[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:firewall":3},{"control":4,"products":25,"stories":82,"lessons":126,"related":151,"compare":167},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.","Firewalls that inspect traffic by application and user, with intrusion prevention that blocks known exploits and malicious connections.","Firewalls remain the basic boundary between your network and the internet. Firewalls and VPN gateways are themselves frequent targets in the news, so their value depends on keeping them patched, keeping their management interfaces off the internet and watching their logs.",[11,12,13,14],"How quickly are security fixes for the firewall itself released, and how are customers told?","Is the management interface reachable from the internet by default?","What is the throughput with full inspection switched on?","Does it work with our identity provider and SIEM?","Risk: exploitation through internet-facing services, or of the firewall itself. Control: next-generation firewall with intrusion prevention, management interfaces not exposed to the internet, security fixes applied within 7 days. Owner: network lead. Measure: days to apply firewall security fixes.",[17,18,19,20],"NIS2 Art. 21(2)(e): security of network and information systems","DORA Art. 9: network and infrastructure management","CIS Controls 12 and 13: network infrastructure and defence","ISO\u002FIEC 27001:2022 A.8.20: networks security",{"name":22,"slug":23},"Network Segmentation","network-segmentation","2026-10-16T12:48:16.923441+00:00",[26,34,42,50,58,66,74],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png","quantum-firewall","Quantum Force firewalls","https:\u002F\u002Fwww.checkpoint.com\u002Fquantum\u002Fnext-generation-firewall\u002F","Next-generation firewalls with threat prevention.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","secure-firewall","Cisco Secure Firewall","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Ffirewalls\u002Findex.html","Next-generation firewalls with intrusion prevention, using Talos threat intelligence.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"clavister","Clavister","\u002Fvendor-logos\u002Fclavister.png","clavister-netwall","Clavister NetWall","https:\u002F\u002Fwww.clavister.com\u002Fproducts\u002Fclavister-netwall\u002F","Next-generation firewalls developed in Sweden.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"fortinet","Fortinet","\u002Fvendor-logos\u002Ffortinet.png","fortigate","FortiGate","https:\u002F\u002Fwww.fortinet.com\u002Fproducts\u002Fnext-generation-firewall","Next-generation firewalls with intrusion prevention and SD-WAN.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","next-generation-firewall","Next-Generation Firewalls","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fnetwork-security\u002Fnext-generation-firewall","Hardware, virtual and cloud firewalls running PAN-OS, with intrusion prevention.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"sonicwall","SonicWall","\u002Fvendor-logos\u002Fsonicwall.png","sonicwall-firewalls","SonicWall firewalls","https:\u002F\u002Fwww.sonicwall.com\u002Fproducts\u002Ffirewalls","Next-generation firewalls for small business to enterprise.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-firewall","Sophos Firewall","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fnext-gen-firewall","Next-generation firewall with intrusion prevention.",{"total":83,"last_days":84,"recent":85},170,62,[86,91,96,101,106,111,116,121],{"slug":87,"title":88,"published_at":89,"brief":90},"cve-2026-119618-apache-http-server-mod-http2-race-condition-remote-code-executio-a251c1","CVE-2026-119618 | Apache HTTP Server mod_http2 Race Condition Remote Code Execution Vulnerability","2026-11-12T20:17:28+00:00","Apache HTTP Server mod_http2 race condition vulnerability allows RCE.",{"slug":92,"title":93,"published_at":94,"brief":95},"exploit-attempts-for-gpustack-authentication-bypass-cve-2026-102895-thu-nov-12th-f92924","Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)","2026-11-12T11:56:24+00:00","Exploit