Kerio Launches NG520 & NG521 Next-Generation Firewalls for SMB Cybersecurity

July 2025 – In the face of ever-evolving cyber threats, small and medium-sized businesses (SMBs) need robust network security solutions that are both powerful and easy to manage. Rising to this challenge, GFI Software has unveiled the new Kerio Control NG520 and NG521 next-generation firewall appliances. These cutting-edge Unified Threat Management (UTM) devices deliver enhanced performance, multi-gigabit connectivity, and comprehensive security features – and are set to replace the outgoing Kerio NG510 and NG511 models

Upgraded Performance and Throughput

The Kerio NG520 series brings a major leap in performance for SMB network security. Powered by a modern multi-core Intel® Core™ processor and equipped with 16 GB of RAM, the NG520/NG521 can handle significantly higher traffic loads than their predecessors. In fact, the new appliances deliver up to 2X firewall throughput, from the previous generation NG510/NG511. This means faster processing of data and better handling of high-bandwidth activities – even when advanced security features are enabled. The devices support 200,000+ concurrent connections and are recommended for 200–300 users or 1000–1500 devices, ensuring they can scale with growing business needs.

Key performance enhancements of the NG520/521 include:

• Higher Firewall/UTM Throughput: Up to ~2.3 Gbps firewall and 1.3 Gbps UTM performance delivers smooth, lag-free network traffic even under heavy loads. This is a substantial improvement over the outgoing models and provides headroom for future growth and emerging high-speed internet links.

• Powerful Hardware Specs: A new-generation Intel CPU with hardware acceleration (including AES-NI for VPN encryption) and 16 GB memory allow the NG520 series to inspect and filter traffic faster and more efficiently. The ample RAM ensures full support for upcoming KerioControl software updates (v10 and beyond), which will leverage a new kernel and advanced features.

• Enterprise-Grade Reliability: Designed as 1U rackmount appliances, the NG520 and NG521 deliver enterprise-class stability. They support features like high-availability clustering for failover, ensuring maximum uptime for critical business connectivity. The hardware has been hardened for continuous operation, with improved cooling and power management to handle 24/7 workloads typical in business environments.

Multi-Gigabit Connectivity and Port Density

Kerio Control NG520 and NG521 firewall appliances feature a rackmount design with an LCD status display and multiple high-speed Ethernet ports. The NG520 includes eight 2.5-GbE interfaces, while the NG521 provides an additional module for a total of 16 LAN ports to maximize connectivity.

One of the standout upgrades in the new models is the move to multi-gigabit networking. The Kerio NG520 and NG521 come standard with 8 × 2.5 Gigabit Ethernet (2.5 GbE) LAN ports, allowing businesses to take advantage of modern high-speed infrastructure without bottlenecks. In contrast, the previous NG510/NG511 appliances were limited to 1 GbE ports – so this upgrade to 2.5 GbE means the new firewalls can handle greater internal traffic loads and faster WAN links with ease.

For organizations needing even more port density, the Kerio NG521 model is designed to offer maximum connectivity. It combines the same 8 × 2.5 GbE ports with an additional 8 × 1 GbE integrated switch module, for a total of 16 Ethernet interfaces in a single device. This high port count provides exceptional flexibility for complex network topologies – IT administrators can segment networks (e.g. office, guest Wi-Fi, VoIP phones, servers, etc.) without requiring external switches, all while leveraging multi-gig speeds on critical links. Both NG520 and NG521 include dedicated WAN ports (supporting features like link load balancing and failover) and a configurable DMZ interface, empowering businesses to craft a network setup tailored to their needs.

Comprehensive UTM Security Features

Beyond raw speed, the NG520 and NG521 are all-in-one security appliances that consolidate multiple protections under one roof. Each device runs the latest GFI KerioControl software, providing a full suite of next-generation firewall and Unified Threat Management (UTM) capabilities out of the box. This makes enterprise-grade cybersecurity accessible to SMBs without the complexity of managing multiple point solutions. Key security and networking features include:

• Next-Generation Firewall & Intrusion Prevention: The appliances perform deep packet inspection on all traffic, with the ability to filter by application, URL, content category, and more. An integrated Intrusion Prevention System (IPS) (powered by Snort) constantly monitors inbound and outbound communications for suspicious activity, automatically blocking attacks such as DDoS attempts, network intrusions, and exploits.

• Gateway Antivirus & Web Content Filtering: Kerio’s UTM engine scans web and email traffic in real time to stop viruses, malware, and spyware before they infiltrate the network. Administrators can also block or manage access to websites across 100+ categories (social media, gambling, adult content, etc.) using the Kerio Control web content filter with application awareness – helping enforce browsing policies and prevent risky behavior.

• Secure VPN & Remote Access: Built-in VPN server capabilities enable secure site-to-site connections between branch offices as well as remote client VPN access for traveling employees. Kerio’s easy-to-configure VPN (using proprietary Kerio VPN or standard protocols like IPsec) ensures that remote workers and satellite offices can connect to the corporate network securely, with high-performance encryption that takes advantage of the new hardware’s acceleration features.

• Bandwidth Management & Link Load Balancing: IT admins can prioritize business-critical traffic and restrict recreational or non-essential bandwidth usage via Kerio’s traffic management tools. The NG520/521 also support multiple WAN connections – using load balancing and failover to maximize Internet uptime. If one ISP link goes down, traffic is automatically routed over an alternate link, keeping your business online continuously.

