Kerio WinRoute Firewall 6.5 : PCMag Editor's Choice

[vijayind]

PCMag just tested Kerio WinRoute Firewall 6.5 and gave in 4.5/5 , editor's choice rating.
-{ Quote: "Kerio has thrown everything into its WinRoute 6.5 software firewall, including high-end features normally found only in more expensive mid-market appliances." }-

Hmm... I always did tend to prefer appliances due to their feature,cost,speed advantages. Looks like its a good time for a re-check.

Full Review:
http://www.pcmag.com/article2/0,2817,2331911,00.asp

[doktornotor]

Huh, would deserve a lot more extensive review. Otherwise yeah, this is a great enterprise firewall. :thumb:

[Einsturzende]

Can it compete with ISA?

[vijayind]

IMO, Kerio is much more advanced than MS ISA. ISA is a basic edge security product, whereas Kerio is comparable with mid-level edge security suites/appliances.

If you want a detailed comparison between Kerio and MS ISA, pleasee see this pdf released by Kerio Marketing.
http://www.kerio.com/img/kwf/kwf65/KWFvsISA-US-EN.pdf

[doktornotor]

-{ Quote: "IMO, Kerio is much more advanced than MS IKA. IKA is a basic edge security product, whereas Kerio is comparable with mid-level edge security suites/appliances.
[/url]" }-

+1; also - whole lot easier to set up and manage and very light. I'd prefer this to the ISA behemoth any time. :thumb:

[Einsturzende]

It seems KWF missing any Intrusion detection/prevention, RADIUS authentication and LDAP... MS ISA missing much more but I guess much more features are available from 3rd parties (e.g. any decent AV company have dedicated ISA perimeter scanner) than for Kerio

[joter]

-{ Quote: "It seems KWF missing any Intrusion detection/prevention... " }-

Maybe it's the only minus for Kerio Winroute but very important for enterprise security.

Regards
joter

[vijayind]

-{ Quote: "It seems KWF missing any Intrusion detection/prevention, RADIUS authentication and LDAP... MS ISA missing much more but I guess much more features are available from 3rd parties (e.g. any decent AV company have dedicated ISA perimeter scanner) than for Kerio" }-
It has IDS/IPS ( see: http://www.kerio.com/kwf_firewall.html ). No corporate firewall product would be complete without it. Plus its a pre-requisite for ICSA Labs corporate firewall certification, which KWF has. Probably they got a mistype on the pdf.

Radius,LDAP ???
KWF is comparable to network firewall appliances like Firebox. IMO Radius,LDAP are services you run on servers,routers (BRAS) and access-aggregates. Since MS ISA runs on Windows Server, you are also taking into account the feature-set of Windows Server . I think that comparison maybe incorrect.

[Einsturzende]

-{ Quote: "It has IDS/IPS ( see: http://www.kerio.com/kwf_firewall.html ). No corporate firewall product would be complete without it. Plus its a pre-requisite for ICSA Labs corporate firewall certification, which KPF has. Probably they got a mistype on the pdf.

Radius,LDAP ???
KWF is comparable to network firewall appliances like Firebox. IMO Radius,LDAP are services you run on servers,routers (BRAS) and access-aggregates. Since MS IKA runs on Windows Server, you are also taking into account the feature-set of Windows Server . I think that comparison maybe incorrect." }-
Just saying what is in first brochure you posted here, BTW what is MS IKA?

[vijayind]

Sorry I meant, MS ISA. I have been typing IKA for some strange reason EVERYWHERE !!!
( Edit to all posts )

Yeah, the pdf and the site are contradictory. You really can't have a corporate firewall without IPS/IDS. Best to take it for a spin or mail Kerio Support. For now I am quite satisfied with my Watchguard Firebox. Maybe for future expansion, I'll look up KWF as an alternative.