solve it in the console on Stormshield Network Security device, but it would be much better if it was reachable on the GUI. I had to figure out a trick for the IPsec configuration. In the IPsec config, we have to provide the remote side's IP address, but it's always changing. This means that an office, for example a company that has an office but without a fixed IP address, cannot be used with IPsec VPN.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product is user-friendly and easy to manage."
"It has a good UI and overall integration, including FortiGate Manager for controlling all firewalls from a single place."
"Fortinet FortiGate has positively impacted my organization by allowing us to replace all the firewalls in other locations, as around 90% of our company operates on Fortinet."
"There is an easy process for configuring it, and it is straightforward to implement the device from scratch."
"This firewall is an antivirus, protects against spam, and is an IPS."
"The Fortinet technical support is awesome."
"The tool is a nice product and easy to handle. The software's user interface is also good. You can easily implement remote access in the solution."
"It's easy to manage. The GUI is very simple, and what is very good is that every product, regardless of size, has the same interface."
"Kerio Control is easy to use and provides the ability to deliver customized solutions."
"I love the VPN that we set up. A few of us have it on our computers so that if we leave, we can still access the stores. And we can work from home if needed. When I sign into that Kerio VPN, it links me like I'm sitting in the store. It puts me in our secure network so that I can sign on to each individual store and I can run numbers... If I have to work from home, it's so much faster than the way we used to do it."
"The user interface and the ease of use are pretty good. Everything fits together so nicely."
"The most valuable feature is the reliability of VPN capabilities. The VPN has been very reliable and secure. The security has been very good and the VPN connections are reliable in that they stay up. We don't have a lot of problems with downtime and that type of thing."
"Kerio Control gives us everything in one solution."
"I am impressed with the tool's firewall filtering capacity."
"The flexibility of the system, the capacity to provide the right level of security, and the ability to be integrated into different kinds of infrastructures are the most valuable features."
"The anti-virus and perimeter security functionality minimizes vulnerabilities in our network and better secures our data, and this also decreases downtime of devices due to viruses and malware attacks."
"The performance of this solution is good."
"The most valuable features are the IPS, the firewall function, and the price."
"The StormShield solution has enabled us to fully implement best practices from Microsoft in the cloud : the hub and spoke architecture."
"The solution has improved my organization because I can see what traffic is happening and I can use it to block and prevent attacks."
"Our organization's main concern is stability, and this is a stable solution."
"The scalability of the solution is good."
"The features I find most valuable is the backup inspection, the filtering, and the load balancing, and I am also impressed by the antivirus feature that gives us two controls over the viruses - one is from the parameter and one on the endpoint."
"I like that it works fine. Stormshield is a very good solution."
 

Cons

"There is an area for improvement in vulnerability management."
"Fortinet technical support is lacking, as OEM support is slightly better."
"The logging details need to be improved."
"Some of the features in the graphical user interface do not work, which requires that we used the command-line-interface."
"Fortinet FortiGate SWG can be expensive for some customers."
"The feedback that I have received is that the performance could be better, and the user experience is not as good compared to a previous solution we used. It could be more user-friendly. Of course, it still works fine for our operations."
"We also have FortiAnalyzer deployed here, so we want to enable the soft functionality of FortiGate and built-in compression for a firewall VPN use case. We want the ability to deploy a gateway for HTTPS enabled on this firewall. It is currently only for use in our headquarters."
"The pricing could always be better."
"The GUI should be changed because it remains the same consistency across versions. However, those who have been using KerioControl for a long time may be accustomed to the current interface. Installing a new version in the same location makes it easy to find, but overall, there are no notable changes between versions."
"Because of all the security features within Kerio Control, e.g., it can do a deep packet inspection, this can slow down the traffic."
"If you have to dive deeper into the firewall or any other features, then you really have to read up a bit about how to set it up properly. Some of my colleagues, in the beginning, jumped in and made a bunch of rules but then it got really messy. If Kerio had a template or guidelines for best practices, at the beginning, that would really help. With Kerio Control it's basically 'find out for yourself.'"
"If you put the appliance in Fail-Over mode it will simply FAIL, and will bypass your routing rules."
"When it comes to dealing with updates, there are often bugs on the solution. They should do a lot more testing before they release new versions."
"When we did our last update, we had some trouble with the initial syncing process to get our messaging to go through."
"I would like for them to add more security features."
"One of the problems we do have causes problems with the VPN. The software slows the throughput down too much."
"Support is always an issue because they're constantly busy."
"This is not a next-generation firewall."
"A more user-friendly interface would be helpful."
"The pricing of this solution needs to be decreased."
"Being more cost effective. I went with a pair of Watchguard M300 recently when buying a new firewall cluster for our own use because it was way cheaper than NetASQ/Stormshield N700 while being faster, and it offers true multi-master firewall clustering if needed."
"An application firewall like other next generation firewalls have."
"This solution has a big problem with web filtering and it needs to be improved."
"With Stormshield, there are difficulties joining things, and it can be complex depending on the architecture."
 

