GFI launches the all-new Kerio NG520 and NG521

Why these models matter

2.5x faster throughput for packet inspection and traffic handling in high-traffic environments, with multi-gigabit WAN/LAN ports up to 2.5G Ethernet.

AI-powered intrusion prevention, integrated VPN and unified threat management covering antivirus, content filtering and application control in a single device.

Built for SMBs and MSPs

Flexible deployment, scalable licensing and full remote management make these appliances a natural fit for service providers managing multiple client sites.

Existing Kerio customers migrating from the NG510/NG511 will find the transition straightforward and immediately beneficial.

The NG720: the enterprise model in the range

The NG720 sits at the top of the new generation. It is built on a 14th Gen Intel Core processor with DDR5 memory up to 64 GB, and is rated for 250 users and 1,250 devices with 250k to 300k concurrent connections.

It is a 1U appliance with eight 2.5GbE ports, four SFP fibre ports and a PCIe 4.0 expansion slot, plus redundant 300W power supplies, dual BIOS and an LCD management display for mission-critical sites.

We quote and stock the NG720 on FUSE.

• Users and devices: 250 users, 1,250 devices, 250k to 300k concurrent connections.
• Throughput: up to 8.5 Gbps firewall and 7.5 Gbps UTM, depending on configuration and feature set.
• Connectivity: 8 x 2.5GbE, 4 x SFP fibre, PCIe 4.0 expansion slot.
• Resilience: redundant 300W power supplies, dual BIOS, LCD management display, 1U rack mount.

Licensing on the new hardware

All new NG appliances ship with GFI KerioControl v10 preinstalled and require v10 because of updated network interface drivers. They will not run correctly on older 9.x images, so plan the hardware swap and the software version together.

Licensing stays subscription based on top of the appliance, with a one-year hardware warranty included. Add-ons such as the antivirus, web filter and IPS modules are licensed per user, so you only pay for what the vessel or site actually uses.

Moving an existing licence onto different hardware or a different OS variant needs an OS/hardware model change to be processed first. Once it is done the original unit stops working with that licence, and the same licence cannot be used on two units at the same time. We handle that paperwork for partners when we supply the replacement appliance.

• Preinstalled: GFI KerioControl v10, required on NG120, NG320, NG520, NG521 and NG720.
• Legacy NG110, NG310, NG510 and NG511 units can stay on the latest 9.x release.
• Upgrades to v10 must follow the stepped path and are applied manually until v10 builds reach the CDN.
• Licence transfers between models require an OS/hardware model change through GFI before activation.

The rest of the range

The NG120 covers small offices and crew networks, the NG320 handles growing sites with eight 2.5GbE ports plus SFP, and the NG520 and NG521 are the 1U large-office models, with the NG521 adding eight further gigabit ports for complex topologies.

All models are quoted and shipped through FUSE with EU delivery and partner pricing. Browse stock on the FUSE marketplace, become a partner, or read more about our GFI Software distribution.