Beyond ports and addresses
Traditional firewalls allow or block traffic by IP address and port. Today, most applications run over a few common ports, so that is no longer enough.
Application awareness
NGFWs identify the application in a flow — a collaboration tool, a file-sharing service — and apply rules accordingly.
Identity
Rules can reference users and groups from your directory, so access follows people rather than devices.
Intrusion prevention
Signatures detect and block known exploit attempts in traffic.
Threat intelligence
Lists of malicious domains and addresses are updated continuously and blocked.
TLS inspection
Much traffic is encrypted. Decrypting and inspecting it can reveal threats but must respect privacy, legal and performance considerations. Apply it selectively.
Peer1ix FWaaS provides these capabilities as a managed network service.
