Back to Blog
Kerio connect message filter5/6/2023 For example, if I put in the domain name as a certificate name in the firewall, then all users, even if they are using it from different companies, have to use that certificate name as their client settings. So if I would serve multiple clients with one firewall, I cannot use different domain names. Finally, if you use a firewall product with a certificate, you can only use one VPN client on one domain name. That functionality is really not developed enough and it is not easy to bulk-import users into a firewall. Another area for improvement is to be able to import users from a single text file. We really would love to use it via a web browser. That's a feature I really miss and that should really be embedded in the product. We would like to have an SSL implementation for this same feature so we don't need to install anything on the client side. The VPN features are the ones that we really like, but we are using a VPN client to be able to use them. Therefore you get false positives where it finds the word, but it's actually a case that you should ignore. For example, if you use words for scanning content, there are some words that you really can't scan for because they are synonyms and can be used in all kinds of communications. It can take quite some time to find out what content you want to scan. The content filtering in the product is pretty sensitive to configure as all content is being scanned. It takes a file or executable as you’re downloading it and opens it in a completely isolated and separate “test” environment.This is missing. It should allow device identification without just stating that the devices are unrecognized-"unrecognized devices" Sandboxing is one of those important firewall features that end users don’t even know is there. Cloud Support: The Firewall should have cloud support especially hybrid cloud support. I am looking forward to a more scalable product that will be able to grow with time and technology. Its local support and scalability is also not good. They’re also useful where you are using multiple links and would like to connect to other sites, such as branch offices or cloud services. We should have the option for paying for what we use not a blanket cost for everything Internet aggregation and SDWAN Technology: The firewall should allow growth in terms of allowing connectivity to SDWAN technology available in other firewall appliances.Link aggregation and SD-WAN (Software-defined Wide Area Network) are great features for businesses who need multiple links to the internet. GFI Products GFI Endpoint Security In use GFI Mail Essentials Not in use Kerio Connect In use GFI Archiver Not in use GFI Fax Maker Not In use Kerio Control In Use GFI Lan Guard In use GFI Web Monitor In use Kerio Operator Not in use GFI Events Manager Not in use We only use 5 products out of the 10 we’ve paid for. When paying for the licenses we pay for license for everything yet we only use 5 products. The GFI features that come with Kerio are stated below. They need to change their model in such a way that you don't have to pay for the products that you are not using. I find it a bit costly to pay for the products that I am not using. We've had situations where we had a terrible performance on the network, and when you restart it, everything goes back to normal. We have had issues with its performance and stability. The ticket was escalated, but we had to send them a couple of emails to let them know how serious the case was, and then we had a live call with their support team. Because of Kerio Control, we failed to protect kids from such content, and we expected them to respond to it with the urgency it required, but their support was pathetic. It was a very sensitive issue for us because we had kids in year four who were exposed to images that they were not supposed to see. We've been talking to them about this issue. Its inability to provide content filtering for search results was a high-impact issue. That's one of the reasons why we are looking at Juniper. When you try to drill down to the website, it blocks, but when you search by image, it brings up all the images. When one of them did a search, the results came on the search engine part. We are in a school environment, so we have blocked a site with some of the explicit content so that kids wouldn't see it. We had an incident on the network where a blocked site was showing up in search results. They don't provide content filtering when it comes to search engine results. They can also improve the reporting feature. It looks user-friendly, but it doesn't work as it is expected to work. They can improve the user login part and make it more user-friendly. The user login can be improved because we use the captive portal where users have to register before they access the internet server.
0 Comments
Read More
Leave a Reply. |