APLawrence.com -  Resources for Unix and Linux Systems, Bloggers and the self-employed

Kerio Winroute Firewall Advances

© May 2019 Anthony Lawrence

Some of my readers and clients know that I used to sell Fortinet firewalls. I stopped doing that several years ago because I found their support (for both me and my customers) to be unacceptably poor. The products themselves worked well and were reasonably priced, but support was not good and because of lousy documentation, support was often needed.

I don't know if Fortinet has cleaned up their act since then. I don't care - once bitten, twice shy. I don't want anything to do with them.

I may have dropped Fortinet, but I still had customers with firewall needs. Where to turn? Cisco? No, I never liked Cisco because I think their stuff is too pricey in addition to often being confusing. Obviously they are the de facto standard, and I would expect large companies with complex needs to lean strongly toward their products, but I don't think they are a good choice for small businesses. You'll pay dearly for the Cisco brand but you won't get what the brand implies when you are at the low end. That's partly because Cisco can't cannibalize its more expensive products by adding features at the low end. The expense of Cisco training and certification also enters into the cost picture - I just don't see it for small business.

After dropping Fortinet, I've been referring most firewall inquiries elsewhere. In a few places I put in Multitiech routers - simple admin, limited but decent feature set, great support - but unfortunately Multitech has stopped producing these entirely. So what to do? Linksys? Please - that's as bad as Cisco or worse - in my opinion, of course, based on support problems I've seen. Fine if you need nothing but the basics, not so great otherwise.

Of course I do sell Kerio and Kerio does make their Winroute Firewall. I've sold a few of them here and there, but basically only when somebody twisted my arm. There were two things that prevented me from promoting this enthusiastically. One was that Winroute is software that needs to run inside another Operating System. That in itself presents some difficulties, but it's particular hard to get excited when the OS is Windows.

I mean seriously: hand a chicken a rifle and tell her to go guard the other hens? Please.

Kerio has recently changed a few things that warm me up quite a bit. First is that they have lowered the overall pricing. Second, you can now get this as a Linux appliance. It's a stripped down kernel just for running Winroute and of course can be installed on bare metal hardware - no Windows OS needed or wanted. That's good stuff!

They also have a packaged appliance version. This is really the most flexible product line you could hope for: a virtual appliance for quick trials or emergencies and a hardware firewall for easy deployment.

I'm going to be talking more about Winroute in future posts, but now that this is more palatable to me, let's talk quickly about the other things I like:

Simple, yet powerful

The administration of Winroute is much easier than any other high end firewall. I'd say it's as easy or easier than most home user appliances and Winroute has a lot more power (I'll get into specifics about that in another post).

Kerio's interface beats Fortinet and other mid-range products hands down - easier to understand, easier to use. This is particularly true when we get to more complex needs - and many of those needs aren't even offered by the other lower end products! Like Cisco, Fortinet and the other players have to protect their more expensive units - Kerio does not because Kerio is licensed by users, not product.

Great support

I'm not saying that every issue gets an immediate answer. But Kerio support is included with your subscription price and their attitude is to help - you never feel like you are interrupting something more important. It was Kerio's support of their mailserver product that sold me on becoming a dealer and that of course carries through to Winroute.

If you buy through me, you can also call me for support - no additional charge for that, either. I can do that for the same reason I can do it with Kerio Mailserver: there just is not much support needed after the initial setup!

Kerio's on-line manuals are among the best I've ever seen. When you combine that with their knowledgebase articles, many support questions are easily answered without calling anyone. That's important.

Note that Kerio has both Administrator and End-User manuals. I like that.


Unlike many low and medium end firewalls, Kerio comes equipped with full reporting accessed through your browser:

I'll be talking more about Winroute's features in other posts. If you want to jump ahead of me, you can download a fully functional demo for Windows or Linux. You can run that inside VMWare and they have it all ready for you: Kerio WinRoute Firewall VMware Virtual Appliance.

Feel free to contact me or Kerio support for questions and pricing.

Next: Winroute Firewall StaR reporting.

Got something to add? Send me email.

(OLDER)    <- More Stuff -> (NEWER)    (NEWEST)   

Printer Friendly Version

-> Why I'm selling Winroute Firewall


Inexpensive and informative Apple related e-books:

Take Control of Apple Mail, Third Edition

Take Control of Parallels Desktop 12

Take Control of Pages

Take Control of IOS 11

Take Control of Upgrading to El Capitan

More Articles by © Anthony Lawrence

Thu Apr 1 13:18:05 2010: 8334   NickBarron


Thanks Tony,

I have the download on the run now, quick question what is the throughput on the Winroute Firewall

Thu Apr 1 13:28:02 2010: 8335   TonyLawrence


Prior to 6.4, it was 50Mbs. With 6.4, it's 600Mbs (all else being equal, of course). There is a new release in beta right now very near release
( (link) ); I don't think that will be changing.

Thu Apr 1 13:31:00 2010: 8336   NickBarron



Well if that is the case it is more than suitable for soho/smb don't get much more than a 100Mb/s lease lines in London.

Thu Apr 1 13:35:45 2010: 8337   TonyLawrence


And here in the backward United States, even 50Mbs is unusual :-)

Thu Apr 1 13:43:02 2010: 8338   TonyLawrence


Of course a lot of other things affect this. If you have a lot of firewall rules or are doing web filtering, obviously those have to add overhead. So will A/V scanning.

No matter what, any firewall has to insert some delay.

Thu Apr 1 13:46:37 2010: 8339   NickBarron


Yes indeed, just so long as the as firewall is capable of the 100megabit throughput and the customer is not loosing out then it is acceptable.

Thu Apr 1 13:52:50 2010: 8341   TonyLawrence


Maybe :-)

There will always be some user who will complain bitterly if their bandwidth drops any percentage at all.

Thu Apr 1 13:54:21 2010: 8342   NickBarron


Oh yes, but by the time I have finished talking to them they are happy enough to just be left alone! :-)

Fri Apr 2 06:17:03 2010: 8354   SteveSmith


Hi Tony,

My hunch is that Fortinet is targeting the medium sized business and government accounts. Their stuff is cheaper and easier to use than Cisco, yet they offer training and certification on their products. Fortinet is popular with emergency services, local governments and K-12 education (they do a great job with content filtering).

Not to defend poor support, but there are only so many hours in a business day. If two customers require support and one of them is likely to purchase substantially more equipment than the other, I can see how priorities would develop.

Fri Apr 2 10:32:48 2010: 8360   TonyLawrence


It wasn't priorities, it was bad support. Outright refusal to provide support in one memorable case that really tipped the scales for me. Neither I nor the customer could figure out how to do something from their laughable manuals, and we were both refused help. Now - I hadn't taken their training at that point but then again they hadn't had offered any near me either (and I don't really believe that would have helped anyway).


Printer Friendly Version

Have you tried Searching this site?

This is a Unix/Linux resource website. It contains technical articles about Unix, Linux and general computing related subjects, opinion, news, help files, how-to's, tutorials and more.

Contact us

Printer Friendly Version

Yeah, it's obsolete, clunky, insecure and broken, but people still use this stuff (Tony Lawrence)

Linux posts

Troubleshooting posts

This post tagged:



Kerio Info

Kerio Pricing

Kerio RSS Feed



Unix/Linux Consultants

Skills Tests

Unix/Linux Book Reviews

My Unix/Linux Troubleshooting Book

This site runs on Linode