subscription up to $8,800 for 1 year. Please contact Check Point sales for more details.
5. Juniper Networks SRX
Features :
- Juniper Networks SRX series NGFW can assess various applications on a network for security threats.
- It can also report on user behavior and contextual information that can privide an insight on which applications are permitted and what risks they may possess.
- Users can create policies to control or block access to high-risk applications.
- It can also report on application bandwidth usage and throttle applications that are not sanctioned by the enterprise.
- It includes IPS and Advanced Threat Protection to protect against known and unknown threats.
- It enables URL filtering that can be used to protect against malicious URLs.
- It can restrict application usage on a per-user basis by integrating with Microsoft Active Directory (AD) and the Lightweight Directory Access Protocol (LDAP). As a result, one can get visibility and control of application and network usage segmented by user-defined roles, which in turn can help combating insider threats.
- Using Juniper Networks SRX NGFW one can also monitor applications embedded in common network protocols such as HTTP or HTTPS traffic. It provides also SSL Inspection using which one can monitor encrypted traffic.
Price : Juniper Networks has several SRX series NGFW. Please contact sales for more information.
6. Forcepoint Next Generation Firewall
Features :
- Forcepoint NGFW provides a single console to manage firewalls, IPSs, VPNs and SD-WANs
Forcepoint NGFWs can be deployed as clusters that can reduce service interruptions. - It can cluster different network links together under centralized SD-WAN control.
- Security can be managed from multiple servers, there is no service interruption if the primary server goes offline.
- It uses Deep Packet Inspection.
- It can protect data center SDNs, edge, branch SD-WANs and cloud.
- It provides IPS.
- It provides sandboxing to prevent zero day threats.
- It can identify potential botnet command-and-control communications and protect devices against botnets.
- It can give granular controls over applications. For example, an administrator can specify which browsers and versions can access the network.
- It provides URL filtering to combat against phishing and malicious web downloads.
- It can monitor outbound traffic to detect sesnitive data such as credit card numbers, personal identifiers, restricted code names and other terms to reduce the risk of theft.
- Forcepoint NGFW runs in virtualized data centers and in the cloud instead of managing security on physical appliances.
- It supports plug and play deployment which can secure remote offices and branch locations easily.
Price : Forcepoint has several NGFW appliances. Please contact Forcepoint sales for price.
7. Sophos XG Firewall
Features :
- Sophos XG Firewall provides IPS, Advanced Threat Protection, Cloud Sandboxing, Dual AV, Web and App Control, Email Protection and Web Application Firewall.
- It can automatically respond to security incidents.
- It provides centralized management.
- It can use Layer-8 identity based policy technology to enable user level controls over applications, bandwidth and other network resources.
- It also provides pre-defines policy templates for convenience.
- It can monitor user activity and identify users with risk prone behavior.
- All security features can be deployed in hardware, software and virtual.
- It can monitor encrypted traffic to detect security threats.
- It also provides SMTP and POP message protection from spam, phishing and data loss.
- It provides policy based Data Loss Prevention.
Price : Please contact Sophos sales for pricing.
8. Barracuda NextGen Firewall
Features :
- Barracuda NextGen Firewall can be deployed in hardware, virtual or cloud.
- It includes sandboxing for Advanced Threat Protection.
- It has built-in IDS/IPS.
- It can provide granular access control based on identity of users and groups.
- It includes SD-WAN capabilities.
- It has URL filtering capability.
- It provides dual anti-virus.
- Application control takes place in data path and sandboxing is done in cloud to reduce performance impact.
Price : Barracuda has several NextGen Firewall products based on performance and throughput. Please contact Barracuda sales for pricing.
