Forcepoint Next Generation Firewall (NGFW)
Enterprise SD-WAN Meets the #1 Most Secure Next Gen Firewall

Overview:

Forcepoint Next Generation Firewall (NGFW) combines fast, flexible networking (SD-WAN and LAN) with industry-leading security to connect and protect people and the data they use throughout diverse, evolving enterprise networks. Forcepoint NGFW provides consistent security, performance and operations across physical, virtual and cloud systems. It’s designed from the ground up for high availability and scalability, as well as centralized management with full 360° visibility.

• Replace MPLS and Go Direct to Cloud
  Use SD-WAN to replace costly MPLS at retail stores and branch offices with broadband links to the cloud. Accelerate Office 365 performance and boost resilience without sacrificing security with Forcepoint NGFW.
• Stop Evasions That Bypass Your IPS
  Defend your networks against emerging exploits and malware—even ones camouflaged by advanced evasion techniques that sneak through most next generation firewalls.
• Respond to Incidents in Minutes, Not Hours
  Immediately see and understand what’s happening in your network with an interactive, visual interface. Update policies for hundreds of physical and virtual locations worldwide with a single click.

Always-On SD-WAN Connectivity for Enterprises

Today’s businesses demand fully resilient network security solutions. Forcepoint NGFW builds in high scalability and availability at all levels:

• Active-active, mixed clustering
  Up to 16 nodes of different models running different versions can be clustered together. This provides superior networking performance and resilience, and enables security such as deep packet inspection and VPNs.
• Seamless policy updates and software upgrades
  Forcepoint’s industry-leading availability enables policy updates (and even software upgrades) to be seamlessly pushed to a cluster without interrupting service.
• SD-WAN network clustering
  Extends high-availability coverage to network and VPN connections. Combines nonstop security with the ability to take advantage of local broadband connections in order to complement or replace expensive leased lines like MPLS.

Keep Pace With Changing Security Needs

A unified software core enables Forcepoint NGFW to handle multiple security roles, from firewall/VPN to IPS to layer 2 firewall, in dynamic business environments. Forcepoint NGFWs can be deployed in a variety of ways (e.g., physical, virtual, cloud appliances), all managed from a single console.

Forcepoint uniquely tailors access control and deep inspection to each connection to provide high performance and security. It combines granular application control, intrusion prevention system (IPS) defenses, built-in virtual private network (VPN) control and mission-critical application proxies into an efficient, extensible and highly scalable design. Our powerful anti-evasion technologies decode and normalize network traffic before inspection and across all protocol layers to expose and block the most advanced attack methods.

Block Sophisticated Data Breach Attacks

Large data breaches continue to plague businesses and organizations of every industry. Now you can fight back with application-layer exfiltration protection. Forcepoint NGFWs selectively and automatically whitelist or blacklist network traffic originating from specific applications on PCs, laptops, servers, file shares and other endpoint devices based on highly granular endpoint contextual data. It goes beyond typical firewalls to prevent attempted exfiltration of sensitive data from endpoints via unauthorized programs, web applications, users and communications channels.

Unmatched Protection

Attackers have become experts in penetrating enterprise networks, applications, data centers and endpoints. Once inside, they steal intellectual property, customer information and other sensitive data, causing irreparable damage to businesses and their respective reputations. New attack techniques can evade detection by traditional security network devices, including many name-brand firewalls, moving beyond the simple transmission of vulnerability exploits.

Evasions work at multiple levels to camouflage exploits and malware, making them invisible to traditional signature-based packet inspection. With evasions, even old attacks that have been blocked for years can be repackaged to compromise internal systems.

Forcepoint NGFW takes a different approach. Our industryleading security engine is designed for all three stages of network defense: to defeat evasions, detect exploits of vulnerabilities and stop malware. It can be deployed transparently behind existing firewalls to add protection without disruption, or as full-featured NGFW for all-inone security.

In addition, Forcepoint NGFW provides fast decryption of encrypted traffic, including HTTPS web connections, combined with granular privacy controls that keep your business and users safe in a rapidly changing world. It can even limit access from specific endpoint applications to lock down devices or prevent the use of vulnerable software.