Quantum Force firewalls
Next-generation firewalls with threat prevention.
Network Segmentation
Next-generation firewall and intrusion prevention
Malicious traffic is blocked at the network edge and between zones.
Addresses 62 stories in our coverage in the last 90 days 7 products that provide it
What it is
Firewalls that inspect traffic by application and user, with intrusion prevention that blocks known exploits and malicious connections.
How to value it
Firewalls remain the basic boundary between your network and the internet. Firewalls and VPN gateways are themselves frequent targets in the news, so their value depends on keeping them patched, keeping their management interfaces off the internet and watching their logs.
Questions to ask a vendor
- 1How quickly are security fixes for the firewall itself released, and how are customers told?
- 2Is the management interface reachable from the internet by default?
- 3What is the throughput with full inspection switched on?
- 4Does it work with our identity provider and SIEM?
For your risk register
- Risk
- Exploitation through internet-facing services, or of the firewall itself.
- Control
- Next-generation firewall with intrusion prevention, management interfaces not exposed to the internet, security fixes applied within 7 days.
- Owner
- Network lead.
- Measure
- Days to apply firewall security fixes.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Cisco Secure Firewall
Next-generation firewalls with intrusion prevention, using Talos threat intelligence.
Clavister NetWall
Next-generation firewalls developed in Sweden.
FortiGate
Next-generation firewalls with intrusion prevention and SD-WAN.
Next-Generation Firewalls
Hardware, virtual and cloud firewalls running PAN-OS, with intrusion prevention.
SonicWall firewalls
Next-generation firewalls for small business to enterprise.
Sophos Firewall
Next-generation firewall with intrusion prevention.
Recent stories it addresses
170 stories in total- 12 Nov 2026CVE-2026-119618 | Apache HTTP Server mod_http2 Race Condition Remote Code Execution Vulnerability
Apache HTTP Server mod_http2 race condition vulnerability allows RCE.
- 12 Nov 2026Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)
Exploit attempts targeting GPUStack authentication bypass vulnerability CVE-2026-102895 observed.
- 10 Nov 2026Barracuda Confirms Active Exploitation of Email Gateway Flaws Allowing Root Access
Barracuda confirms active exploitation of Email Security Gateway flaws enabling unauthenticated root access.
- 10 Nov 2026Hackers now exploit critical Barracuda ESG flaws to gain root access
Barracuda warns of active exploitation of critical ESG vulnerabilities allowing root access.
- 6 Nov 2026Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
Two Barracuda ESG flaws chained for root access without login; patches released.
- 4 Nov 2026Barracuda ESG Authentication Bypass Flaw Opens Path to Root
Barracuda ESG appliances vulnerable to root access via chained authentication bypass and command injection flaws.
- 30 Oct 2026PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
China-linked hackers chain PHP2Shell CVEs with Fragnesia kernel bug to root Palo Alto firewalls
- 29 Oct 2026Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)
Exploitation attempts for CVE-2026-101767, a critical Oracle EBS flaw, have begun.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.