attempts targeting GPUStack authentication bypass vulnerability CVE-2026-102895 observed.",{"slug":97,"title":98,"published_at":99,"brief":100},"barracuda-confirms-active-exploitation-of-email-gateway-flaws-allowing-root-acce-05ecbd","Barracuda Confirms Active Exploitation of Email Gateway Flaws Allowing Root Access","2026-11-10T16:05:32+00:00","Barracuda confirms active exploitation of Email Security Gateway flaws enabling unauthenticated root access.",{"slug":102,"title":103,"published_at":104,"brief":105},"hackers-now-exploit-critical-barracuda-esg-flaws-to-gain-root-access-40f3a4","Hackers now exploit critical Barracuda ESG flaws to gain root access","2026-11-10T10:10:20+00:00","Barracuda warns of active exploitation of critical ESG vulnerabilities allowing root access.",{"slug":107,"title":108,"published_at":109,"brief":110},"experts-demonstrate-barracuda-email-security-gateway-chain-enabling-root-access-985aa6","Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login","2026-11-06T05:39:10+00:00","Two Barracuda ESG flaws chained for root access without login; patches released.",{"slug":112,"title":113,"published_at":114,"brief":115},"barracuda-esg-authentication-bypass-flaw-opens-path-to-root-2765c9","Barracuda ESG Authentication Bypass Flaw Opens Path to Root","2026-11-04T14:24:54+00:00","Barracuda ESG appliances vulnerable to root access via chained authentication bypass and command injection flaws.",{"slug":117,"title":118,"published_at":119,"brief":120},"php2shell-attacks-root-palo-alto-firewalls-but-fail-against-wordpress-a7785c","PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress","2026-10-30T15:09:25+00:00","China-linked hackers chain PHP2Shell CVEs with Fragnesia kernel bug to root Palo Alto firewalls",{"slug":122,"title":123,"published_at":124,"brief":125},"exploitation-attempts-against-recently-patched-oracle-ebs-flaw-have-begun-cve-20-1991cd","Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)","2026-10-29T13:12:24+00:00","Exploitation attempts for CVE-2026-101767, a critical Oracle EBS flaw, have begun.",[127,131,135,139,143,147],{"slug":128,"title":129,"published_at":130},"critical-apache-http2-race-condition-enables-unauthenticated-remote-code-execution","Critical Apache HTTP\u002F2 Race Condition Enables Unauthenticated Remote Code Execution","2026-11-12T21:20:53.405+00:00",{"slug":132,"title":133,"published_at":134},"gpustack-authentication-bypass-exploited-in-the-wild-patch-now","GPUStack Authentication Bypass Exploited in the Wild — Patch Now","2026-11-12T12:20:21.31+00:00",{"slug":136,"title":137,"published_at":138},"chained-auth-bypass-and-command-injection-grant-root-access-to-barracuda-email-gateways","Chained Auth Bypass and Command Injection Grant Root Access to Barracuda Email Gateways","2026-11-10T17:22:41.499+00:00",{"slug":140,"title":141,"published_at":142},"critical-barracuda-esg-flaws-exploited-for-root-access","Critical Barracuda ESG Flaws Exploited for Root Access","2026-11-10T11:21:23.607+00:00",{"slug":144,"title":145,"published_at":146},"critical-rce-vulnerabilities-in-check-point-vpn-products-demand-immediate-patching","Critical RCE Vulnerabilities in Check Point VPN Products Demand Immediate Patching","2026-10-31T10:23:27.089+00:00",{"slug":148,"title":149,"published_at":150},"critical-atlassian-flaw-exposes-files-to-unauthenticated-attackers","Critical Atlassian Flaw Exposes Files to Unauthenticated Attackers","2026-10-31T10:21:02.419+00:00",[152,155,159,163],{"slug":23,"name":153,"problem":154},"Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":156,"name":157,"problem":158},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",{"slug":160,"name":161,"problem":162},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.",{"slug":164,"name":165,"problem":166},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",{"palo-alto-networks\u002Fnext-generation-firewall":168,"fortinet\u002Ffortigate":186,"check-point\u002Fquantum-firewall":203,"sophos\u002Fsophos-firewall":221,"clavister\u002Fclavister-netwall":239,"cisco\u002Fsecure-firewall":244,"sonicwall\u002Fsonicwall-firewalls":261},{"hq_country":169,"also_provides":170,"reviews":171,"affected":184,"reported":185},"US",[],[172,175,178,181],{"label":173,"url":174},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":176,"url":177},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":179,"url":180},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",{"label":182,"url":183},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",22,43,{"hq_country":169,"also_provides":187,"reviews":188,"affected":201,"reported":202},[],[189,192,195,198],{"label":190,"url":191},"CyberRatings 