---
title: What Is a Next-Generation Firewall, Really?
description: Enterprises believe NGFWs are sufficient for protecting the corporate network. However, firewalls that protect only applications or network traffic aren't enough
image: https://www.resilientiq.com/hubfs/What-Is-a-Next-Generation-Firewall.png
---

[![NEW_ResilientLogoShadow_FINALwhite.png](https://www.resilientiq.com/hs-fs/hubfs/Resilient_Logos/NEW_ResilientLogoShadow_FINALwhite.png?width=1210&height=254&name=NEW_ResilientLogoShadow_FINALwhite.png "NEW_ResilientLogoShadow_FINALwhite.png")](http://resilientiq.com)

![Resilient-Advanced-Network-Solutions 4.jpg](https://www.resilientiq.com/hs-fs/hubfs/Blog_Images/Resilient-Advanced-Network-Solutions%204.jpg?width=1920&name=Resilient-Advanced-Network-Solutions%204.jpg "Resilient-Advanced-Network-Solutions 4.jpg")

# Networking Intelligence

December 21, 2016

# What Is a Next-Generation Firewall, Really?

![authorIcon](http://www.sparkreaction.com/hubfs/Oceania%20Theme%202016/Images/authorIcon.png) By [Resilient Intelligent Networks](https://www.resilientiq.com/blog/author/resilient-intelligent-networks) ![topicIcon](http://www.sparkreaction.com/hubfs/Oceania%20Theme%202016/Images/topicIcon.png) [network security](https://www.resilientiq.com/blog/topic/network-security), [security fabric](https://www.resilientiq.com/blog/topic/security-fabric), [next-generation firewal](https://www.resilientiq.com/blog/topic/next-generation-firewal), [ngfw](https://www.resilientiq.com/blog/topic/ngfw)

[![](https://www.resilientiq.com/hubfs/What-Is-a-Next-Generation-Firewall.png) ](https://www.resilientiq.com/blog/what-is-a-next-generation-firewall)

Many enterprises believe next-generation firewalls (NGFWs) are table stakes for protecting the corporate network today, and they are. But they don’t provide the whole answer. As network boundaries blur and threats become more pervasive and sophisticated, firewalls that protect only applications or network traffic are becoming less effective.![What-Is-a-Next-Generation-Firewall.png](https://www.resilientiq.com/hs-fs/hubfs/What-Is-a-Next-Generation-Firewall.png?width=541&height=304&name=What-Is-a-Next-Generation-Firewall.png)

This is especially true as more enterprises deploy game-changing mobile, cloud and emerging Internet-of-Things (IoT) technologies. With more types of users leveraging a variety of public and private networks to access critical data residing everywhere from an internal data center to a provider-managed SaaS application, network boundaries are blurring fast.

And just as network attack surfaces expand, attacks against it are becoming more targeted, sophisticated and complex.

Consider the infamous Target breach, which exploited a [less-than-secure third-party partner](https://krebsonsecurity.com/2014/02/target-hackers-broke-in-via-hvac-company/) to gain access. Or, the more recent [attack against the Bangladesh central bank](https://www.wired.com/2016/05/insane-81m-bangladesh-bank-heist-heres-know/), where attackers exploited weaknesses in the SWIFT network to steal trusted user authentication data and make off with $81 million. Attackers know the weak points inherent in borderless networks, and they continually launch complex attacks to exploit them.

To compensate, many companies deploy NGFWs. These newer firewalls provide both the range of stateful network and application capabilities inherent in unified threat management (UTM) firewalls with the scalability, processing power and granularity of controls required by large enterprises. Unfortunately, as enterprise networks evolve, NGFWs alone aren’t enough, because they:

- **Pack too much into one tool**: Collapsing multiple security functions (stateful network plus application inspection, including IPS, web filtering, antispam and antivirus) into a single firewall unit leads to misconfiguration, missed log incidents and increases the chances a breach will go undetected.
- **Don't solve complexity problem**: Using NGFWs along with a variety of point solutions to shore up security at the mobile, cloud and IoT level means deploying, managing and monitoring too many tools, using too many different user interfaces and competing alert schemes. Once again, a lack of centralized security means breaches can more easily fly under the radar undetected.

