Are you ready to deploy a Next Generation Firewall?

Lemarchand

Is Palo Alto the only true NGFW? SonicWall? Juniper SRX? Do you think that Gartner's definition of a NGFW is correct? Does anyone know of a matrix that maps out which vendors products truly meet the guidelines and which ones are just bolt on "catch up" attempts to create a NGFW?

 

Is the technology still in its infancy or is it mature enough to be deployed in major enterprises?

Topic: Security
Answer this Question

Answers

2 total
jimlynch
Vote Up (10)

Hi Lemarchand,

You might want to give this article from Network World a read:

Next-generation firewalls: In depth
http://www.networkworld.com/news/2011/101711-next-generation-firewalls-i...

It will give you a good overview of what the issues are and what to look for.

davidstrom
Vote Up (15)

The definition of what is "next gen" varies widely, and can mean "any firewall that does something more intelligent than allow/block particular ports."  McAfee, Juniper, Checkpoint and others all have something that fits this -- for example, can you block Facebook games but still allow people to access their Facebook wall and message traffic without having to write (and test) a lot of custom rules? 

You can take a look at a short video that I did here:

McAfee Firewall Profiler v2 offers new analysis features

Ask a question

Join Now or Sign In to ask a question.
Domain registrar Name.com forced its customers to reset their account passwords on Wednesday following a security breach on the company's servers that might have resulted in customer information being compromised.
Microsoft has released a temporary fix for a zero-day vulnerability in Internet Explorer 8, which was used by hackers in a prominent attack against the U.S. Department of Labor's website.
Intruders used to creep in through ventilation ducts. Now they break in using the software that controls the ventilation.
Testing company Ixia launches high-volume DDoS tests against F5 firewalls.
The U.S. military's reliance on foreign-made products, including telecommunications equipment and semiconductors, is putting the nation's security at risk by exposing agencies to faulty parts and to the possibility that producing nations will stop selling vital items, according to a new report from the Alliance for American Manufacturing.
Two U.S. senators will push Congress or President Barack Obama's administration to pursue trade and immigration sanctions against China and other countries that allegedly support cyberattacks on U.S. government agencies and businesses, the lawmakers said Wednesday.
A 35-year-old Dutchman suspected of participating in a large DDoS attack on antispam organization Spamhaus was extradited from Spain to the Netherlands on Monday evening, the Dutch Public Prosecution Service said Wednesday.
Researchers propose foiling password thieves by salting password databases with red herrings called 'honeywords.'
Airport's IT transformation to cloud, BYOD support is saving money, boosting security.
McAfee shares some tips on creating hack-proof passwords.
Join us:
Facebook

Twitter

Pinterest

Tumblr

LinkedIn

Google+