topic Re: Next generation firewall in General Topics

Next generation firewall

Brianpiraty_Ale — Wed, 04 Apr 2018 20:49:15 GMT

by default checkpoint is Next generation firewall or once we added IPS, IA and application control only it will be next gen firewall. in other words a firewall gateway with IPsec VPN blade is a Next Gen firewall?

Re: Next generation firewall

AlekseiShelepov — Wed, 04 Apr 2018 21:36:32 GMT

It is just a marketing term and depends on how you define NGFW functionality. Different vendors have different thought on that.

In case of Check Point it should be

Next Generation Firewall Appliance (with FW, VPN, ADNC, IA, MOB-5, IPS and APCL Blades)

Re: Next generation firewall

PhoneBoy — Wed, 04 Apr 2018 22:58:28 GMT

I remember when Check Point first marketed their firewall as Next Generation--back in 2000 with the NG release.

We are using a different marketing term to describe our products these days: GenV

As in capable of preventing the fifth generation of cyber threats.

The generations of threats are described here: Gil Shwed: Stepping Up to GEN V of Cyber Security

Regardless of whether you have purchased a "GenV" or "Next Generation" product, if you're only leveraging Firewall and VPN, you're not leveraging the product to its full capabilities.

Re: Next generation firewall

RickLin — Sat, 14 Apr 2018 14:09:45 GMT

Right now Check Point have three kind of subscription packages.

NGFW(IPS APCL) -- only can be purchased after second year.

NGTP(IPS APCL URLF AV AB ASPM)

NGTX(IPS APCL URLF AV AB ASPM TE TEX)

But before this, Check Point let customer can choice which blade to use or not to use when renew subscription license.

Do you ever think about it why?

In my viewpoint is if let customer still be able to choice blade individually, it would not help customer get inside view or lack visibility.

Especially when they face APT attack.

In each Cyber Kill Chain stage, each subscription blade has its advantage in help customer to aware what happen and able to prevent attack in each stage.

The best strategy is detect and prevent as fast as you can in each Cyber Attack Kill Chain stage.