Firewalls commonly serve as the boundary between the Internet and an organization’s private network. Traditional firewalls offer protection based on controlling specific protocols and ports, and restricting traffic to and from specific IP addresses. These days however, most attacks are web-based, easily passing through http (port 80) and https (port 443) as most firewalls are unable to identify malicious applications or traffic passing through these ports.
The trusted firewall must evolve to effectively defend against these threats.
The term “Next Generation Firewall” (NGFW for short) is being used to describe devices that go beyond the traditional firewall functions by adding security capabilities such as intrusion prevention and application awareness. Regardless of the terminology, these are complex devices and the lack of a standard can make an apple- to-apples comparison of different products very difficult. To determine whether a device with a particular set of capabilities can help you, you must have a thorough understanding of your organization’s needs and perform extensive testing.
IMPAKT can help you make the right choice in regrads of architecture, throughput performance and ease-of-use.