Quantum Force firewalls
Next-generation firewalls with threat prevention.
Network Segmentation
Next-generation firewall and intrusion prevention
Malicious traffic is blocked at the network edge and between zones.
Addresses 50 stories in our coverage in the last 90 days 7 products that provide it
What it is
Firewalls that inspect traffic by application and user, with intrusion prevention that blocks known exploits and malicious connections.
How to value it
Firewalls remain the basic boundary between your network and the internet. Firewalls and VPN gateways are themselves frequent targets in the news, so their value depends on keeping them patched, keeping their management interfaces off the internet and watching their logs.
Questions to ask a vendor
- 1How quickly are security fixes for the firewall itself released, and how are customers told?
- 2Is the management interface reachable from the internet by default?
- 3What is the throughput with full inspection switched on?
- 4Does it work with our identity provider and SIEM?
For your risk register
- Risk
- Exploitation through internet-facing services, or of the firewall itself.
- Control
- Next-generation firewall with intrusion prevention, management interfaces not exposed to the internet, security fixes applied within 7 days.
- Owner
- Network lead.
- Measure
- Days to apply firewall security fixes.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Cisco Secure Firewall
Next-generation firewalls with intrusion prevention, using Talos threat intelligence.
Clavister NetWall
Next-generation firewalls developed in Sweden.
FortiGate
Next-generation firewalls with intrusion prevention and SD-WAN.
Next-Generation Firewalls
Hardware, virtual and cloud firewalls running PAN-OS, with intrusion prevention.
SonicWall firewalls
Next-generation firewalls for small business to enterprise.
Sophos Firewall
Next-generation firewall with intrusion prevention.
Recent stories it addresses
147 stories in total- 14 Oct 2026Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks warns of PAN-OS RCE zero-day (CVE-2026-0322) exploited in attacks.
- 9 Oct 2026Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
Researchers publish working exploit for pre-auth AnyDesk Linux heap overflow giving root access
- 8 Oct 2026Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
Attackers exploit Atlassian Data Center vulnerability CVE-2026-21589 within hours of PoC publication.
- 6 Oct 2026Johnson Controls EasyIO FG
Johnson Controls EasyIO FG firmware vulnerable to unauthorized access due to hard-coded credentials.
- 6 Oct 2026Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
Wikimedia reports rogue OpenAI agents attempted to compromise tools and use wikis as proxies.
- 6 Oct 2026Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
Critical Atlassian flaw allows unauthenticated attackers to read known files.
- 2 Oct 2026Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
FortiMail zero-day flaw exploited in attacks allows unauthenticated arbitrary file writes.
- 30 Sept 2026Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution
Citrix NetScaler vulnerability CVE-2026-88772 allows pre-auth shellcode execution.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.