Sourcefire to ship its first next-gen firewalls

FRAMINGHAM, Mass. — Sourcefire Inc. says it expects to begin shipping its first two next-generation firewall appliances later this month, entering an increasingly crowded market.

Traditional network firewalls examine and control traffic based on ports, but next-gen models add application-layer filtering. “It’s the ability to see the applications traversing your network,” says Dave Stewart, Sourcefire’s director of product marketing. He said the two appliances — the 10 Gbps 3D8140 Next-Generation Firewall Edition and the 20 Gbps 3D8250 Next-Generation Firewall Edition — can recognize more than 1,000 applications, down to granular controls. “And we’ll constantly be adding more,” he added.

“We don’t just identify Facebook, we identify Facebook chat, video and postings, and we can set user groups for Web filtering by URL,” Stewart said, adding that the appliances provide a way to monitor and block what’s occurring across the network, such as learning who’s watching Netflix when they shouldn’t be. The two new Sourcefire appliances also include intrusion detection and protection capabilities, the company’s more traditional product focus.

Sourcefire anticipates that its customers will be working to gradually adapt the context-based application-layer controls to their networks even as they continue to use port-based firewalling, basically operating in dual-mode.

Operating in application-aware and port-based firewalling modes simultaneously has been the customary experience with other firewall vendors’ “application-aware” firewalls, including those from Palo Alto Networks, Check Point and SonicWall.

One limitation in the new Sourcefire firewalls concerns their use in virtualized environments. The appliances cannot yet go deep into the hypervisor layer to inspect traffic which might, for example, be traveling between virtual machines on the same physical machine. But that kind of capability for the VMware environment is expected to be introduced around mid-2012.

Both NGFW appliances, expected to ship Dec. 23, start at US$140,000.

(From Network World U.S.)

Would you recommend this article?


Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.

Jim Love, Chief Content Officer, IT World Canada

Featured Download

Featured Articles

Cybersecurity in 2024: Priorities and challenges for Canadian organizations 

By Derek Manky As predictions for 2024 point to the continued expansion...

Survey shows generative AI is a top priority for Canadian corporate leaders.

Leaders are devoting significant budget to generative AI for 2024 Canadian corporate...

Related Tech News

Tech Jobs

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

Tech Companies Hiring Right Now