Pricing and Cost Advice

"I rate the product's pricing a seven out of ten. Its one-year license cost is competitive with three and five-year licenses offered by other products."
"The product is expensive."
"The price of FortiGate support is too expensive."
"The licensing cost is at the intermediate level."
"It's expensive, but compared to the competition it's okay."
"FortiGate Next Generation Firewall is an expensive solution."
"Other firewalls are more expensive than Fortinet FortiGate, such as the Azure firewall."
"I would say that all things considered, the pricing is pretty good."
"The biggest advice that I could probably give people is when you buy the solution be prepared to either buy the unlimited license or buy more licenses than you think. Each user license gives you one employee and each a user gives you five devices. In the world nowadays where everybody has a cellphone, tablet, desktop, and laptop, that's four devices. You still get one more device per person. That covers your servers and back-ends."
"I think it is a bit on the pricey side, but it's okay. I've got 50 licenses which I think is $250 a year or something like that."
"There's a one-time fee. For KerioConnect, it's just a server. With KerioControl, you have an option. You can virtualize it on a VMware system or have the hardware. I think mid-range or desktop KerioControl hardware could cost around 2000 dollars for a 25 user client. You need annual renewal for additional features like antivirus."
"Pricing is good, but the licensing took a lot of time."
"We have to pay approximately EUR 175 for the product."
"The price is inexpensive."
"Its licensing is yearly. You renew every year. Its price is all-inclusive."
"It's pretty expensive in licensing costs, especially if you use the product longer than one or two years. The licensing costs are still high, which I don't think is reasonable for a product like this."
"We bought a three-year license, and we renew it whenever it expires. The price could be better. It's always very expensive."
"The pricing could be better."
"I think the price is good."
"The SN200 series costs between $500 USD and $600 USD per year, whereas the SN700 series costs approximately $1,000 annually."
"The price of this solution and the price of support are ok."
"For mid-sized companies, they sell their appliances for good prices."
"We chose Stormshield for its price, as the Azure firewall was too expensive."
report
Use our free recommendation engine to learn which Unified Threat Management (UTM) solutions are best for your needs.
902,417 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
10%
Computer Software Company
9%
Manufacturing Company
9%
Financial Services Firm
7%
Computer Software Company
12%
Comms Service Provider
11%
Construction Company
11%
Financial Services Firm
8%
Comms Service Provider
16%
Manufacturing Company
12%
Computer Software Company
9%
Construction Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business369
Midsize Enterprise139
Large Enterprise195
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise5
Large Enterprise2
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the p...
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use K...
What needs improvement with Stormshield Network Security?
I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability sol...
What is your primary use case for Stormshield Network Security?
I already use Stormshield Network Security, and I am now looking for a new solution. I am already working with Storms...
What advice do you have for others considering Stormshield Network Security?
The pricing is increasing, and I would say it is a bit expensive. Palo Alto and others are much more expensive, but S...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
No data available
NETASQ Firewalls
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Triton Technical, McDonald's
ACESUR group, Ministry of Education Oman, Anios Laboratories, Zain, DLM Location
Find out what your peers are saying about KerioControl vs. Stormshield Network Security and other solutions. Updated: June 2026.
902,417 professionals have used our research since 2012.