2025 Q4 Enterprise Firewall Report: Fortinet follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-fortinet-follow-on\u002F",{"label":193,"url":194},"CyberRatings 2025 Q1 Cloud Network Firewall Report: Fortinet","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q1-cloud-network-firewall-report-fortinet\u002F",{"label":196,"url":197},"PeerSpot: Fortinet FortiGate user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Ffortinet-fortigate-reviews",{"label":199,"url":200},"Gartner Peer Insights: FortiGate Next-Generation Firewall user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Ffortigate-next-generation-firewall-2077436483",31,14,{"hq_country":204,"also_provides":205,"reviews":206,"affected":219,"reported":220},"IL",[],[207,210,213,216],{"label":208,"url":209},"AV-Comparatives EPR test 2026: Check Point","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_CheckPoint_2026.pdf",{"label":211,"url":212},"CyberRatings 2025 Q4 Enterprise Firewall Report: Check Point","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-check-point\u002F",{"label":214,"url":215},"Gartner Peer Insights: Check Point Quantum user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcheck-point-quantum",{"label":217,"url":218},"PeerSpot: Check Point Quantum Force (NGFW) user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcheck-point-quantum-force-ngfw-reviews",23,45,{"hq_country":222,"also_provides":223,"reviews":224,"affected":237,"reported":238},"GB",[],[225,228,231,234],{"label":226,"url":227},"AV-TEST: business results for Sophos","https:\u002F\u002Fwww.av-test.org\u002Fen\u002Fantivirus\u002Fbusiness-windows-client\u002Fmanufacturer\u002Fsophos\u002F",{"label":229,"url":230},"SE Labs enterprise endpoint test Apr-Jun 2026: Sophos Endpoint Security","https:\u002F\u002Fselabs.uk\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fsecurity-evaluation-test-report-enterprise-sophos-endpoint-security-2026-07-factsheet.pdf",{"label":232,"url":233},"ITPro: Sophos Firewall Virtual review (2024)","https:\u002F\u002Fwww.itpro.com\u002Fsecurity\u002Fsophos-firewall-virtual-review-affordable-network-protection-for-those-that-like-it-virtualized",{"label":235,"url":236},"Gartner Peer Insights: Sophos Endpoint user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fsophos-endpoint",1,11,{"hq_country":240,"also_provides":241,"reviews":242,"affected":243,"reported":243},"SE",[],[],0,{"hq_country":169,"also_provides":245,"reviews":246,"affected":259,"reported":260},[],[247,250,253,256],{"label":248,"url":249},"CyberRatings 2025 Q3 SSE Report: Cisco","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q3-sse-report-cisco\u002F",{"label":251,"url":252},"Gartner Peer Insights: Cisco Secure Firewall user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcisco-secure-firewall",{"label":254,"url":255},"PeerSpot: Cisco Secure Firewall user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcisco-secure-firewall-reviews",{"label":257,"url":258},"CyberRatings 2025 Q4 Enterprise Firewall Report: Cisco","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-cisco\u002F",65,41,{"hq_country":169,"also_provides":262,"reviews":263,"affected":270,"reported":237},[],[264,267],{"label":265,"url":266},"Gartner Peer Insights: SonicWall NSa Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fsonicwall-network-security-appliance",{"label":268,"url":269},"PeerSpot: SonicWall NSa user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fsonicwall-nsa-reviews",28]