Next-Generation Firewalls – How We Can Help

Having delivered Firewall & Security Solutions to leading UK Organisations over the past 15 years, Response are now strategically aligned with Palo Alto Networks for the delivery of our Next Generation Firewall Solutions.

Palo Alto Networks was founded by security visionary Nir Zuk, with a mission to re-invent the firewall so it can once again become the most strategically important security device in the network.
Today, Palo Alto Networks offers real innovation in the firewall, enabling unprecedented visibility and control of applications and content – by user, not just IP address – at up to 10Gbps with no performance degradation.

Based on patent-pending App-ID™ technology, these next generation firewalls accurately identify applications – regardless of port, protocol, evasive tactic or SSL encryption – and scan content to stop threats and prevent data leakage.

Enterprises can for the first time embrace Web 2.0 and maintain complete visibility and control, while significantly reducing total cost of ownership through device consolidation.
Here are some of the unique capabilities available only in next generation firewalls from Palo Alto Networks:

 

• The only firewall to classify traffic based on the accurate identification of the application, not just port/protocol information.

• The only firewall to identify, control and inspect SSL encrypted traffic and applications.

• The only firewall with real-time (line-rate, low latency) content scanning to protect against viruses, spyware, data leakage and application vulnerabilities based on a stream-based threat prevention engine.

• The only firewall to provide graphical visualization of applications on the network with detailed user, group and network-level data categorized by sessions, bytes, ports, threats and time.

• The only firewall with line-rate, low-latency performance for all services, even under load.

Much has been made about bringing application visibility and control into network security. The reason is obvious: applications can easily slip by traditional port-based firewalls. And the value is obvious: employees use any application they need to get their job done—often indifferent to the risk that use poses to the business.

Nearly every network security vendor has acknowledged that application control is an increasingly critical part of network security. While the next-generation firewall (NGFW) is well defined by Gartner as something new, enterprise-focused, and distinct, many network security vendors are claiming NGFW is a subset of other functions (e.g. UTM or IPS).

Most traditional network security vendors are attempting to provide application visibility and control by using a limited number of application signatures supported in their IPS or other external database. But underneath, these capabilities are poorly integrated and their products are still based on legacy port-blocking technology, not NGFW technology.

Perhaps most importantly, these folks are missing the point – it’s not about
blocking applications, but safely enabling them. Unfortunately, the products proffered by traditional network security vendors ignore much of what enterprises do with applications today – they use them to enable their business – and as such, need to make sure that those applications run securely.

It is obvious that a next-generation firewall is a different and revolutionary class of product, but the interest from enterprise customers is so strong
that vendors of traditional products are trying to subvert the interest of enterprise network security team by attempting to look like an NGFW.

For enterprises looking at NGFWs, the most important consideration is: Will this new technology empower security teams to securely enable applications to the benefit of the organisation? Key questions to ask include:

• Will it increase visibility and understanding of application traffic?
• Will it expand traffic control options beyond blunt allow/deny?
• Will it help prevent threats?
• Will it eliminate the need to compromise between performance and security?
• Will it reduce costs for my organisation?
• Will it make the job of risk management easier or simpler?

If the answers to the above questions are “yes,” then transition is easy to justify.