Gartner如何定义下一代防火墙-SinoGrid

《Gartner如何定义下一代防火墙-SinoGrid》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、ResearchPublicationDate:12October2009IDNumber:G00171540DefiningtheNext-GenerationFirewallJohnPescatore,GregYoungFirewallsneedtoevolvetobemoreproactiveinblockingnewthreats,suchasbotnetsandtargetedattacks.Enterprisesneedtoupdatetheirnetworkfirewallandintrusionpreven

2、tioncapabilitiestoprotectbusinesssystemsasattacksgetmoresophisticated.KeyFindings•Thestatefulprotocolfilteringandlimitedapplicationawarenessofferedbyfirst-generationfirewallsarenoteffectiveindealingwithcurrentandemergingthreats.•Usingseparatefirewallsandintrusionp

3、reventionappliancesresultsinhigheroperationalcostsandnoincreaseinsecurityoveranoptimizedcombinedplatform.•Next-generationfirewalls(NGFWs)areemergingthatcandetectapplication-specificattacksandenforceapplication-specificgranularsecuritypolicy,bothinboundandoutbound.

4、•NGFWswillbemosteffectivewhenworkinginconjunctionwithotherlayersofsecuritycontrols.Recommendations•Ifyouhavenotyetdeployednetworkintrusionprevention,requireNGFWcapabilitiesofallvendorsatyournextfirewallrefreshpoint.•Ifyouhavedeployedbothnetworkfirewallsandnetworki

5、ntrusionprevention,synchronizetherefreshcycleforbothtechnologiesandmigratetoNGFWcapabilities.•Ifyouusemanagedperimetersecurityservices,looktomoveuptomanagedNGFWservicesatthenextcontractrenewal.©2009Gartner,Inc.and/oritsAffiliates.AllRightsReserved.Reproductionandd

6、istributionofthispublicationinanyformwithoutpriorwrittenpermissionisforbidden.Theinformationcontainedhereinhasbeenobtainedfromsourcesbelievedtobereliable.Gartnerdisclaimsallwarrantiesastotheaccuracy,completenessoradequacyofsuchinformation.AlthoughGartner'sresearch

7、maydiscusslegalissuesrelatedtotheinformationtechnologybusiness,Gartnerdoesnotprovidelegaladviceorservicesanditsresearchshouldnotbeconstruedorusedassuch.Gartnershallhavenoliabilityforerrors,omissionsorinadequaciesintheinformationcontainedhereinorforinterpretationst

8、hereof.Theopinionsexpressedhereinaresubjecttochangewithoutnotice.WHATYOUNEEDTOKNOWAnNGFWisawire-speedintegratednetworkplatformthatperformsdeepinspection