Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Leaving Kerio Control
  •  
credo

Messages: 14

Karma: 0
Send a private message to this user
After long battle and having migrated from Fortigate to Kerio Control in December 2013 I'm going back to Fortigate.
It's not the decision I'd like to do but nothing to do. Here are some of my thoughts about this product.
- since beginning my interest has been use Kerio Control as policy based firewall only. No users except admin acoount and that is all. I just don't have any other needs.
- I really do like it's configuration being easy and painless. Assign desired NIC to play any role and forget. All works like a charm.
- Creating policies is easy. But there are some drawbacks, that may end up stopping all traffic and messing up policies. For example as CheckPoint, there is no policy redundancy and conflict control mechanism.
- I admire smoothness of failover from one WAN to another and then back. Or third. No ping is gone lost.
- Since beginning I have wished and wanted to use it as Software appliance installed on my hardware. Server platform I have selected is pure Intel only. With additional Intel 4 ports NIC cards. Intel SSD drives and Intel RAID adapter. It almost works like a charm (except 2 intergrated LAN ports that are supported by Intel in Linux but not in Kerio Control).
- Utilisation is perfect. Even in my case where 99,5% of the traffic are small UDP packets (video and broadcast).
- And now reasons I'm quitting:
-- IP checksum offload issue. It is essential for us to use digital signatures that are running over OCSP queries. And Kerio is taking it down. Have testest on same hardware with Checkpoint - no issues. Smoothwall - no issues. With Kerio - not possible.
Help from support is basically not existing. Just considering fact that it's not working and I'm on my own with my hardware.
-- Session termination. Websites that are running on http are terminated suddenly, without any logic, randomly. Sometimes it needs to get 2-3-4 refresh until page loads. And it IS annoying. As we do have 24/7/365 business that runs on web based applications, it is VERY damaging to business.
-- DNS forwarding works and then just stops. I've already set up additional internal DNS so it's not that big issue. But locating this issue root source was painful. And brought downtime to services.
-- If i'm using network 10.3.3.0/24 and adding to same NIC network 10.3.4.0/24 then most likely they don't work together well. I can ping, trace but resources in newly added range are not accesing anywhere. The answer that I got from forum was "i am stuping to make additional networks like this, should have done /22 network since beginning". Sorry guys, but this answer is stupid.

I consider all costs I've made to get Kerio licenses, hardware, my own time and effort as lesson to future = Kerio makes worlds best mail servers. And they should stick to this (eventhough new mail interface looks like poor brother of Google).

Thank you and have a nice end of this week.
Mati

[Updated on: Sun, 06 April 2014 19:26]

  •  
spock

Messages: 15
Karma: 1
Send a private message to this user
Hi Credo,

Sorry to hear that about Kerio Connect.

I have similar problem about the ( Sometimes it needs to get 2-3-4 refresh until page loads.)

Sometime the web page is not showing complete need to refresh several time to get all contents.

Another things is annoying us, after a fresh reboot Kerio Connect ran very fast (Web browsing is fast ) but after sometime we experience some slowness during browsing.

But for the rest Kerio Connect is very good.

Kind Regards,

-Spock
  •  
mlee (Kerio)

Messages: 246
Karma: 16
Send a private message to this user
We are sorry to hear that you are leaving and thank you for your opinions with Kerio Control. Please accept our apologies that we could not be there for you before you made the decision.

Personally I started using Winroute (Kerio Control's previously name as most of you might know) in 2000, at the time I was involved in a few bank projects and managed 3 McAfee WebShield Solaris based firewalls (Formerly Gauntlet, before SecureComputer acquired the product, costed AU$20K each if I remember correctly) and my impression on WinRoute was far better than Webshield. I was also certified in Checkpoint Firewall at the time. Now I am working for Kerio and I am even more impressed with the product.

And like any products, there are always imperfection. That is the reason of the existance of these forums and the 24/7 Technical Support team to provide help.

If one day in the future you would like to consider using Kerio Control, or any other Kerio products again, please do let us know if there is anything we can do to help

You can contact Technical Support on the following URL:
http://www.kerio.com/support/technical-support

Regards,
M.

PTSD. BP. OCD. ASPD. BPD. Certified.
  •  
benjalamelami

Messages: 157

Karma: 5
Send a private message to this user
I too had to take out the Kerio Control out of the DNS resolution and forwarding. Several requests where not solved and as a consequence, some emails where not sent and many users where not able to browse pages needed for their work.
Previous Topic: Your Freedom,
Next Topic: By-pass authentication
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Mon Aug 21 08:29:15 CEST 2017

Total time taken to generate the page: 0.00434 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.