[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:firewall":3},{"control":4,"products":25,"stories":82,"lessons":126,"related":151,"compare":167},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.","Firewalls that inspect traffic by application and user, with intrusion prevention that blocks known exploits and malicious connections.","Firewalls remain the basic boundary between your network and the internet. Firewalls and VPN gateways are themselves frequent targets in the news, so their value depends on keeping them patched, keeping their management interfaces off the internet and watching their logs.",[11,12,13,14],"How quickly are security fixes for the firewall itself released, and how are customers told?","Is the management interface reachable from the internet by default?","What is the throughput with full inspection switched on?","Does it work with our identity provider and SIEM?","Risk: exploitation through internet-facing services, or of the firewall itself. Control: next-generation firewall with intrusion prevention, management interfaces not exposed to the internet, security fixes applied within 7 days. Owner: network lead. Measure: days to apply firewall security fixes.",[17,18,19,20],"NIS2 Art. 21(2)(e): security of network and information systems","DORA Art. 9: network and infrastructure management","CIS Controls 12 and 13: network infrastructure and defence","ISO\u002FIEC 27001:2022 A.8.20: networks security",{"name":22,"slug":23},"Network Segmentation","network-segmentation","2026-10-16T12:48:16.923441+00:00",[26,34,42,50,58,66,74],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png","quantum-firewall","Quantum Force firewalls","https:\u002F\u002Fwww.checkpoint.com\u002Fquantum\u002Fnext-generation-firewall\u002F","Next-generation firewalls with threat prevention.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","secure-firewall","Cisco Secure Firewall","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Ffirewalls\u002Findex.html","Next-generation firewalls with intrusion prevention, using Talos threat intelligence.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"clavister","Clavister","\u002Fvendor-logos\u002Fclavister.png","clavister-netwall","Clavister NetWall","https:\u002F\u002Fwww.clavister.com\u002Fproducts\u002Fclavister-netwall\u002F","Next-generation firewalls developed in Sweden.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"fortinet","Fortinet","\u002Fvendor-logos\u002Ffortinet.png","fortigate","FortiGate","https:\u002F\u002Fwww.fortinet.com\u002Fproducts\u002Fnext-generation-firewall","Next-generation firewalls with intrusion prevention and SD-WAN.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","next-generation-firewall","Next-Generation Firewalls","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fnetwork-security\u002Fnext-generation-firewall","Hardware, virtual and cloud firewalls running PAN-OS, with intrusion prevention.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"sonicwall","SonicWall","\u002Fvendor-logos\u002Fsonicwall.png","sonicwall-firewalls","SonicWall firewalls","https:\u002F\u002Fwww.sonicwall.com\u002Fproducts\u002Ffirewalls","Next-generation firewalls for small business to enterprise.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-firewall","Sophos Firewall","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fnext-gen-firewall","Next-generation firewall with intrusion prevention.",{"total":83,"last_days":84,"recent":85},147,50,[86,91,96,101,106,111,116,121],{"slug":87,"title":88,"published_at":89,"brief":90},"palo-alto-networks-warns-of-pan-os-rce-flaw-exploited-in-attacks-10dada","Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks","2026-10-14T22:56:47+00:00","Palo Alto Networks warns of PAN-OS RCE zero-day (CVE-2026-0322) exploited in attacks.",{"slug":92,"title":93,"published_at":94,"brief":95},"researchers-publish-working-exploit-for-pre-auth-anydesk-linux-flaw-that-gives-r-b8e2f3","Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access","2026-10-09T12:59:22+00:00","Researchers publish working exploit for pre-auth AnyDesk Linux heap overflow giving root access",{"slug":97,"title":98,"published_at":99,"brief":100},"attackers-target-critical-atlassian-vulnerability-within-hours-of-poc-publicatio-63a35d","Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication","2026-10-08T14:04:44+00:00","Attackers exploit Atlassian Data Center vulnerability CVE-2026-21589 within hours of PoC publication.",{"slug":102,"title":103,"published_at":104,"brief":105},"johnson-controls-easyio-fg-30b52d","Johnson Controls EasyIO FG","2026-10-06T12:00:00+00:00","Johnson Controls EasyIO FG firmware vulnerable to unauthorized access due to hard-coded credentials.",{"slug":107,"title":108,"published_at":109,"brief":110},"wikimedia-says-openai-agents-tried-to-compromise-etherpad-and-use-wiki-tools-as--d1f67c","Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies","2026-10-06T11:26:25+00:00","Wikimedia reports rogue OpenAI agents attempted to compromise tools and use wikis as proxies.",{"slug":112,"title":113,"published_at":114,"brief":115},"critical-atlassian-flaw-lets-unauthenticated-attackers-read-known-files-across-8-f57b4b","Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products","2026-10-06T06:58:56+00:00","Critical Atlassian flaw allows unauthenticated attackers to read known files.",{"slug":117,"title":118,"published_at":119,"brief":120},"critical-fortimail-zero-day-flaw-exploited-in-attacks-allows-unauthenticated-arb-da984f","Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes","2026-10-02T05:49:50+00:00","FortiMail zero-day flaw exploited in attacks allows unauthenticated arbitrary file writes.",{"slug":122,"title":123,"published_at":124,"brief":125},"citrix-netscaler-cve-2026-88772-exploit-details-show-pre-auth-path-to-shellcode--a2c9b4","Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution","2026-09-30T05:30:30+00:00","Citrix NetScaler vulnerability CVE-2026-88772 allows pre-auth shellcode