**[Read also, The New ‘Security Fabric’ That Simplifies Network Protection >>](https://www.resilientiq.com/blog/introducing-the-new-security-fabric-that-simplifies-network-protection)**

## A Better Approach

What companies really need is a way to integrate comprehensive NGFW technology into a more [specialized-yet-collaborative defense strategy](https://www.resilientiq.com/blog/does-your-business-stand-a-chance-against-advanced-persistent-threats). This means using:

- **The right tool for the job**: Rather than force-fitting too many features into one device, the best security considers where a firewall is deployed – at the data center, the cloud or internal network segment – and allows IT to tailor the performance and security inspection technologies to fit.
- **Increasing collaboration**: The best tools are designed to protect certain layers – data center, cloud, mobile, etc. – but also can communicate and collaborate with other tools at other layers. This way, network and security intelligence is shared across domains and toolsets, enabling organizations to centrally apply security policies and manage security events end-to-end from a single pane of glass.

Fortinet’s [Enterprise Firewalls](https://www.fortinet.com/content/dam/fortinet/assets/white-papers/Building-Security-Fabric-Network.pdf) do just that. Used as part of Fortinet’s [Security Fabric](https://www.fortinet.com/corporate/about-us/why-fortinet.html), they can be deployed at exactly the right spot, with exactly the right features, all while working closely with other tools in the fabric to deliver high-performance bulletproof network security, no matter where or when it’s needed. A Fortinet partner, Resilient can deliver the advantages of a modern, collaborative security platform with best-in-class next generation security technology. [Learn more](https://www.resilientiq.com/).

[![Fortinet Security Fabric](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/703198/9e412245-fe3a-48dd-a33f-59c25cf3527b.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/703198/9e412245-fe3a-48dd-a33f-59c25cf3527b)

 

 SHARE THIS STORY [**](https://www.facebook.com/sharer/sharer.php?u=https://www.resilientiq.com/blog/what-is-a-next-generation-firewall&title=What%20Is%20a%20Next-Generation%20Firewall,%20Really?&picture=http://cdn2.hubspot.net/hubfs/703198/What-Is-a-Next-Generation-Firewall.png&description=Enterprises%20believe%20NGFWs%20are%20sufficient%20for%20protecting%20the%20corporate%20network.%20However,%20firewalls%20that%20protect%20only%20applications%20or%20network%20traffic%20aren't%20enough) | [**](https://twitter.com/intent/tweet?source=https://www.resilientiq.com/blog/what-is-a-next-generation-firewall&text=What%20Is%20a%20Next-Generation%20Firewall,%20Really) | [**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.resilientiq.com/blog/what-is-a-next-generation-firewall&title=What%20Is%20a%20Next-Generation%20Firewall,%20Really?&summary=Enterprises%20believe%20NGFWs%20are%20sufficient%20for%20protecting%20the%20corporate%20network.%20However,%20firewalls%20that%20protect%20only%20applications%20or%20network%20traffic%20aren't%20enough)

[NEXT POST **](https://www.resilientiq.com/blog/8-ransomware-predictions-to-address-in-2017)

