Forcepoint Next-Generation Firewall - Detailed Review

Frequently Asked Questions about the Forcepoint Next-Generation Firewall

What are the key features of the Forcepoint Next-Generation Firewall?

The Forcepoint Next-Generation Firewall (NGFW) is packed with several key features. It includes advanced access controls, deep inspection capabilities, and an integrated Intrusion Prevention System (IPS) to protect against advanced threats and data breaches.

• It offers high availability with active-active clustering, seamless policy updates, and software upgrades without interrupting service.
• The firewall includes anti-malware detection, sandboxing, and the ability to decrypt and inspect HTTPS and SSL/TLS traffic.
• It also features URL filtering, application control, and protection against Advanced Evasion Techniques (AETs).

How does the Forcepoint NGFW protect against advanced threats?

The Forcepoint NGFW is highly effective in protecting against advanced threats. It uses multiple scanning techniques, including reputation vetting, built-in anti-malware scanning, and the Forcepoint Advanced Malware Detection service, which employs sandboxing and other analytical techniques to identify and block malicious code.

• It also defends against Advanced Evasion Techniques (AETs) by normalizing traffic protocols, spotting anomalies, and preventing vulnerability exploits.
• The integrated IPS helps in blocking zero-day ransomware threats and other unknown malware strains.

Can the Forcepoint NGFW be deployed in cloud environments?

Yes, the Forcepoint NGFW can be deployed in cloud environments. It supports deployments in AWS and Azure clouds, allowing organizations to protect their applications and workloads in the cloud with the same security and connectivity as their internal networks.

• The firewall can be deployed directly from cloud marketplaces and managed from an existing Security Management Center (SMC) system.

How is the Forcepoint NGFW managed?

The Forcepoint NGFW is centrally managed through the Security Management Center (SMC) Appliance. This allows administrators to deploy, monitor, and update thousands of firewalls, VPNs, and IPSs from a single console.

• The SMC enables rapid mapping of business processes into strong, accurate controls and provides a unified view of network activity, facilitating quick identification and response to security incidents.

What kind of application control does the Forcepoint NGFW offer?

The Forcepoint NGFW provides granular application control through its Endpoint Context Agent. This allows administrators to specify which applications can access the internet, including the ability to whitelist or blacklist specific client applications running on hosts and end-user devices.

• Customizable application controls enable administrators to choose which services can access web services, ensuring that only approved applications can communicate over the network.

How does the Forcepoint NGFW ensure high availability?

The Forcepoint NGFW ensures high availability through several mechanisms. It supports active-active clustering, where up to 16 nodes of different models can be clustered together, providing superior networking performance and resilience.

• The firewall also offers automated failover to prevent service interruptions and supports SD-WAN network clustering, extending high-availability coverage to network and VPN connections.

What kind of visibility and control does the Forcepoint NGFW provide over HTTPS traffic?

The Forcepoint NGFW provides advanced control over HTTPS traffic through its proxy-based protection. This allows administrators to inspect and control HTTPS traffic, including the ability to allow or block specific URLs or types of HTTPS requests.

• This feature is particularly useful for protecting mission-critical applications that communicate over encrypted connections.

How does the Forcepoint NGFW support compliance with privacy laws and internal practices?

The Forcepoint NGFW helps organizations comply with emerging privacy laws and internal practices through its Smart Policies. These policies can be updated globally in seconds and are designed to prevent the exposure of personally identifiable information (PII) when users communicate with sensitive sites.

• The firewall also integrates with the Forcepoint ThreatSeeker Intelligence cloud service, which provides dynamic URL categorization to enforce web access policies.

Can the Forcepoint NGFW be integrated with other security tools and systems?

Yes, the Forcepoint NGFW is designed to integrate seamlessly with other security tools and systems. It can be part of a broader security ecosystem, including SD-WAN solutions, VPN gateways, and other network security devices.

• The centralized management through the SMC Appliance ensures that all these components can be managed from a single console, streamlining security management across the enterprise.

What kind of support does the Forcepoint NGFW offer for virtualized and cloud-based networks?

The Forcepoint NGFW provides comprehensive support for virtualized and cloud-based networks. It can be deployed as a virtual appliance on platforms like ESXi and can protect virtualized networks against advanced attacks.

• The firewall also extends its security capabilities to AWS and Azure clouds, ensuring that workloads running in these environments are protected with the same level of security as on-premises networks.