redlegg

 
Firewalls
 

Firewalls can be in the form of software or a hardware appliance. They are designed to prevent unauthorized access to a private network via the Internet. The firewall examines all traffic as it enters or leaves the network, and blocks messages that don't meet specific criteria set by the user. Firewalls generally block traffic based on IP address or port numbers, so it is important to understand that a firewall alone can't stop everything.


Cisco


  • Cisco ASA 5500 Series Firewall Edition.
  • Firewall Services Module.
  • Cisco IOS Firewall.
Firewall

Sonicwall


Going far beyond simple stateful inspection, SonicWALL’s E-Class Network Security Appliance (NSA) deep packet inspection engine (DPI) scans against multiple application types and protocols, ensuring your enterprise-class network is protected from both internal and external attacks as well as application vulnerabilities. The NSA Series combines enterprise-level threat protection and scalability with an ultra-high-speed parallel performance architecture that employs up to 16 processor cores. Unlike other scanning engines, SonicWALL’s DPI engine is not limited by file size or the amount of concurrent traffic it can scan, making these solutions second to none.  By working at the application layer, DPI also protects against hidden application vulnerabilities that may be inadvertently letting attackers in through an unknown back door.


Reassembly-Free Deep Packet Inspection (RFDPI)


At the heart of every SonicWALL network security solution is our patented RFDPI engine. SonicWALL’s pioneering RFDPI technology unifies multiple security products into a single integrated suite, enabling administrators to manage local, remote and mobile network security simply and cost-effectively. RFDPI increases productivity by allowing IT to create reusable and adaptive policy control. More than simply a security approach, RFDPI incorporates object-based contextual controls over user identity and access; application identity and access; data leakage; network optimization; as well as granular reporting, auditing and forensics.


PROTECTION AGAINST APPLICATION VULNERABILITIES


The development cycle of most commercial software is fast. No matter how skilled the developers are, hidden vulnerabilities can appear, even in the most robust of software packages. While developers work quickly to find and close these vulnerabilities, hackers work just as quickly to find and exploit them. Deep packet inspection examines all downloaded, e-mailed, and compressed files, and examines information at the application layer to protect against the more sophisticated (and more prevalent) attacks that target application vulnerabilities.


PROTECTION AGAINST BOTH INTERNAL AND EXTERNAL ATTACKS


The attacks that happen daily against enterprise networks don't just come from hackers halfway across the world. Many come from within the enterprise organization. Disgruntled employees or trusted workers who have inappropriate access can be considered a threat. In addition, internal threats may appear completely by accident. Honest employees may accidentally open up a back door without even realizing it.


Deep packet inspection scans multiple application types and covers many protocols, including SMTP, POP3, IMAP, FTP, HTTP, NetBIOS and many other protocols and application types. It also scans all network layers. As a result, the enterprise network is protected from both internal and external threats.



Watchguard


XTM and UTM Appliances

For Extensible Threat Management


XTM 10 Series


Ideal for Headquarters/Data Centers with up to 10,000 users


WatchGuard® XTM 10 Series extensible threat management appliances are built for enterprise-grade performance with blazing throughput and numerous connectivity options. Advanced networking features include clustering, high availability (active/active), VLAN support, multi-WAN load balancing and enhanced VoIP security, plus inbound and outbound HTTPS inspection, to give you the strong security you need. And the XTM 10 Series is completely configurable - turn on or off components and services to fit your network security requirements.

XTM10


Firebox® X Peak™ e-Series


Ideal for Main Office/Headquarters
(up to 1000 users)


Data Sheet



Firebox® X Core™ e-Series


Ideal for Regional/Branch Offices or SMEs
(up to 500 users)


Data Sheet



Firebox® X Edge e-Series


Ideal for Branch Offices, Small Businesses and Wireless Hot Spots (up to 50 users)


Data Sheet