Firewall Design

In order to prevent threats effectively, enterprises need to first reduce the avenues of attack and start controlling which applications run on the enterprise network. Then, enterprises need to scan allowed application traffic for threats more broadly – not limiting themselves to a strict definition of a particular type of threat (e.g., "virus" or "exploit"). Finally, in today's economic environment, organizations need to do it without increasing complexity and cost. Next-generation firewalls deliver a high performance threat prevention solution with low-latency and multi-Gbps throughput:

 

• Limit traffic to approved applications while avoiding the risks from unnecessary applications

 

• Scan "good" applications for a wide variety of threats – exploits, viruses, spyware, even confidential data leaks – with a single pass, stream-based scan

 

• Integrate intelligence, policies and reporting between the firewall and threat prevention functions

 

• Maintain network performance and throughput while providing IPS and threat prevention

 

• Simplify infrastructure with a single policy, high port-count, and high performance