No more typing reviews! Try our Samantha, our new voice AI agent.

Hillstone S-Series Network Intrusion Prevention System vs KerioControl comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Hillstone S-Series Network ...
Ranking in Intrusion Detection and Prevention Software (IDPS)
22nd
Average Rating
9.0
Reviews Sentiment
7.8
Number of Reviews
1
Ranking in other categories
No ranking in other categories
KerioControl
Ranking in Intrusion Detection and Prevention Software (IDPS)
15th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
58
Ranking in other categories
Firewalls (28th), Unified Threat Management (UTM) (10th)
 

Mindshare comparison

As of April 2026, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Hillstone S-Series Network Intrusion Prevention System is 1.4%, up from 0.6% compared to the previous year. The mindshare of KerioControl is 2.6%, down from 3.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS) Mindshare Distribution
ProductMindshare (%)
KerioControl2.6%
Hillstone S-Series Network Intrusion Prevention System1.4%
Other96.0%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

reviewer1080873 - PeerSpot reviewer
Senior Consultant at a tech services company with 51-200 employees
Complements any firewall
The core processors are there and it's able to generate reports for that. It also complements any kind of firewall. For example, if an end user is using Palo Alto as a firewall, they'd need another layer of firewall like the S-Series that will protect internal servers. It's something that complements any firewall in the market.
Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Setup is straightforward with the same reliability and scalability as the firewall series."
"Setup is straightforward with the same reliability and scalability as the firewall series."
"Kerio's VPN has easily saved us 50 percent, maybe more, in terms of time spent on support."
"It works well as it is, and I don't have a problem with how it works."
"The solution provides feasibility regarding cyber privacy."
"Kerio is a lot clearer to set up to do particular things, whereas when I do it on a Cisco or a FortiGate I have to go fight with it per week sometimes to do something I can do in 20 minutes on Kerio."
"The ease of use and the ability to deliver customized solutions is incredible."
"One thing we use quite a lot, as well, is the DHCP Server, because we do a lot of work where all our devices need to have static IP addresses. Rather than going around and configuring every box, we do it all through DHCP reservations. It's easier. We've got a record of it. We can manipulate it if we need to change something or change some hardware. It's all easy. Even guys who are not used to using it can pick it up quite quickly."
"It just works, it does what it is meant to do."
"Kerio Control can be scaled easily."
 

Cons

"Lack of tools to help educate end users"
"Lack of tools to help educate end users"
"There's also room for improvement in the Traffic Rules. We define networks to use a specific outgoing interface, say VSAT, shore, or marine WiFi, which is okay. But then all we have is a checkbox that says "Use other internet interfaces if this one is unavailable." What we would prefer would be to have a priority list. So if VSAT is unavailable, try to use 4G, etc. We haven't really found a reliable way of doing that in the current release."
"I would like it if the interface section had multiple failovers. Although I do have three connections, just in case our physical cables get disconnected, I can only set up one failover as a backup. So, if for some reason our fiber and our AFM went down together, I would have to have it search for our 4G modem. I'd love to have extra backups running."
"I would like for them to add more security features."
"Sometimes you get a few challenges joining to a domain."
"I would like to see a little improvement in their technical support when you have a problem."
"The improvement that we are looking for is for when decide to move some part of our application to the cloud."
"The filtering on the unlicensed version of Kerio Control is inefficient - you have to add each website manually, which isn't feasible."
"The only stability issue that we have is with regard to the latency and using MyKerio."
 

Pricing and Cost Advice

Information not available
"On the low-end device that I use, it has unlimited IP addresses. So, they have a subscription model where, on the higher models, you pay X dollars for 10 IP addresses. Then, if you want any more, you have to pay more on the model. On the low-end model, it has unlimited IP addresses, because if you have too many users, the thing will just slow you down and stop working. At some point, you need to say, "Okay, I've grown to a point where performance is impacted. I need to get some bigger hardware." If I get to that stage, I will possibly look at using one of the virtual appliances and putting it on some bigger hardware."
"Its price is fair. There are no additional costs."
"Licensing is easier with Kerio Control. With FortiGate, we realized the licensing is really hectic, because if you skip one year, you have to back pay that year. If you skip two years, you have to back pay two years. With Kerio Control, if a license expires, one year later you can just reactivate and go on."
"I think it is a bit on the pricey side, but it's okay. I've got 50 licenses which I think is $250 a year or something like that."
"Its licensing is yearly. You renew every year. Its price is all-inclusive."
"There is a yearly upkeep fee."
"GFI has made a stupid decision regarding small office licensing. For offices where there are only three to five employees and had five years towards a five user product, they now force these customers to a 10-year user license. I really don't understand it. It's a stupid decision for the small offices who want a good solution for security because they'll probably decide to go to another product. Why should they buy something that they don't use?"
"The price of Kerio Control could be better, it is a bit overpriced compared to other solutions."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
885,376 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Computer Software Company
17%
Comms Service Provider
9%
Manufacturing Company
7%
Media Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the product is rated as ten out of ten.
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use KerioControl as our solution.
 

Also Known As

Hillstone S-Series NIPS
No data available
 

Overview

 

Sample Customers

Information Not Available
Triton Technical, McDonald's
Find out what your peers are saying about Fortinet, Darktrace, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS). Updated: February 2026.
885,376 professionals have used our research since 2012.