These solutions build on previous generation firewalls that have been limited to simple testing and blocking ports / protocols as needed. But with more and more businesses now using online SaaS applications and services, port and protocol control alone is no longer sufficient to provide effective network security. In contrast, the new devices add tight integration of additional capabilities such as built-in deep packet inspection (DPI), intrusion prevention (IPS) and traffic inspection at the application layer (Web Application Firewall). Some NGFWs also include TLS / SSL encrypted traffic inspection, website filtering, bandwidth and QoS management, antivirus scanning, and integrations with third-party identity management systems.

Next generation firewalls are currently categorized as mature solutions. However, the ongoing massive migration of existing IT systems to public cloud IaaS platforms such as Amazon Web Services, Microsoft Azure and Google Cloud Platform, and the consequent increase in the complexity of hybrid network architectures, is driving the continued empowerment of next-generation firewalls. This includes providing advanced traffic management, WAN optimization, quality of service, and transparent cloud platform integration.

NGFW & mdash; What are the benefits of next generation firewalls?

Scheme of the Next-Generation Firewall. Source: Palo Alto Networks

It is worth noting that, among other things, NGFWs provide many tools for automated protection against cyber threats on social networks. As part of phishing protection, these systems can check web links received by company employees and block them if they lead to malicious sites. In addition, NGFWs are capable of analyzing attachments sent through social media posts and blocking them if they contain malicious code.

Below is a brief description of the most popular products in the NGFW segment. For more product information, see the NG Firewall Comparison Chart on ROI4CIO, based on leader comparisons (based on Gartner research).

BARRACUDA

The Barracuda CloudGen Firewall is a family of physical, virtual and cloud appliances that are dedicated to protecting the enterprise's WAN infrastructure. These devices provide enhanced security by incorporating the full suite of NGFW technologies, including Layer 7 application profiling, intrusion prevention, web filtering, malware and threat protection, spam protection, and network access control.

More info: ips definition