The primal contest between computer user security and the external threat environment will shift with next generation firewalls. Significantly upgraded over the previous state-of-the-art, next-gen firewalls offer improved visibility into the contemporary Web-based network landscape and a much-enhanced capacity to detect advanced threats. But is this truly a generational performance enhancement, or just the same ol’ technology with an added dash of marketing magic? Let’s take a closer look. Traditional firewall performance includes stateful port/protocol inspection, network address translation (NAT), and virtual private network (VPN) integration. Typical services also include directory support (via Active Directory or similar) that authenticates and authorizes applications based on users and user groups. Also common is reputation-based filtering blocks applications that have earned a rep for naughty behavior. This helps discourage phishing attempts, virus infiltration, and additional malware sites and applications. Regardless of the vendor, next-gen firewalls include the following features: Application ID & filtering: This area is where next-gen firewalls really make a difference. Instead of the traditional all-or-nothing port opening approach, next-gen firewalls scan and filter traffic based upon the specific applications. Malicious applications that use non-standard ports to spoof countermeasures can be stopped dead in their tracks. SSL and SSH inspection: Enhanced inspection technology means next-gen firewalls can put SSL and SSH encrypted traffic under the microscope. Decrypted traffic is inspected, filtered, and then re-encrypted. Advanced malicious apps that utilize encryption as a detection countermeasure are no longer a threat. Intrusion prevention: Enhanced versatility and robust traffic inspection abilities provide all the functionality of a stand-alone intrusion prevention system. Most next-gen firewalls include full intrusion detection and prevention capability. In short, next-gen firewalls blend a full-service suite of performances – firewall, intrusion prevention, and additional security capabilities – into a single, efficient, high-performance appliance. The move...
Let’s Get Technical...
New YASC offering
Outside of ComicCon, geeking out will typically just garner a few confused looks and questioning tones from those you have inadvertently alienated with your techy banter. But this spring at the Yardi Advanced Solutions* (YASC) you’ll be pleased to know that even the most technical talk will be met with understanding and inspire new-found possibility. Along with the numerous training sessions and social interactions at YASC this year, you’ll also find a new event: Tech Time. Instituted by Sr. VP of ASP Scott Wiener and Director of ASP Remon Amboy, Tech Time grew from a simple “Can my IT team talk to yours?” inquiry from a client a few years back into a full blown opportunity for you to sit and talk through your questions with our experienced professionals in a one-on-one environment. Thinking of rolling out virtualization and not sure where to start? Can’t decide between iPads and Kindles? Want to talk firewalls? Whether you’re a CIO who is curious about how we secure the environment or an end user who wants to know how the environment works, this is your chance for one-on-one consultation about case studies, cloud computing, or infrastructure requirements. If you are interested in a little byte-bonding or perhaps just looking for an excuse to break away, make an appointment by contacting [email protected]. *The Spring YASC 2012 — May 22-24, in Washington, D.C. is now open for registration. The conference provides information about the latest updates to your Yardi products and services, as well as opportunities to meet with CSD representatives, IT staff, senior management and sales...