Next Generation Firewall and Network Protection
Traditional firewalls protect networks from attacks, blocking intruders from unauthorized access. Similar to doors on a house, certain ports can be opened to allow web traffic to enter and exist so your employees can use the web for legitimate work. In addition to legitimate work, they can browse a multitude of sites, like Facebook. Unfortunately, if they click on a Facebook post that links to a virus, that virus can come in through the open port. The firewall didn’t recognize the difference between authorized traffic and a virus.
In addition to the issue of identifying unauthorized traffic, a growing problem is that the new viruses are changing so fast that traditional protection methods such as antivirus can’t keep up with them. The emerging pattern is that code is embedded into an existing virus that causes it to mutate into a new version that hasn’t yet been labeled as a virus. This leads to what is known as a “zero day” attack, where a network is compromised before protection catches up.
NGFWs have intelligence that constantly analyzes data passing through, and when something unrecognized is detected, it is blocked and sent to an automated lab for immediate examination. The NGFW is joined to a global network that constantly gathers and shares information between members about new and emerging threats to help each member provide more protection.
In addition to standard firewall protection, an NGFW also provides the ability to control what your network users can do on the Internet. For instance, you could allow certain employees to access social media sites during lunch, but block access to gambling, pornography, or hate sites.
ProductsCisco ASA 5585-X Next-Generation Firewall
Today’s enterprise networks struggle to keep up with a mobile workforce. Users expect on-demand access from all their devices, even as applications increase performance levels. As always, security remains a priority. So how can you scale the applications while preserving the integrity of your network? Cisco® ASA with FirePOWER Services is the industry’s first adaptive, threat-focused, next-generation firewall (NGFW), designed to meet today’s level of threats and malware.
With Cisco ASA 5585-X Next-Generation Firewall, you get a scalable and secure high-performance solution. The Cisco ASA 5585-X has eight times the performance density, high VPN session counts, four times the connection capacity of any competitive firewall and twice as many connections per second. You’ll securely connect at a faster rate.
Features and Benefits:
- Access control and network address translation
- Intelligent and aggressive Intrusion Prevention System (IPS) against threats and risks to your organization
- Provides information on location and type of a mobile device before it accesses your network
- Reduce integration costs while improving performance
- Reduces initial procurement costs by 80%, power consumption by 85%, and rack space requirements by 88%
Cisco Meraki MX64 and MX84
- Intrusion Prevention System (IPS) for PCI 3.0 compliance
- Content and web-search filtering
- Geo-IP based firewalling
- IPsec VPN connectivity
- High-performance for bandwith-intensive networks
- 24/7 network monitoring
A properly configured NGFW by Carolinas IT can provide crucial protection for your business.