### Search



### Recent Posts

### Posts by Topic

- [network security (29)](https://www.resilientiq.com/blog/topic/network-security)
- [employee it policy (15)](https://www.resilientiq.com/blog/topic/employee-it-policy)
- [security fabric (13)](https://www.resilientiq.com/blog/topic/security-fabric)
- [ransomware (11)](https://www.resilientiq.com/blog/topic/ransomware)
- [acceptable use policy (8)](https://www.resilientiq.com/blog/topic/acceptable-use-policy)
- [cyber threat analysis (7)](https://www.resilientiq.com/blog/topic/cyber-threat-analysis)
- [IT Security in Education (6)](https://www.resilientiq.com/blog/topic/it-security-in-education)
- [malware (6)](https://www.resilientiq.com/blog/topic/malware)
- [IoT Security (5)](https://www.resilientiq.com/blog/topic/iot-security)
- [Patient data security (5)](https://www.resilientiq.com/blog/topic/patient-data-security)
- [Protecting Student Data (5)](https://www.resilientiq.com/blog/topic/protecting-student-data)
- [network vulnerability (5)](https://www.resilientiq.com/blog/topic/network-vulnerability)
- [wireless networking solutions (5)](https://www.resilientiq.com/blog/topic/wireless-networking-solutions)
- [Cyber Threat Assessment (4)](https://www.resilientiq.com/blog/topic/cyber-threat-assessment)
- [Digital Privacy in Schools (4)](https://www.resilientiq.com/blog/topic/digital-privacy-in-schools)
- [protecting your it network (4)](https://www.resilientiq.com/blog/topic/protecting-your-it-network)
- [DDoS Attacks (3)](https://www.resilientiq.com/blog/topic/ddos-attacks)
- [IT Security in Schools (3)](https://www.resilientiq.com/blog/topic/it-security-in-schools)
- [Protecting Employee Privacy (3)](https://www.resilientiq.com/blog/topic/protecting-employee-privacy)
- [advanced persistent threats (3)](https://www.resilientiq.com/blog/topic/advanced-persistent-threats)
- [cloud security (3)](https://www.resilientiq.com/blog/topic/cloud-security)
- [healthcare cyberattacks (3)](https://www.resilientiq.com/blog/topic/healthcare-cyberattacks)
- [network threats (3)](https://www.resilientiq.com/blog/topic/network-threats)
- [phishing (3)](https://www.resilientiq.com/blog/topic/phishing)
- [secured network services (3)](https://www.resilientiq.com/blog/topic/secured-network-services)
- [securing the healthcare enterprise (3)](https://www.resilientiq.com/blog/topic/securing-the-healthcare-enterprise)
- [traffic shaping (3)](https://www.resilientiq.com/blog/topic/traffic-shaping)
- [Control network traffic (2)](https://www.resilientiq.com/blog/topic/control-network-traffic)
- [Intent-based Security (2)](https://www.resilientiq.com/blog/topic/intent-based-security)
- [K-12 Technology Security (2)](https://www.resilientiq.com/blog/topic/k-12-technology-security)
- [app performance (2)](https://www.resilientiq.com/blog/topic/app-performance)
- [bandwidth management (2)](https://www.resilientiq.com/blog/topic/bandwidth-management)
- [byod policy (2)](https://www.resilientiq.com/blog/topic/byod-policy)
- [cloud (2)](https://www.resilientiq.com/blog/topic/cloud)
- [critical infrastructure threats (2)](https://www.resilientiq.com/blog/topic/critical-infrastructure-threats)
- [cyber secure campus (2)](https://www.resilientiq.com/blog/topic/cyber-secure-campus)
- [cybersecurity strategy (2)](https://www.resilientiq.com/blog/topic/cybersecurity-strategy)
- [mobile device security (2)](https://www.resilientiq.com/blog/topic/mobile-device-security)
- [network optimization (2)](https://www.resilientiq.com/blog/topic/network-optimization)
- [network security in higher education (2)](https://www.resilientiq.com/blog/topic/network-security-in-higher-education)
- [network technology (2)](https://www.resilientiq.com/blog/topic/network-technology)
- [network visibility (2)](https://www.resilientiq.com/blog/topic/network-visibility)
- [oil and gas industry (2)](https://www.resilientiq.com/blog/topic/oil-and-gas-industry)
- [ssl encryption (2)](https://www.resilientiq.com/blog/topic/ssl-encryption)
- [threat intelligence (2)](https://www.resilientiq.com/blog/topic/threat-intelligence)
- [unified threat management (UTM) (2)](https://www.resilientiq.com/blog/topic/unified-threat-management-utm)
- [wan optimization (2)](https://www.resilientiq.com/blog/topic/wan-optimization)
- [wireless LAN access security (2)](https://www.resilientiq.com/blog/topic/wireless-lan-access-security)
- [wireless network best practices (2)](https://www.resilientiq.com/blog/topic/wireless-network-best-practices)
- [802.11ac wave 2 (1)](https://www.resilientiq.com/blog/topic/802-11ac-wave-2)
- [Endpoint Protection (1)](https://www.resilientiq.com/blog/topic/endpoint-protection)
- [Endpoint Security (1)](https://www.resilientiq.com/blog/topic/endpoint-security)
- [IT Security in Government (1)](https://www.resilientiq.com/blog/topic/it-security-in-government)
- [Internal Segmentation Firewalls (1)](https://www.resilientiq.com/blog/topic/internal-segmentation-firewalls)
- [Network Technology Problem Solving (1)](https://www.resilientiq.com/blog/topic/network-technology-problem-solving)
- [Point of sale attacks (1)](https://www.resilientiq.com/blog/topic/point-of-sale-attacks)
- [Public sector IT networks (1)](https://www.resilientiq.com/blog/topic/public-sector-it-networks)
- [Software-defined networking (1)](https://www.resilientiq.com/blog/topic/software-defined-networking)
- [Threat detection (1)](https://www.resilientiq.com/blog/topic/threat-detection)
- [application security (1)](https://www.resilientiq.com/blog/topic/application-security)
- [business critical applications (1)](https://www.resilientiq.com/blog/topic/business-critical-applications)
- [critical learning applications (1)](https://www.resilientiq.com/blog/topic/critical-learning-applications)
- [cybersecurity (1)](https://www.resilientiq.com/blog/topic/cybersecurity)
- [cybersecurity technology (1)](https://www.resilientiq.com/blog/topic/cybersecurity-technology)
- [data protection (1)](https://www.resilientiq.com/blog/topic/data-protection)
- [digital learning (1)](https://www.resilientiq.com/blog/topic/digital-learning)
- [healthcare data security (1)](https://www.resilientiq.com/blog/topic/healthcare-data-security)
- [healthcare mobile networks (1)](https://www.resilientiq.com/blog/topic/healthcare-mobile-networks)
- [high performance network security (1)](https://www.resilientiq.com/blog/topic/high-performance-network-security)
- [higher education (1)](https://www.resilientiq.com/blog/topic/higher-education)
- [hybrid clouds (1)](https://www.resilientiq.com/blog/topic/hybrid-clouds)
- [hyperconnected (1)](https://www.resilientiq.com/blog/topic/hyperconnected)
- [indicators of compromise (1)](https://www.resilientiq.com/blog/topic/indicators-of-compromise)
- [it industry news (1)](https://www.resilientiq.com/blog/topic/it-industry-news)
- [network infrastructure (1)](https://www.resilientiq.com/blog/topic/network-infrastructure)
- [network intrusion (1)](https://www.resilientiq.com/blog/topic/network-intrusion)
- [networking terminology (1)](https://www.resilientiq.com/blog/topic/networking-terminology)
- [next-generation firewal (1)](https://www.resilientiq.com/blog/topic/next-generation-firewal)
- [ngfw (1)](https://www.resilientiq.com/blog/topic/ngfw)
- [reinforce network technology (1)](https://www.resilientiq.com/blog/topic/reinforce-network-technology)
- [retail data security (1)](https://www.resilientiq.com/blog/topic/retail-data-security)
- [sandbox solution (1)](https://www.resilientiq.com/blog/topic/sandbox-solution)
- [sdn (1)](https://www.resilientiq.com/blog/topic/sdn)
- [security operations (1)](https://www.resilientiq.com/blog/topic/security-operations)
- [shadow IT risks (1)](https://www.resilientiq.com/blog/topic/shadow-it-risks)
- [ssl inspection (1)](https://www.resilientiq.com/blog/topic/ssl-inspection)
- [ssl security (1)](https://www.resilientiq.com/blog/topic/ssl-security)
- [university campus cybersecurity (1)](https://www.resilientiq.com/blog/topic/university-campus-cybersecurity)
- [zero-day attacks (1)](https://www.resilientiq.com/blog/topic/zero-day-attacks)

