Kerio Control

How can we improve Kerio Control?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Add support for SSL VPN

    VPN over HTTPS with client or clientless

    43 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  2. ultrasurf

    Automatic blocking UltraSurf

    42 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  content filtering  ·  Flag idea as inappropriate…  ·  Admin →
  3. DNS - We would like more features implemented such as FQDN, MX, and even features required for

    DNS - We would like more features implemented such as FQDN, MX, PTR, and even features required for your own IM in Kerio Connect.

    40 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  4. possibility of setting ikelifetime for ipsec connections

    The default time for the ikelifetime at an ipsec-vpn is about 3hr. In most cases it is sufficient.
    But if you need a longer time (leased Line for an office outside) is the configuration very awkward. Can you provide a way, that you can set via a selection box or free input?

    40 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    5 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
    Roman Jokl responded

    I don’t see reason for changing the key lifetime. It is automatic process that user shouldn’t be aware of. The only case is if the re-keying doesn’t work and increasing lifetime is a workaround. Such a bug should be fixed in the first place.

  5. Hotspot Gateway

    Access for guests. Login via a website by entering the accesscode from a voucher. Network distinction by VLan.

    40 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  6. Wildcards for hostnames in Ip Address groups

    Allow wildcards for hostnames in Ip Address Groups.

    40 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Flag idea as inappropriate…  ·  Admin →
  7. provide to test wan link speed

    plz provide to test my wan speed. bcz ISP's are some times to change my bandwidth. it is really use to test my WAN link speed

    39 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Central management  ·  Flag idea as inappropriate…  ·  Admin →
  8. Import & Export for groups & definitions (IPs, URLs, etc.) with text files (e.g. csv)

    The ability to simply upload and download groups, definitions and list, e.g. for IP addresses, MAC addresses, URLs using a text file.

    38 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Flag idea as inappropriate…  ·  Admin →
  9. Additional IP: new column "Description"

    Dear Sirs,

    some resellers would like to have a new column in "Additional IP Addresses" table for adding a description of every IP.

    I attached a screenshot for explaining the need.

    Thank you in advance.

    Sandro Orefice
    NAONIS.COM sas

    38 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Central management  ·  Flag idea as inappropriate…  ·  Admin →
  10. RAID Support on some motherboard or\and linux soft based RAID support for Linux editions of Kerio

    RAID Support on some motherboard or\and linux soft based RAID support. It's server or not? Server should support Raid. This improvement may help in cases where HDD crash and this is really help to many administrators of Kerio Control or Mail server. IMHO Linux software based RAID1 it's best solution for Kerio Control Linu, this version don't have strong load of HDD in many implementation.

    37 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    6 comments  ·  HW  ·  Flag idea as inappropriate…  ·  Admin →
  11. Max-Connections per device to be set per user in the user settings

    The max connections feature is very nice. But it would be very helpful to add another field in the user settings window to override the global one. This will solve many issues. Employees have different jobs from business, graphics to technical. Some users may require huge amount of connections and we can't set this max limit required globally in order to permit this to one user. This will cause problems on the number of connections on the whole Company and affects the connectivity everything. Please vote for this. Thanks

    How to do this.
    1. The current connection limit will stay…

    36 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Flag idea as inappropriate…  ·  Admin →
  12. dhcp allert: when the assign ip range, ends ip availability, generate an alert pop-up

    dhcp allert:
    when the assign ip range, ends ip availability, generate an alert pop-up

    36 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Email alerts  ·  Flag idea as inappropriate…  ·  Admin →
  13. custom Dyn DNS provider

    There are only 3 dyndns provider in control. Is it possible to insert a blank provider where all values ​​(provider server string, hostname and so on) can be set.

    35 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Flag idea as inappropriate…  ·  Admin →
  14. Export Pre-Configured VPN Client, or client configuration file.

    Once I've setup my Control box, I want to be able to download a file to automatically configure the VPN Client.

    This file should be importable by the VPN Client on any platform, and the installer should have a location (next to the installer executable?) to look for this file.

    this file should be able to specify any or all of :
    vpn server hostname
    Certificate signature
    VPN Server Port
    whether or not to redirect all traffic over the VPN, or if only to send traffic bound for the remote network.
    Username
    if it is allowed to save the password …

    35 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
  15. SMS authentication for guest network

    Single password is not reliable for all types of guests. Also there is a law regulation in some countries not to provide anonymous access to the Internet, and a acceptable authentication method via SMS, so in control we will have device cell number+mac address pair that will identify person quite well

    34 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  authentication  ·  Flag idea as inappropriate…  ·  Admin →
  16. Password complexity

    Right now (when using local user database) any user can change their password to a very weak one, even to one sign only - which has impact on remote Kerio VPN access. A minimum password complexity enforcement (in eg. like in Kerio Connect) feature would effectively increase the security.

    33 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  authentication  ·  Flag idea as inappropriate…  ·  Admin →
  17. 2-Step-Verification - every time a user login

    Actually a 2-Step-Verification is valid for 30 days. I would like to have the possibility to set this time to 0 days.

    33 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  authentication  ·  Flag idea as inappropriate…  ·  Admin →
  18. IPS (snort) performace

    It's neccesary to increase IPS performance.

    Now IPS (Snort) use only one core and then its performace is full dependent on core speed so adding more cores don't increase performace.

    It's a big problem in installations with high speed fiber connection, where we must disable IPS because it may drop from 300 Mb. to 50 Mb.

    There are some snort implementations that are capable of use multicore so I think it's possible to do it in KControl.

    http://mikelococo.com/2011/08/snort-capacity-planning/

    31 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Security  ·  Flag idea as inappropriate…  ·  Admin →
  19. OpenVPN Support / Stronger Client Support

    We need stronger security for VPN support. PPTP and L2TP are simply not enough today.

    31 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
  20. try to implement per user bandwidth management rule and also put some option to export or save usage reports

    try to implement per user bandwidth management rule and also put some option to export or save usage reports

    30 votes
    Vote
    Sign in
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    5 comments  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Kerio Control

Feedback and Knowledge Base