No more typing reviews! Try our Samantha, our new voice AI agent.

KerioControl vs Stormshield Network Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 7, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Unified Threat Management (UTM)
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
592
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st)
KerioControl
Ranking in Unified Threat Management (UTM)
8th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
58
Ranking in other categories
Firewalls (28th), Intrusion Detection and Prevention Software (IDPS) (15th)
Stormshield Network Security
Ranking in Unified Threat Management (UTM)
14th
Average Rating
7.8
Reviews Sentiment
5.4
Number of Reviews
18
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2026, in the Unified Threat Management (UTM) category, the mindshare of Fortinet FortiGate is 24.9%, down from 36.6% compared to the previous year. The mindshare of KerioControl is 4.0%, up from 3.5% compared to the previous year. The mindshare of Stormshield Network Security is 3.7%, up from 3.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Unified Threat Management (UTM) Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate24.9%
KerioControl4.0%
Stormshield Network Security3.7%
Other67.4%
Unified Threat Management (UTM)
 

Featured Reviews

Mageshwaran S - PeerSpot reviewer
Solution Architect at airtel
Enables customers to manage security effortlessly with intuitive features and easy integration
In terms of improvements for Fortinet FortiGate, they could offer evaluation licenses, as compared to Meraki, which provides a 90-day evaluation. In Fortinet FortiGate, they do not provide standard evaluation licenses; instead, we need to request them from the OEM through the account manager for POCs. If we want to conduct a demo, we need to work with real hardware. In comparison to Cisco, we have DCloud, which helps with providing demos to customers, but in Meraki, I need to reach out to them, book a lab, and they need to provide all the hardware. I need remote access and L3 engineers to program it; only then can I offer a real-time demo to the customer.
Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…
Zsolt Jónás - PeerSpot reviewer
System Administrator at NaxoNet
Advanced GUI and layered security have supported compliance and simplified intrusion prevention
I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability solution would be beneficial because currently, if you build a high availability solution with Stormshield Network Security, you have a main device and another one is a backup device. The HA can switch between them, but it would be good to have a master-master solution, not just a master-slave one. I could set a URL that I can call to update the DNS record. Currently, Stormshield Network Security devices support DynDNS, which is not a usual feature request from a server environment. I have my own solution instead of DynDNS because I don't prefer it, so I have my own service for that. However, the GUI does not support using a custom service instead of DynDNS. I had to solve it in the console on Stormshield Network Security device, but it would be much better if it was reachable on the GUI. I had to figure out a trick for the IPsec configuration. In the IPsec config, we have to provide the remote side's IP address, but it's always changing. This means that an office, for example a company that has an office but without a fixed IP address, cannot be used with IPsec VPN.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Overall security features and performance routing is good."
"This solution has helped our organization by having strong functions and a reliable firewall."
"The ability to set up remote systems is the most valuable feature."
"Fortinet FortiGate is stable. It's used across all the countries, this is the way most multinationals run their system."
"It's a good product that significantly enhances security and protects organizational data."
"The CLI is robust and powerful, enabling rapid, consistent changes via SSH."
"I found the upgrades valuable."
"The product is very stable, easy to troubleshoot, and configure, so it has reduced the time it takes for support."
"We use Kerio Control for controlling access to the web, and to protect the inside of the network."
"Our clients see ROI with Kerio Control, as they are saving bandwidth costs."
"The user interface and the ease of use are pretty good. Everything fits together so nicely."
"Its support is very good, and it is stable product.​"
"The solution has an app manager and a portal where you can maintain all your Keri products. It is a firewall that includes antivirus and anti-malware, which adds security. The VPNs, both site-to-site and client VPNs, are pretty easy to set up."
"The flexibility of the system, the capacity to provide the right level of security, and the ability to be integrated into different kinds of infrastructures are the most valuable features."
"Kerio Control fulfills my needs completely and allows me to get on with my main work without spending any time on security or worrying about threats to the data I have."
"The routing of the multiple internet physical routers I have is the most valuable feature of this solution. Instead of me physically unplugging a cable from one router to the server, if one connection goes down, it automatically switches for me. So I can have all three of them plugged in. If one goes down, it just picks up the other one automatically. There's no physical cable swapping."
"Our organization's main concern is stability, and this is a stable solution."
"The tool's most valuable feature is its dashboard, which helps you manage different aspects of a single page."
"The most valuable features of this solution are the URL filtering database, which is great and contains all internet categories, the highly scalable interface that I can turn into what I want including hybrid, bridge, or router mode, the security with no back doors that is more secure than other solutions, and the hardware performance that is also better than others."
"Fortinet, Dell SonicWall and Check Point because these products offer a wide range of features that are not available with Netasq."
"The scalability of the solution is good."
"I feel we have more options with the Stormshield firewall and new features that we haven't previously had."
"I like how you can configure the rules. There is the task for the rules and a task for the network configuration. It also provides SMD filtering, and it can be integrated with the active directory for the users, their mission, and the VPN configuration. We are here in Sudan, and Stormshield didn't work in Sudan for more than a decade. Stormshield is a very strong firewall and very easy to configure and maintain. I am just working with the firewall solution, and we don't have any other solutions like endpoint solutions or something like that."
"The tool's most valuable feature is its dashboard, which helps you manage different aspects of a single page. The intrusion detection system helps our organization by automatically detecting and responding to potential threats. It operates similarly to Darktrace, which detects and responds automatically based on the security rules you apply. Initially, you configure everything to block, and then you can whitelist specific items as needed."
 

