NGFW

[Matthew_1]

Hi all

Just need a clarification regarding that the NGFW contains the IDS engine or just the threat management.

Coz i am just confused whether the firewall has IDS and threat management or just threat management.

Thanks for your help in advance

[M02@rt37]

Hello @Matthew_1,

Threat management refers to the broader concept of managing and mitigating various security threats and risks. This includes not only intrusion detection but also other security measures like antivirus, anti-malware, URL filtering, application control, sandboxing, and more...

In the context of NGFW, it is common to find IDS capabilities as part of the threat management features. The NGFW can perform intrusion detection by analyzing network traffic for signs of potential attacks and then take action to block or prevent such threats.

It's by definition, then it depend also of the constructor/brand.