Next generation firewall

[Brianpiraty_Ale]

by default checkpoint is Next generation firewall or once we added IPS, IA and application control only it will be next gen firewall. in other words a firewall gateway with  IPsec VPN blade is a Next Gen firewall?

[AlekseiShelepov]

It is just a marketing term and depends on how you define NGFW functionality. Different vendors have different thought on that.

In case of Check Point it should be

Next Generation Firewall Appliance (with FW, VPN, ADNC, IA, MOB-5, IPS and APCL Blades)

[PhoneBoy]

I remember when Check Point first marketed their firewall as Next Generation--back in 2000 with the NG release.

We are using a different marketing term to describe our products these days: GenV

As in capable of preventing the fifth generation of cyber threats.

The generations of threats are described here: Gil Shwed: Stepping Up to GEN V of Cyber Security 

Regardless of whether you have purchased a "GenV" or "Next Generation" product, if you're only leveraging Firewall and VPN, you're not leveraging the product to its full capabilities.

[RickLin]

Right now Check Point have three kind of subscription packages.

NGFW(IPS APCL) -- only can be purchased after second year.

NGTP(IPS APCL URLF AV AB ASPM)

NGTX(IPS APCL URLF AV AB ASPM TE TEX)

But before this, Check Point let customer can choice which blade to use or not to use when renew subscription license.

Do you ever think about it why?

In my viewpoint is if let customer still be able to choice blade individually, it would not help customer get inside view or lack visibility. 

Especially when they face APT attack.

In each Cyber Kill Chain stage, each subscription blade has its advantage in help customer to aware what happen and able to prevent attack in each stage.

The best strategy is detect and prevent as fast as you can in each Cyber Attack Kill Chain stage.