Cons

"We also have FortiAnalyzer deployed here, so we want to enable the soft functionality of FortiGate and built-in compression for a firewall VPN use case. We want the ability to deploy a gateway for HTTPS enabled on this firewall. It is currently only for use in our headquarters."
"The reports provided by the equipment could be more detailed, and not so dependent on the FortiAnalyzer."
"There is an area for improvement in vulnerability management."
"I am looking to implement key authentication for admin access for the Fortinet product."
"Fortinet technical support is lacking, as OEM support is slightly better. Improvement in their technical support could include response time as well as having more technically sound people in tech support."
"The inability to scale the FortiAnalyzer to match our growth necessitates the purchase of new hardware."
"The biggest "gotcha" is that if the client purchases what they call the UTM shared bundle, which has unified threat management on both, it's not as easy to manage if you have more than one firewall."
"One of the most important areas for improvement for Fortinet FortiGate is the limited resources for tests. I was limited to a few interfaces for one month, and it would be great if Fortinet could improve these features in their test versions."
"At the moment, our workaround is just to reboot the box every two weeks, which is inconvenient, but if they're going to solve this, then we just have to wait."
"If you have to dive deeper into the firewall or any other features, then you really have to read up a bit about how to set it up properly. Some of my colleagues, in the beginning, jumped in and made a bunch of rules but then it got really messy. If Kerio had a template or guidelines for best practices, at the beginning, that would really help. With Kerio Control it's basically 'find out for yourself.'"
"If I would suggest anything, it would be to expand on its multifactor authentication to be a little bit more user-friendly."
"The VPN features are the ones that we really like, but we are using a VPN client to be able to use them. We would like to have an SSL implementation for this same feature so we don't need to install anything on the client side. That's a feature I really miss and that should really be embedded in the product. We really would love to use it via a web browser."
"I would like for them to add more security features."
"There were certain things I didn't know about it, but I've always been able to just contact our IT company. They've been able to walk me through certain things. It was quite a monumental task to set up a public site. Support really had to help me with setting up the VLANs and walk me through it. It was not possible for me to figure that out on my own, but that's what they're here for. That could have been a little bit easier laid out."
"Effectively, I can't use the WiFi facility in the appliance and had to purchase a separate web that supports VLANs."
"The solution should offer more dashboards."
"The stability is not that good based on my experience. We have a lot of disruptions when it comes to Stormshield."
"A more user-friendly interface would be helpful."
"The pricing of this solution needs to be decreased."
"The biggest issue was their support department was not able to help us, then everything stops. This is a no-go area for me."
"Support is always an issue because they're constantly busy."
"Stormshield Network Security is quite expensive."
"This solution has a big problem with web filtering and it needs to be improved."
"The product must improve its pricing."
 

Pricing and Cost Advice

"Fortinet bundles FortiGate with other products and because of this, the price is a little expensive to some SMB enterprises."
"Fortinet is reasonable in pricing and licensing. Overall, FortiGate is affordable. The licensing fee can be a little high, depending on the budget for your project."
"The price is okay, so far so good."
"It's an expensive solution."
"Pricing is lower than Cisco."
"The price is highly competitive when compared to other brands that offer similar functionality."
"Their licensing costs are annual. The UTM feature license along with their support is called FortiCare. We include that as a part of the annual maintenance cost. Palo Alto or Juniper also have an annual subscription charge for UTM. Price, of course, can always be more competitive, but it is not the most expensive product. The price-performance ratio is quite high for FortiGate."
"The price is okay."
"It is priced low enough for entry-level, but it has the power to grow with a company without them having to replace it."
"KerioControl's pricing is good."
"The price is inexpensive."
"Its price is fair. There are no additional costs."
"There is a yearly upkeep fee."
"Licensing is easier with Kerio Control. With FortiGate, we realized the licensing is really hectic, because if you skip one year, you have to back pay that year. If you skip two years, you have to back pay two years. With Kerio Control, if a license expires, one year later you can just reactivate and go on."
"My advice is to use your own hardware, and do not use theirs."
"KerioControl's pricing is reasonable. The license for KerioControl is annual. It's difficult to specify an exact cost since it varies depending on the number of users and additional software combined with it. For example, a basic box might cover 25 users, but licenses can be purchased starting from 10 users."
"We chose Stormshield for its price, as the Azure firewall was too expensive."
"The price of this solution and the price of support are ok."
"The SN200 series costs between $500 USD and $600 USD per year, whereas the SN700 series costs approximately $1,000 annually."
"We bought a three-year license, and we renew it whenever it expires. The price could be better. It's always very expensive."
"The pricing could be better."
"I think the price is good."
"For mid-sized companies, they sell their appliances for good prices."
report
Use our free recommendation engine to learn which Unified Threat Management (UTM) solutions are best for your needs.
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
10%
Computer Software Company
10%
Manufacturing Company
9%
Financial Services Firm
7%
Computer Software Company
12%
Comms Service Provider
11%
Construction Company
11%
Financial Services Firm
9%
Comms Service Provider
16%
Manufacturing Company
12%
Computer Software Company
10%
Construction Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business370
Midsize Enterprise138
Large Enterprise195
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise5
Large Enterprise2
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the p...
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use K...
What needs improvement with Stormshield Network Security?
I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability sol...
What is your primary use case for Stormshield Network Security?
I already use Stormshield Network Security, and I am now looking for a new solution. I am already working with Storms...
What advice do you have for others considering Stormshield Network Security?
The pricing is increasing, and I would say it is a bit expensive. Palo Alto and others are much more expensive, but S...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
No data available
NETASQ Firewalls
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Triton Technical, McDonald's
ACESUR group, Ministry of Education Oman, Anios Laboratories, Zain, DLM Location
Find out what your peers are saying about KerioControl vs. Stormshield Network Security and other solutions. Updated: June 2026.
900,644 professionals have used our research since 2012.