In addition to these foundational features, next-generation firewalls may include additional features such as antivirus and malware protection. External threat intelligence, or communication with a threat intelligence network to ensure that threat information is up to date and help identify bad actors.Next-generation firewalls include a number of security features that require processing time, so high performance are important to avoid disrupting business operations. High performance, which allows the firewall to monitor large amounts of network traffic without slowdown.This monitoring can be signature-based (matching activity to signatures of well-known threats), policy-based (blocking activity that violates security policies), or anomaly-based (monitoring for abnormal behavior). Intrusion Prevention System (IPS), which monitors the network for malicious activity and blocks it where it occurs.Deep-packet inspection is an improvement over traditional firewall technology, which only inspected a packet’s IP header to determine its source and destination. Deep-packet inspection, which inspects the data contained in packets.
This is a key feature of next-generation firewalls: They can block traffic from certain applications, as well as maintain greater control over individual applications. Application awareness, or the ability to filter traffic and apply complex rules based on application (rather than just based on port).Next-generation firewall specifications vary by provider, but they generally include some combination of the following features:
0 kommentar(er)