execution.",[127,131,135,139,143,147],{"slug":128,"title":129,"published_at":130},"pan-os-zero-day-rce-exploited-in-the-wild-patch-immediately","PAN-OS Zero-Day RCE Exploited in the Wild — Patch Immediately","2026-10-15T00:20:20.763+00:00",{"slug":132,"title":133,"published_at":134},"anydesk-linux-root-exploit-highlights-silent-patching-dangers","AnyDesk Linux Root Exploit Highlights Silent Patching Dangers","2026-10-09T16:21:13.394+00:00",{"slug":136,"title":137,"published_at":138},"critical-atlassian-flaw-exploited-within-hours-of-poc-release","Critical Atlassian Flaw Exploited Within Hours of PoC Release","2026-10-08T16:22:15.141+00:00",{"slug":140,"title":141,"published_at":142},"hard-coded-credentials-in-end-of-life-johnson-controls-easyio-fg-expose-full-unauthorized-access","Hard-Coded Credentials in End-of-Life Johnson Controls EasyIO FG Expose Full Unauthorized Access","2026-10-06T18:22:26.891+00:00",{"slug":144,"title":145,"published_at":146},"openai-agents-attempt-to-exploit-wikimedia-infrastructure-via-automated-abuse","OpenAI Agents Attempt to Exploit Wikimedia Infrastructure via Automated Abuse","2026-10-06T12:21:34.54+00:00",{"slug":148,"title":149,"published_at":150},"critical-atlassian-flaw-exposes-files-to-unauthenticated-attackers-across-8-products","Critical Atlassian Flaw Exposes Files to Unauthenticated Attackers Across 8 Products","2026-10-06T08:20:56.228+00:00",[152,155,159,163],{"slug":23,"name":153,"problem":154},"Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":156,"name":157,"problem":158},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",{"slug":160,"name":161,"problem":162},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.",{"slug":164,"name":165,"problem":166},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",{"palo-alto-networks\u002Fnext-generation-firewall":168,"fortinet\u002Ffortigate":186,"check-point\u002Fquantum-firewall":203,"sophos\u002Fsophos-firewall":221,"clavister\u002Fclavister-netwall":239,"cisco\u002Fsecure-firewall":243,"sonicwall\u002Fsonicwall-firewalls":259},{"hq_country":169,"also_provides":170,"reviews":171,"affected":184,"reported":185},"US",[],[172,175,178,181],{"label":173,"url":174},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":176,"url":177},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":179,"url":180},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",{"label":182,"url":183},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",9,32,{"hq_country":169,"also_provides":187,"reviews":188,"affected":201,"reported":202},[],[189,192,195,198],{"label":190,"url":191},"CyberRatings 2025 Q4 Enterprise Firewall Report: Fortinet follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-fortinet-follow-on\u002F",{"label":193,"url":194},"CyberRatings 2025 Q1 Cloud Network Firewall Report: Fortinet","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q1-cloud-network-firewall-report-fortinet\u002F",{"label":196,"url":197},"PeerSpot: Fortinet FortiGate user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Ffortinet-fortigate-reviews",{"label":199,"url":200},"Gartner Peer Insights: FortiGate Next-Generation Firewall user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Ffortigate-next-generation-firewall-2077436483",28,12,{"hq_country":204,"also_provides":205,"reviews":206,"affected":219,"reported":220},"IL",[],[207,210,213,216],{"label":208,"url":209},"AV-Comparatives EPR test 2026: Check Point","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_CheckPoint_2026.pdf",{"label":211,"url":212},"CyberRatings 2025 Q4 Enterprise Firewall Report: Check Point","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-check-point\u002F",{"label":214,"url":215},"Gartner Peer Insights: Check Point Quantum user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcheck-point-quantum",{"label":217,"url":218},"PeerSpot: Check Point Quantum Force (NGFW) user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcheck-point-quantum-force-ngfw-reviews",21,27,{"hq_country":222,"also_provides":223,"reviews":224,"affected":237,"reported":238},"GB",[],[225,228,231,234],{"label":226,"url":227},"AV-TEST: business results for Sophos","https:\u002F\u002Fwww.av-test.org\u002Fen\u002Fantivirus\u002Fbusiness-windows-client\u002Fmanufacturer\u002Fsophos\u002F",{"label":229,"url":230},"SE Labs enterprise endpoint test Apr-Jun 2026: Sophos Endpoint Security","https:\u002F\u002Fselabs.uk\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fsecurity-evaluation-test-report-enterprise-sophos-endpoint-security-2026-07-factsheet.pdf",{"label":232,"url":233},"ITPro: Sophos Firewall Virtual review (2024)","https:\u002F\u002Fwww.itpro.com\u002Fsecurity\u002Fsophos-firewall-virtual-review-affordable-network-protection-for-those-that-like-it-virtualized",{"label":235,"url":236},"Gartner Peer Insights: Sophos Endpoint user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fsophos-endpoint",0,4,{"hq_country":240,"also_provides":241,"reviews":242,"affected":237,"reported":237},"SE",[],[],{"hq_country":169,"also_provides":244,"reviews":245,"affected":84,"reported":258},[],[246,249,252,255],{"label":247,"url":248},"CyberRatings 2025 Q3 SSE Report: Cisco","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q3-sse-report-cisco\u002F",{"label":250,"url":251},"Gartner Peer Insights: Cisco Secure Firewall user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcisco-secure-firewall",{"label":253,"url":254},"PeerSpot: Cisco Secure Firewall user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcisco-secure-firewall-reviews",{"label":256,"url":257},"CyberRatings 2025 Q4 Enterprise Firewall Report: Cisco","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-cisco\u002F",31,{"hq_country":169,"also_provides":260,"reviews":261,"affected":268,"reported":269},[],[262,265],{"label":263,"url":264},"Gartner Peer Insights: SonicWall NSa Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fsonicwall-network-security-appliance",{"label":266,"url":267},"PeerSpot: SonicWall NSa user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fsonicwall-nsa-reviews",26,1]