Next-generation firewall (NGFW)

A next-generation firewall is a network security device that goes beyond basic traffic filtering to inspect applications, block known threats and apply rules based on users and content.

Older firewalls mainly allow or block traffic based on addresses and ports. A next-generation firewall adds features such as application awareness, intrusion prevention, web filtering, malware scanning and the ability to inspect encrypted traffic. It can recognize, for example, that traffic is a file-sharing app rather than ordinary web browsing.

For an Alberta business with an office, warehouse or shop, the firewall sits at the front door of the network. A properly configured NGFW can stop many attacks before they reach a computer and gives visibility into what is happening on your internet connection. A consumer-grade router from an internet provider usually lacks these protections.

Practical tip: a firewall is only as good as its configuration and updates. Make sure firmware is patched promptly, security subscriptions are renewed, remote management is not exposed to the internet and someone reviews the logs or alerts on a regular schedule.