Enterprise Network Firewalls are standalone, purpose-built firewall systems with IPSec VPN features, capable of providing robust firewall and perimeter access control functionality. Enterprise firewalls also incorporate IPS technologies which also replace perimeter IPS. These firewalls, also known as Next-Generation Firewalls (NGFWs), have additional integration with more applications and user awareness protection capabilities.

However, the enterprise network firewall sector is still comprised predominantly of purpose-built appliances to protect enterprise corporate networks, while more significant are virtual appliances in the public and private cloud and highly virtualized data centers. Market products must be in a position to support single enterprise firewall deployments and large and/or complex deployments. These include traditional “big firewall” placements of data centers, multitiered demilitarized zones, branch offices, and, increasingly, virtual versions for the data center and various cloud environments. Customers should be given the option of deploying versions within public cloud environments such as Microsoft Azure, Google Cloud, and Amazon Web Services.

Enterprise Network Firewall – Gartner magic quadrants

Through the last few years, network firewall technology has evolved enormously by adding new features and enhancing existing ones. Firewalls are developing into network security platforms with firewall vendors embedding numerous security features in firewalls and allowing convergence and automation capabilities with other security products.

The descriptions of some of the best Network firewall solution are as follows:

Fortinet FortiGate: Next-Generation Firewall (NGFW)

FortiGate NGFWs allow security-driven networking and integrate industry-leading security technologies such as the framework for intrusion prevention, web filtering, secure sockets layer (SSL) inspection, and automatic threat protection. Fortinet NGFWs fulfill the performance needs of highly flexible, hybrid IT architectures that enable enterprises to reduce complexity and handle security risks. FortiGate NGFWs, powered by FortiGuard Labs guided by AI, provide proactive threat protection with high-performance inspection of both clear-text and encrypted traffic (including the latest industry encryption standard TLS 1.3) to stay ahead of the rapidly expanding threat environment. FortiGate NGFWs track traffic as it enters and exits the network. These inspections occur at an unparalleled speed, scale, and efficiency and prevent anything from malware to DDoS attacks, without compromising user experience or causing unnecessary and costly downtime. In a multivendor scenario, FortiGate NGFWs can interact as an integral part of the Fortinet Security Framework within the robust Fortinet security portfolio as well as third party security solutions. They exchange threat intelligence and enhance the security posture and streamlined workflow to accelerate the pace of operations and response.

https://www.fortinet.com/products/next-generation-firewall

Palo Alto Networks: Next-Gen Firewall

Gartner placed Palo Alto in the quadrant of Leaders and awarded it one of the high spots in its Magic Quadrant for enterprise network firewalls. These next-generation firewalls are running on their PAN-OS and classify all traffic based on application, application function, user, and content, including encrypted traffic. Models range between the low-end PA-200 and the high-end PA-7000. The firewalls combine policy enforcement and cyberthreat prevention through the company’s sandboxing features Content-ID and WildFire. Content-ID limits unauthorized transfer of data, and blocks threats. Using static and dynamic analysis in a virtual environment, WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs). It instantly or in near-real-time spreads updated protections globally. The Application Command Center includes the visibility of SaaS applications that have been licensed or not licensed. It, combined with automatic event aggregation and filtering and drill-down solutions, enables understanding of application flows and associated risks. Some key features are:

• Implementation: It is easy to install and configure.
• Security and Performance: Provides top security and performance.
• Pricing: Very good pricing, as the price is always the reason prospective customers look elsewhere, especially in dispersed organizations.
• Management: Some complexity but users prefer the rich features of the app. Among its many strengths are management features, program flexibility, sandboxing, and small branch office options.
• Cloud Support and Features: Palo Alto is better than average in an area where many firewall vendors are lagging, with virtual firewall offerings, and public and private cloud support.

https://www.paloaltonetworks.com/network-security/next-generation-firewall

https://www.paloaltonetworks.com/products/secure-the-network/next-generation-firewall/pa-200

