Kerio Control

How can we improve Kerio Control?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Login restrictions (1 device per user)

    Add the possibility of restrictions on the user's authorization, if it once logged in, then log into another computer, it is not possible. But of course leave the possibility of multiple inputs.

    307 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    20 comments  ·  Security  ·  Flag idea as inappropriate…  ·  Admin →
  2. Cluster / FailOver Firewall prelude: sync config from master to slave Control

    Kerio Control born for small and medium business company.
    in this market there are company with only 5 or 20 users that need firewall failover solutions.
    so the cluster or failover solution is not mandatary of big company, but it depend from any specific customer.

    my suggestion at the moment could be to create sync of configuration from Master Kerio Control firewall to Slave Kerio Control Firewall. Maybe with ssh is possible to do this feature easy.

    in this way two firewall have the same configuration but the Slave have a specific IP address don't used in master firewall (this…

    278 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    14 comments  ·  Flag idea as inappropriate…  ·  Admin →
  3. Support for USB GPRS, 3G, 4G modems

    It would be great to have support for most popular USB GPRS modems.

    235 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    6 comments  ·  HW  ·  Flag idea as inappropriate…  ·  Admin →
  4. Block Country IP blocks

    Block entire country CIDR ranges. I recently did a trial of the Sophos UTM 9 software appliance and this was a feature it had that allowed the admin to tick off countries by name and flag that would be completely blocked which is something i'd love to see in kerio control. Our Firewall frequently gets attacked by Russia and China. Seeing as we do no business with either of these countries we block their entire IP range. An option to select one or more countries to block would be a great feature.

    200 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    7 comments  ·  Security  ·  Flag idea as inappropriate…  ·  Admin →
  5. Improve log management

    We need filters, more searching and exporting possibilities, manuals, examples, etc.

    181 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    5 comments  ·  Flag idea as inappropriate…  ·  Admin →
    Heather P responded

    Thanks for the idea. We haven’t assigned this idea to a release yet, but we welcome further comments and votes if this is important to you.

  6. Send wake on lan packets from Kerio Control interface.

    For MAC defined hosts, send a standard WOL packet from the web interface.

    166 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    9 comments  ·  Flag idea as inappropriate…  ·  Admin →

    Thanks for the feedback. No immediate plans, but let us know your use case, and please vote if this is important to you.

  7. Fully redundant cluster of Kerio-Control

    This option is very important because Kerio Control has no redundancy solution. other Firewal (checkpoint, palo alto, ....) offers this feature.
    The OS of kerio control is linux, maybe adding Carp and pfsync to have a fully redundant cluster of Kerio-Control ?

    159 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    11 comments  ·  Flag idea as inappropriate…  ·  Admin →
  8. Block brute force

    One can either enable or disable this feature.
    The tresholds are set for 1-5 pitches.
    Eg:
    >=3 attempts - blocked for 5 minutes
    >=10 attempts - blocked for 30 minutes
    >=20 attempts - blocked for 2 hours
    >=30 attempts - blocked for 1 week
    >=40 attempts - blocked for 1 month
    This should be possible for all users and if possible for ftp/website access as well (additional to rdp/computer configurable for each intranet site?)

    144 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    5 comments  ·  Security  ·  Flag idea as inappropriate…  ·  Admin →
  9. Shutting down Kerio (computer) when power failure is detected (UPS support)

    Would be fine option for UPS. Now if I connect UPS to Kerio computer and power failure occurs, it is no easy way to shutdown kerio OS properly. I must hope that power failure is short-time and UPS holds. Yes, reinstall Kerio from ISO image is thing for few minutes, but it is not professional solution and actual settings backup is needed. (And normal automatic backup is unc/ftp/email backup and NOT Samepage.io).

    134 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  HW  ·  Flag idea as inappropriate…  ·  Admin →
    Heather P responded

    Great idea. We’d like to be able to do this, but haven’t assigned it to a release yet. We’ll leave it open for voting.

  10. NTP Server

    Be able to point local (internal) clients to Kerio control for time sync.

    118 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    5 comments  ·  Flag idea as inappropriate…  ·  Admin →
  11. Disable IDS on Site-to-Site connections to (radically) improve performance

    I think the title says it all.

    We have already mentioned this about a year ago.

    Our site to site VPN connection is much faster (10 MB/s instead of 4 MB/s) when we completely disable IDS / IPS in Kerio Control. This is off course undesireable because we would like to use IDS / IPS to protect against attacks from the Internet.

    We would really appreciate it if IDS / IPS could be disabled for specifiek connections, of just in general for Kerio Site-to-Site VPN connections.

    Yours sincerely,
    Chris Visscher
    Head of IT

    TJIP B.V.

    107 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  12. authenticate users with standard ldap server

    have the ability to authenticate users as well as active directory or apple open directori with ldap standard server.

    103 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  13. System Health Upgrade (Temperature monitor)

    Although CPU and RAM usage are excellent, I believe it would be beneficial to have CPU/motherboard temperature monitor.
    And it shouldn't be too difficult to implement.

    S.M.A.R.T. HDD data readout would be awesome too, but not as important as temperature (for me at the moment).

    96 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    9 comments  ·  Flag idea as inappropriate…  ·  Admin →
  14. Automatic creation of URL groups asterisks based on multiple addresses input

    For example, we want to block all facebook sites, we could have an input box in which we would put something like:
    http://www.facebook.com/
    https://www.facebook.com/
    http://sr-rs.facebook.com/
    http://pixel.facebook.com

    and get a result:
    http*://*.facebook.com/*

    This could simplify URL rules for large number of addresses to be blocked.

    P.S. regexp would also be great.

    92 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  15. Add possibility to disable Welcome screen in Guest Network

    Welcome screen is very annoying think with mobile devices. Please add possibility to completely disable welcome screen.

    83 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    7 comments  ·  Flag idea as inappropriate…  ·  Admin →
  16. "AND" option to SOURCE field in traffic rules. (extra column for user)

    i whant to specify
    source IP address AND user
    if both are TRUE - the rule applies

    80 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    14 comments  ·  Flag idea as inappropriate…  ·  Admin →
  17. Automatic update for VPN client

    automatic updates like Kerio Connect (KOFF) and Kerio Workspace Client

    80 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Flag idea as inappropriate…  ·  Admin →
    Roman Jokl responded

    Changes in the VPN client are rare and the protocol is backward compatible, so updating of the client is not necessary.

  18. DHCP relaying

    I would like to see Kerio to preform DHCP relaying. That way I only need one DHCP server (cluster) in my network.
    Kerio Control is in the center of my Network, but it doesn't cover my entire network.
    Also when kerio Control can relay, I can use my Windows DHCP server which is having more DHCP options then the Kerio control DHCP service, and has a much better Active Directory integration.

    79 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Flag idea as inappropriate…  ·  Admin →
  19. Automatic Login for Remote Desktop Services

    It would be of greast help if the users in a RDS-environment could be automatically logged on the Control. Like with Mac-Addresses or IPs.

    78 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  authentication  ·  Flag idea as inappropriate…  ·  Admin →
  20. Fail2Ban like

    Kerio Control would check remote log and implement user defined filter and actions, like enforcing / enabling specific firewall rule if a matching log entry is discovered.

    77 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Security  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1 3 4 5 42 43
  • Don't see your idea?

Kerio Control

Feedback and Knowledge Base