Perimeter we propose Next Generation Firewalls (NGFW) which secures internal networks from external attacks. NGFWs provide functions like deep-packet inspection, intrusion prevention (IPS), advanced malware detection, application control, and overall increased network visibility through inspection of encrypted traffic. Some of the key features of NGFW are;

• Blocking threats at the network edge

• Prevents attacks from accessing the network by using sandboxing, URL filtering and analyzing behavior to detect and deal with threats such as malware, ransomware and SQL injection.

• Geolocation

• Correlates between IP address and physical locations to restrict location-based access or direct traffic towards specific servers.

• Reverse proxy / web gateway

• Offers a proxy that terminates connections, including encrypted HTTPS sessions, and forward the content to a web server after inspecting it.

• Intrusion Detection and Prevention Systems (IDS/IPS)

• Detects and prevents system intrusions based on known signatures or generic attack forms to stop known attacks.