Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)Network SecurityMedium
A network security engineer is designing a secure network for a new branch office. The design includes a firewall that will inspect traffic at multiple layers of the OSI model, performing deep packet inspection and maintaining stateful connections. This firewall will also be capable of identifying and blocking application-specific attacks. Which type of firewall is being described?
- APacket-filtering firewall
- BNext-Generation Firewall (NGFW)
- CApplication-layer gateway (Proxy firewall)
- DCircuit-level gateway
Show answer & explanationAnswer & explanation
Correct answer: B. Next-Generation Firewall (NGFW)
The description 'inspect traffic at multiple layers of the OSI model,' 'deep packet inspection,' 'maintaining stateful connections,' and 'identifying and blocking application-specific attacks' are all hallmarks of a Next-Generation Firewall (NGFW).
Why the other options are wrong
- A. Packet-filtering firewalls operate at network/transport layers, not application-specific attacks.
- C. While proxy firewalls inspect at the application layer, NGFWs combine this with broader capabilities including deep packet inspection and stateful inspection across layers.
- D. Circuit-level gateways operate at the session layer and don't inspect application data.
Next-Generation Firewall (NGFW)
A deep-packet inspection firewall that moves beyond port/protocol inspection and blocking to add application-level inspection, intrusion prevention, and intelligence from outside the firewall.
- Operates across multiple OSI layers, including application layer.
- Incorporates Intrusion Prevention System (IPS) functionality.
- Provides application awareness and control, and often identity awareness.
Memory trick: Firewalls evolved from simple gates to smart guardians.