// THREAT DETECTION AND DATA PRIVACY TERM
Next-Gen Firewall
A Next-Generation Firewall (NGFW) is an advanced network security device that moves beyond simple port and address filtering to inspect the actual content of network traffic. This allows it to identify and block sophisticated threats by understanding the specific applications being used, such as social media or file-sharing services.
TECHNICAL DEFINITION
A Next-Generation Firewall (NGFW) is a network security platform that combines traditional stateful packet inspection with advanced features like application awareness and control, intrusion prevention systems (IPS), deep packet inspection (DPI), and threat intelligence integration. By operating at the application layer (Layer 7), NGFWs provide granular visibility and policy enforcement based on users, content, and specific applications to counter modern malware, exploits, and advanced persistent threats (APTs).
BACKGROUND
Computer security is a subdiscipline within the field of information security. It focuses on protecting computer software, systems, and networks from threats that can lead to unauthorized information disclosure, theft, or damage to hardware, software, or data, as well as to the disruption or misdirection of the services they provide.
READ MORE ON WIKIPEDIASYNONYMS & ALIASES
- NGFW
- Application-aware firewall
- Layer 7 firewall
- Threat-focused firewall
- Deep Packet Inspection (DPI) firewall
- Context-aware firewall
USAGE NOTE
NGFWs are a cornerstone of modern network perimeter security, often replacing traditional firewalls to gain visibility and control over application-level traffic.
DEVELOPERS
Organizations developing technology related to Next-Gen Firewall.
A global cybersecurity leader that pioneered the Next-Generation Firewall (NGFW) category. Their platforms provide granular visibility and control over applications, users, and content, combined with advanced threat prevention.
Develops the FortiGate series of NGFWs, which are a core component of their integrated Security Fabric platform. These firewalls combine security and networking functions, including SD-WAN, into a single appliance.
Offers the Cisco Secure Firewall series (formerly Firepower NGFW), which provides comprehensive threat defense, from application visibility and control to advanced malware protection and intrusion prevention.
An early innovator in the firewall market, Check Point provides Quantum Security Gateways, a line of NGFWs that deliver advanced threat prevention, zero-day protection, and consolidated security management for enterprises.
Provides the SRX Series Services Gateways, which are high-performance NGFWs designed for data centers, campus environments, and service providers, integrating routing, switching, and advanced security services.
Delivers a range of security products including NGFWs that provide enterprise-grade security with centralized management, strong anti-evasion capabilities, and seamless integration with other security solutions.
Offers the Sophos Firewall, an NGFW that features advanced visibility, protection, and response capabilities. It uniquely integrates with their endpoint security products for a 'Synchronized Security' approach.
Develops the Barracuda CloudGen Firewall, an NGFW specifically designed for distributed networks and hybrid-cloud environments, focusing on secure connectivity, SD-WAN, and advanced threat protection.