thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

Next-Generation Firewall (NGFW)

Firewall that adds application awareness, user identity, intrusion prevention, and threat intelligence to stateful inspection.

Definition

NGFWs identify applications regardless of port, map traffic to users, decrypt and inspect TLS, and integrate IPS, URL filtering, malware sandboxing, and DNS security. Policies can be written by application and user rather than only IP and port. Vendors include Palo Alto Networks, Fortinet, Cisco Secure Firewall, Check Point, and Juniper SRX.

Example

A rule allows the Finance group to use Salesforce while blocking file uploads to personal cloud storage.

Exam tip

NGFW = Layer 7 application and user awareness plus IPS; contrast with UTM's bundled approach.

Related terms