Check Point Next-Generation Firewall

The enterprise network security solutions from Check Point provide a comprehensive security architecture with flexible enforcement points for advanced protection against the latest cyberattacks. Gateways at checkpoints have superior protections above any Next-Generation Firewall (NGFW). Ideally designed to secure Sandblast Network, with more than 60 creative security tools, these gateways are the strongest to combat the fifth generation of cyber-attacks. The new Quantum Security Gateway portfolio of 15 models, built on the Infinity Architecture, can provide up to 1.5 Tbps of performance in threat prevention and can scale on demand. Next-Generation Firewalls focuses on blocking malware and attacks on the application layer. With more than 60 security services powered by the ThreatCloud, the most powerful shared cloud intelligence service in the world, Quantum security gateways can react quickly and seamlessly to prevent known and unknown cyber-attacks across the entire network. Such gateways implement policies to help protect the network and perform fast tests to prevent disruptive or malicious activities, such as unknown malware. It offers uncompromising security and delivers out of the box, highest-caliber attack detection with award-winning protection through SandBlast Network Zero Day. Hyperscale performance with on-demand threat prevention offers cloud-level expansion and on-premise resilience for enterprises. With R80.40 unified management monitoring across networks, clouds and IoT improves security operations efficiency by up to 80 percent.

https://www.checkpoint.com/products/next-generation-firewall/

CISCO ASA and FirePower

Cisco offers the first threat-focused next-generation firewall in the industry: Cisco ASA with FirePOWER services available on the Cisco ASA 5500-X Series and ASA 5585-X Adaptive Security Appliances. With these solutions, you get validated firewall security from Cisco ASA, combined with the industry-leading threat from Sourcefire and powerful malware protection in a single device. You can protect your business throughout the entire continuum of attack with superior visibility and highly effective, threat-focused defense. It offers broad visibility, reduced expense and complexity, and protection against ransomware and evolving threats in real-time. Cisco ASA 5500-X Next-Generation Firewalls series help you align safety performance with productivity. This technology provides the convergence of the industry’s most-deployed state-of-the-art firewall with a broad variety of network security capabilities of the next decade including:

• Visibility and control  at the granular level
• Robust on-site or in the cloud Web security
• Leading industrial intrusion prevention (IPS) system to defend against known threats
• Comprehensive Threat and Advanced Malware protection
• World’s most widely used ASA firewall, with highly secure remote access to the Cisco AnyConnect

It offers multiscale output security for networks of all sizes, including a wide variety of shape factors. Next-generation Cisco ASA 5500-X Series Firewalls are available as:

• Standalone appliances made to suit small and medium-sized enterprises
• Rugged appliances designed in industrial or critical infrastructure environments for extended temperature ranges
• Mid-size enterprise appliances improve security on the Internet edge
• High-performance and throughput devices for demanding enterprise data centers
• High output blades combined with the Switches of the Cisco Catalyst 6500 Series
• Virtual instances to secure private and public cloud at enterprise-class

https://www.cisco.com/c/en/us/products/security/asa-firepower-services/index.html

Sophos XG Firewall

Gartner has named Sophos a Visionary in the Network Firewall Magic Quadrant for 2019, that confirms Sophos XG Firewall as one of the best next-generation firewalls on the market. Sophos XG Firewall presents an innovative approach to the way you operate or  manage the firewall, and how you can identify threats and respond to them in your network. Comprehensive firewall protection of the next generation was built to expose hidden risks, block both known and unknown threats and respond automatically to incidents. Sophos XG Firewall offers unrivaled visibility of unsafe apps, unidentified and unauthorized applications, malicious attacks, malicious payloads, encrypted data and more. Rich on-box reporting is embedded, and powerful centralized monitoring is available in the cloud for various different firewalls. Sophos XG Firewall offers state-of-the-art technology to protect network against ransomware and advanced threats including top-rated IPS, Advanced Threat Protection, Cloud Sandboxing, full AI-powered threat analysis, Dual AV, Web and App Control, Email Protection and a full-featured Web Application Firewall. Its set-up and management is easy. XG Firewall is the only network security solution capable of fully identifying the source of an infection on your network and automatically limiting access in response to other network resources. With unique Sophos Security Heartbeat it is possible to share telemetry and health status between Sophos endpoints and your firewall.

https://www.sophos.com/en-us/products/next-gen-firewall.aspx