[see all](https://www.resilientiq.com/blog/what-is-a-next-generation-firewall#)

### Subscribe to Blog

[![Resilient-Advanced-Networking-Solutions.png](https://www.resilientiq.com/hs-fs/hubfs/Resilient_Logos/Resilient-Advanced-Networking-Solutions.png?width=496&height=105&name=Resilient-Advanced-Networking-Solutions.png "Resilient-Advanced-Networking-Solutions.png")](http://resilientiq.com)

Contact

 2921 Country Club Road  
 Denton, Texas 76210  
 940-535-7500

#### Keep in Touch

### Subscribe to Our Blog

## [![social-1834007_960_720](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834007_960_720.png?width=40&name=social-1834007_960_720.png "social-1834007_960_720")](https://www.facebook.com/ResilientIntelligentNetworks)[![social-1834011_1280](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834011_1280.png?width=40&name=social-1834011_1280.png "social-1834011_1280")](https://www.linkedin.com/company/resilient-intelligent-networks)[![social-1834013_1280](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834013_1280.png?width=40&name=social-1834013_1280.png "social-1834013_1280")](https://twitter.com/resilientiq)[![social-1834014_960_720](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834014_960_720.png?width=40&name=social-1834014_960_720.png "social-1834014_960_720")](https://www.resilientiq.com/blog/rss.xml)[![](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834016_960_720.png?width=40&name=social-1834016_960_720.png "social-1834016_960_720.png")](https://www.youtube.com/channel/UCIuShF1pL6Ekv2JTOnXuz-Q)

Search the Resilient Blog on Google