• Advanced Reporting & Cloud Management: The KerioControl software provides detailed reporting and analytics on network usage, user activities, and security events. Additionally, GFI offers cloud-based management and monitoring options, so MSPs and IT teams can oversee the firewall remotely. (The NG520 series is also ready for new features like the KerioControl CoPilot AI-driven analytics module, which delivers intelligent insights and configuration recommendations for optimal security)

All these features are administered through an intuitive web-based interface, making it simple for IT professionals (and even lean IT teams at small businesses) to deploy and manage robust security policies. With unified threat management in a single appliance, the NG520 and NG521 reduce complexity and cost, compared to running separate firewall, VPN, content filter, and IPS systems.

Tailored for IT Professionals and Growing Businesses

The Kerio NG520 and NG521 are engineered with small business cybersecurity needs in mind. They offer a blend of user-friendliness and advanced capability that appeals to IT professionals:

• Easy Deployment & Management: The new appliances come pre-loaded with KerioControl – getting up and running is as simple as plugging in cables and running a brief setup wizard. The interface is designed for clarity, so you don’t need to be a network security guru to configure common firewall rules or VPN tunnels. This is ideal for resource-strapped SMBs that may not have dedicated cybersecurity staff.

• Scalability for Growing Networks: With support for up to 300 users (or 1500 devices), the NG520 series can protect a growing company’s IT infrastructure for years to come. As your business adds more employees, IoT devices, or branch offices, the NG520/521 have the capacity to handle the increased load. High connection limits and throughput ensure reliable performance even as usage expands.

• Cost-Effective Unified Solution: Rather than purchasing separate systems, small businesses get comprehensive UTM in one appliance, lowering the total cost of ownership for network security. GFI also provides flexible licensing (including subscription options) for the KerioControl software, which can be more budget-friendly for small enterprises compared to traditional enterprise firewall licensing.

• Professional-Grade Support: KerioControl has a large community of users and resellers, and GFI provides professional support and regular software updates. IT professionals can trust that these appliances will receive security patches, feature enhancements, and technical assistance as needed. This ensures long-term reliability and peace of mind.

By replacing the older NG510/511 units with the NG520 and NG521, businesses not only get a significant hardware upgrade, but also ensure they’re aligned with the latest SMB cybersecurity best practices. The new appliances are ready for the future, with hardware capable of handling new features (such as updated encryption standards or AI-driven threat detection) as they become available in Kerio’s software roadmap.

Upcoming Kerio NG Series Models: NG120, NG320, and NG700

The NG520 and NG521 are part of a broader refresh of the Kerio Control appliance lineup in 2025. In the coming months, GFI is also launching three additional models to cover different segments of the market:

• Kerio Control NG120 (Desktop) – An entry-level, compact firewall appliance aimed at small offices and remote/branch locations. The NG120 features 4× 2.5 GbE RJ45 ports and supports around 50–100 users/devices, delivering up to 1.1 Gbps firewall throughput. This model is perfect for small businesses or home offices that require modern connectivity and solid UTM security on a budget, all in a quiet fanless desktop form factor.

• Kerio Control NG320 (1U Rackmount) – A mid-range appliance designed for medium-sized businesses. The NG320 offers 8× 2.5 GbE ports (like the NG520) and is optimized for roughly 50–70 users or up to 320 devices. It fills the gap between the entry desktop and the high-end NG520, giving mid-sized organizations a cost-effective yet powerful firewall with enterprise-grade features. The NG320 is ideal for offices that need robust UTM protection but don’t yet require the full capacity of the NG520 series.

• Kerio Control NG700 (1U Rackmount) – The upcoming flagship model of the Kerio lineup, positioned as the most powerful Kerio appliance yet. The NG700 is built for enterprise-level performance and connectivity: it will feature 8× 2.5 GbE RJ45 ports, 4× 1 GbE SFP fiber ports, and 4× 10 GbE SFP+ interfaces on one appliance. This massive port selection (including multi-10-Gigabit capability) makes the NG700 suitable for data center deployments or headquarters that demand very high throughput. Additionally, the NG700 supports redundant power supplies for maximum uptime in mission-critical environments. With its beefed-up hardware, the NG700 will be able to handle the most demanding network loads and large user counts, truly showcasing Kerio’s commitment to scalable network security solutions.

Each of these new models will run the same KerioControl software, ensuring a consistent feature set and user experience across the range. By September 2025, when the NG700 is expected to launch, Kerio will have a completely refreshed hardware portfolio – from the NG120 for small offices up to the NG700 for enterprises – all featuring enhanced 2.5 Gbps connectivity and improved performance across the board.

Conclusion: Smarter Security for the Next Generation of Networks

With the introduction of the NG520 and NG521, Kerio Control solidifies its reputation as a go-to small business & Super Yacht cybersecurity solution. These next-generation firewalls blend high-performance network security, unified threat management, and easy deployment in a way that empowers IT professionals and business owners alike. Current Kerio users will appreciate the seamless upgrade path – the NG520 and NG521 are direct replacements for the NG510/NG511 and can import configurations, making hardware refreshes straightforward.

Availability: The Kerio Control NG520 and NG521 appliances are available now (as of July 2025) through FUSE. They arrive at a time when SMBs are seeking stronger defenses against cyber threats, and these new models deliver the capacity and features to meet that demand. As additional models (NG120, NG320, NG700) roll out in the coming months, organizations of all sizes will be able to find a Kerio appliance that fits their needs, backed by GFI’s trusted security technology.

In summary, the NG520 and NG521 launch marks an exciting leap forward for unified threat management in small and mid-size business networks. By combining multi-gigabit performance, comprehensive UTM features, and the user-friendly KerioControl platform, these appliances enable businesses to upgrade their network security with confidence – staying one step ahead of cyber threats while enjoying faster and more reliable network connectivity. It’s a win-win for IT teams and the businesses they protect, making advanced network security more accessible than ever before.