Vendor Landscape: Next Generation Firewalls

The perimeter firewall grows up and becomes a Swiss Army Knife of protection capabilities.

Last Revised: November 22, 2012


You are currently over the vendor limit, please adjust your weightings to equal exactly 100%.


You are currently over the product limit, please adjust your weightings to equal exactly 100%.

What matters more, the vendor score or the product score? As you weigh the importance, we will generate the vendor shortlist to match your needs.

View Vendor Shortlist

What is a shortlist?

A shortlist is a personalized list of vendors based on the criteria you define. Your shortlist offers more information about vendor's strengths, weaknesses, price-points, etc, and ranks them according to your needs.

Already a member? Sign In

What is a Value Score?

The Value Score indexes each vendor’s product offering and business strength relative to their price point. It does not indicate vendor ranking.

Vendors that score high offer more bang for the buck (e.g. features, usability, stability, etc.) than the average vendor, while the inverse is true for those that score lower.

Price-conscious enterprises may wish to give the Value Score more consideration than those who are more focused on specific vendor/product attributes.

Your Challenge

  • Every enterprise needs to implement the right security solutions to protect its operations and its data; “Firewalls” are a table-stakes requirement for an enterprise to be secure.
  • Next Generation Firewalls (NGFW) have replaced Unified Threat Management (UTM) systems as feature portfolios broaden.
  • Picking the right solution means appropriate protection at an acceptable cost; picking wrong could mean higher cost, lower security, or both.

Our Advice

Critical Insight

  • The only traffic that counts anymore is HTTP/S: as all traffic becomes Web traffic, controlling traffic flow by protocol becomes keyed to digging into Port 80 (and 443) traffic.
  • Inbound is no longer the only direction that threats flow: as security focus has shifted from infrastructure to data, protection needs to address outbound flow as much as inbound attacks.
  • Firewalls can’t protect traffic they can’t see: encrypted traffic obfuscates threats from Firewalls while Wi-Fi networks allow attacks to bypass them entirely; modern solutions must control these traffic types as well.

Impact and Result

  • Enterprises that plan carefully and select thoughtfully can improve enterprise security while reducing cost and trimming administrative effort with a capable UTM/NGFW; the broader capabilities these tools offer means organizations can get rid of older point solutions that supported the incumbent firewall.

Get the Complete Storyboard

See how all the steps you need to take come together, with tools and advice to help with each task on your list.

Download Now

Get to Action

Best Practices Toolkit

  1. Understand the NGFW market space

    Understand NGFW solutions, their capabilities, and cost.

  2. Review NGFW solutions

    Build a shortlist of best-fit NGFW tools for the enterprise.

Talk to an Analyst

Each of our solution sets include information, tools and templates to help you complete a project on your own. However, if you want extra help, our silver and gold memberships include phone access to our analysts. Analyst calls are focused on helping our members use the research we produce, and our experts will guide you to successful project completion.

  • Book an Analyst Call on this topic. You can start as early as tomorrow morning. Our analysts will explain the process in your first call.
  • Get advice from a subject matter expert. Each call will focus on explaining the material and helping you to plan your project, interpret and analyze the results of each project step, and setting the direction for your next project step.


  • Missing_comment
    Keith Levine | 01-29-2014

    As fast as this space is developing and with all the security breaches in the retail space I would like to see this updated.

    • Missing_comment
      Info-Tech Research Group | 01-30-2014

      Thank you for your comment, this vendor landscape will be refreshed and published by July 2014.