Next Generation Firewall

From Wikipedia, the free encyclopedia

A recent evolution in the security technology space has been the convergence of intrusion-prevention systems (IPS) and firewall technologies. This has given birth to new technology called Next Generation Firewalls. Next generation firewalls leverage their existing deep packet inspection engine by sharing this functionality with an intrusion protection engine. As part of this process, streams which have been allowed by the firewall are subsequently submitted for malicious stream analysis to the IPS engine. The reuse of the deep packet inspection engine brings about a significant increase in performance and helps administrators get a consolidated security view of their network. With time, these firewalls could potentially start including other content processing technologies like anti-virus which can leverage the deep packet inspection technologies to provide comprehensive protection.

[edit] External links

• The Perils of Deep Packet Inspection

• Debunking the Firewall Hype
• Security Redux
• The Evolution of Firewalls