Next Generation Firewall, referred to as NG Firewall.

In 2009, the famous consulting firm Gartner introduced that in order to deal with the current and future new generation of network security threats, firewalls must be upgraded to "next generation firewalls" again. First-generation firewalls have been largely unable to detect threats that utilize botnets as a delivery method. Due to the adoption of a service-based architecture and the popularity of Web 2.0, more traffic is carried out only through a few ports and a limited number of protocols, which means that port/protocol-based security policies Relevance and efficiency are getting lower and lower. Deep packet inspection intrusion prevention systems (IPS) can check the operating system and missing software for patching based on known attacks, but they cannot effectively identify and prevent application abuse, let alone the specific characteristics of the application. of protection.

Gartner defines network firewalls as online security control measures that can execute network security policies between trusted-level networks in real time. Gartner uses the term "next generation firewall" to describe the need to upgrade firewalls to respond to changes in the way business processes use IT and the methods of attack launched against business systems.

At the beginning of 2012, NGFW (Next generation firewall) has become a hot topic in the industry. A series of new application technologies such as cloud computing, WEB2.0 and mobile Internet are widely used. Gartner's understanding when defining NGFW in 2009 is obviously insufficient. TOPSEC (Tianrongxin), the holder of the NGFW trademark and the most well-known information security brand in China, has given out that the next generation firewall must have six characteristics: user protection-based, application-oriented security, efficient forwarding platform, and multi-level redundant architecture , all-round visualization and security technology integration. This also supplements Gartner's lack of understanding of new technologies such as cloud computing, web2.0, and mobile Internet when it defined NGFW in 2009.

Traditional firewalls can mitigate simple network attacks, while "next generation" firewalls can address outbound vulnerabilities in enterprise data centers. But only a new data center firewall architecture can significantly reduce capital expenditures by eliminating firewall equipment and upgrades and maximizing the use of other data center resources while ensuring standards-based compliance. This new data center firewall architecture features fully-agent, high-connectivity ADCs at the network edge.

The next generation firewall is not a simple stack of functions and performance. It is more appropriate to define the next generation firewall from a global perspective and from the perspective of solving the actual problems faced by user networks.

Next-generation firewalls are not products that come out of thin air, nor will they be the ultimate form of firewalls. Next-generation firewalls require security vendors to continuously pay attention to changes in the IT environment and customer needs, continue to focus on technology accumulation and innovation, and achieve product results based on accumulated experience.

There will be a "next generation" of next-generation firewalls, which will be products with stronger performance and functions that are more in line with the network environment and user needs.

I recommend the computer manager firewall function, which is very comprehensive in protecting my computer.

Tencent Computer Manager is a permanent free professional security software produced by Tencent. The 2-in-1 antivirus version integrates "professional virus scanning, intelligent software management, and system security protection", creating a "antivirus + management" "The 2-in-1 innovative model has passed four major authoritative tests including VB100, and its anti-virus strength ranks among the top in the world