Forcepoint NextGeneration Firewall (NGFW)

Forcepoint NGFW delivers consistent security, performance and performance across physical, virtual and cloud systems. It is designed from the ground up for high availability and scalability, as well as centralized management with full 360° visibility.

Highest NGFW rating and secure SD-WAN

Blocking 100% evasion attempts and 100% exploits, Forcepoint Cloud Network Firewall received a AAA rating in CyberRatings testing.

With Forcepoint NGFW, companies get:

• Centralized management – Ability to manage a large number of firewalls and firewall fleets at any scale without compromising performance.
• Management – Ease of management, granularity of controls, and scalability of management capabilities.
• Security Performance – Evaluation of blocking rate, IP packet fragmentation / TCP segmentation, false positive testing, stability, reliability and web filtering for QUIC & HTTP / 3.
• Integration with SASE – SD-WAN, site connection to security edge server via GRE and IPsec, built-in ZTNA application connector.
• Protection against circumvention attempts – Assesses the ability to protect against circumvention, HTTP circumvention, and a combination of circumvention methods.
• Value – Based on total cost of ownership (TCO)/Mbps over a 3-year period.

Do more with less with Forcepoint’s next-generation firewall

• Increased security with fewer disruptions

Built-in Secure SD-WAN, zero-trust network access control and the ability to enforce unified policies across the globe with a single click allows your team to manage and maintain a secure network at any scale.

• Stay ahead of violations by reducing your exposure

With a single central console, you get 360-degree visibility to quickly identify risks. And industry-leading, integrated intrusion detection and prevention helps reduce them before they become a problem.

• Lower Total Cost of Ownership (TCO)

Reduce unnecessary tasks. With advanced automation, you can get updates and upgrades on your schedule. Plus, with a single management console, you can make changes on a global scale.

• Deploy anywhere (branch offices, headquarters, cloud)

Wide range of physical and virtual device models makes it easy to automate, orchestrate and accelerate network architecture – remotely and at scale.

• Hybrid environment support, SASE and cloud support

Designed as software rather than hardware, NGFW provides flexibility for deployment on devices, virtually or in the cloud. Open APIs allow you to customize automation and orchestration to your own requirements. Integration with Forcepoint ONE Security Service Edge makes it easy to connect private applications to Zero Trust Network Access (ZTNA).

• Direct connection to the cloud with Secure SD-WAN

Secure and efficient combination of broadband and MPLS private channels to connect offices, branch offices and remote sites to business resources in the cloud or internal data centers.

• Tested continuously in the real world

Our products regularly undergo rigorous certification testing to meet the stringent requirements of sensitive and critical industries, institutions, organizations and governments worldwide.

Key benefits

Always-on SD-WAN connectivity for the enterprise

Today’s businesses demand fully resilient network security solutions. Forcepoint Next Generation Firewall(NGFW) builds in high scalability and availability at all levels:

• Active-active, mixed clustering. Up to 16 nodes of different models running different versions can beclustered together. This provides superior networking performance and resilience, and enables security such as deep packet inspection and VPNs.
• Seamless policy updates and software upgrades. Forcepoint’s industry-leading availability enables policy updates (and even software upgrades) to be seamlessly pushed to a cluster without interrupting service.
• SD-WAN network clustering. Extends high-availability coverage to network and VPN connections.Combines nonstop security with the ability to take advantage of local broadband connections in order to complement or replace expensive leased lines like MPLS.