Appliance replacement and configuration restore
When an appliance fails, the replacement is prepared with your configuration and firmware level applied, so the swap on board is a cable exercise.
Kerio Control and GFI licensing
Kerio Control firewall appliances and GFI licensing, supplied and replaced across the EU
Kerio Control, now part of GFI Software, remains the firewall of choice on a large number of yachts, and replacing a failed appliance quickly matters more than the brand on the lid. YOT LTD supplies the Kerio Control appliance line, handles licence renewals and ships replacements across the EU, with configuration restored before the unit leaves us.
What YOT does with the GFI Software line
Pre-sales sizing, assembly, firmware levelling, imaging and burn-in testing happen before dispatch, so the work left on site is installation.
Sizing against throughput and users
The NG110, NG310, NG510 and NG511 sit at different points on performance and redundancy. We size against the traffic the network actually carries rather than the vessel's length.
VLAN and segmentation design
Guest, crew and control networks are segmented on the firewall before delivery, which is the configuration most often rebuilt from memory after a failure.
Multi-WAN across Starlink, VSAT and 5G
Uplink selection between satellite and cellular paths is configured and tested, so failover behaviour is known before the vessel leaves.
Licence and renewal tracking
Kerio and GFI subscriptions are tracked with renewal alerts ahead of expiry and consolidated billing, so protection does not lapse mid season.
Spares held for the fleet
Fleet operators can hold a spare appliance in our stock against an agreed replacement path rather than waiting on a shipment when a unit dies.
GFI Software product families we supply
Part of our cyber security and continuity portfolio: Perimeter, endpoint, backup and disaster recovery licensed as one bill of materials.
| Family | What it is | Typical use |
|---|---|---|
| Kerio Control NG110 | Entry appliance in a compact form factor with the full Kerio Control feature set. | Smaller yachts and small sites. |
| Kerio Control NG310 | Higher performance with more advanced features than the NG110. | Medium sized yachts and branch offices. |
| Kerio Control NG510 | Balances throughput with the full security feature set for larger networks. | Larger yachts and multi-VLAN networks. |
| Kerio Control NG511 | As the NG510 with additional redundant features for maximum uptime on critical operations. | Luxury yachts and sites where an outage is not acceptable. |
| Kerio Control software features | Unified threat management combining intrusion prevention, antivirus, content filtering and application control, with VLAN support and modular licensing. | One appliance covering perimeter security instead of several products. |
| GFI AppManager | GFI's management layer, which the newer Kerio hardware generation connects to directly. | Managing multiple Kerio deployments across a fleet or client base. |
Where GFI Software fits
- Maritime and refit
- The dominant use case. Kerio Control is widely deployed on yachts, and crews benefit from an installed base large enough that support is available in most ports.
- Commercial
- Small and medium sites wanting unified threat management in one appliance with a management interface a non-specialist can operate.
- Enterprise branch
- Segmented branch networks where VLAN separation and modular licensing keep the cost proportional.
- Energy and remote sites
- Perimeter security on sites managed remotely, with redundancy where downtime is expensive.
Related reading
Technical write-ups from our own engineers on this line.
GFI Software questions
Quote a GFI Software project
Send a bill of materials or a design brief. A technical pre-sales specialist replies within one business day with hardware, licensing, staging and freight on one quote.
Not trading with us yet? Open a partner account.