NSS Labs: Palo Alto Networks’ Next-Gen Firewalls Block 93.4% of Threats

As you probably know, last year Gartner recommended that enterprises migrate from stand-alone IPS to next-generation firewalls for performing IPS functions. While this advice made intuitive sense based on the tight relationship between apps and threats, there was nevertheless a lack of empirical evidence to confirm that a next-generation firewall could actually stand up to the challenge of being a true IPS – until now.

NSS Labs, the world's largest security and performance testing lab, have recently completed in-depth IPS testing of the Palo Alto Networks' next-gen firewall.  Our solution was tested against 1,179 live exploits in what was the industry's most comprehensive IPS test to date.  The results were crystal clear and provided the hard proof of what our next-generation firewalls can really do. Key results include:

• The highest IPS block rate in recent history (93.4%)
• 100% resistance to IPS evasion techniques
• Simple IPS configuration and tuning
• Provided all the above while exceeding the datasheet performance metrics by 115%

Download the full report from NSS Labs.


Regards,

Scott Chambers - Palo Alto Networks
Palo Alto Networks
232 E. Java Drive
Sunnyvale, CA 94089
408-738-7703