NGFW vs. Traditional Firewalls
Traditional firewalls and NGFWs are both designed to detect and block malicious or unwanted traffic that crosses network boundaries. However, this occurs at different levels of the TCP/IP network protocol stack. Traditional firewalls operate primarily at the TCP and IP layers of the protocol stack. They restrict the types of traffic that can enter or leave their protected network by checking the IP addresses and port numbers of inbound and outbound packets. However, their inability to see the contents of network packets leaves them blind to many modern threats. NGFWs, on the other hand, operate at the application layer of the protocol stack. Their understanding of application traffic and ability to decrypt encrypted traffic streams allows them to identify and control application traffic and also block a wider range of threats. And unlike traditional firewall policies based on IP and service ports, NGFWs integrate user and machine identity into security policies, which bet...
Comments
Post a Comment