Focus on the new trend of firewall technology

Firewall is now the most mature network security technology, but also the market's most common network security products. Google a "firewall" on the Internet, find 2.54 million matches; Google "Firewall" and find 44.2 million matches. It can be imagined that the firewall data as much as the ocean. In the face of so much information, want to say to the firewall, it is not easy. At present, network intrusion, network attack, network virus, spam, network trap, Web page has been tampered with too much news, so that the public to "Wolf" has been numb, no response. Numerous firewall vendors, a dazzling array of firewall products, a wide range of new firewall technology, full of network security sector. Now the network security industry, not users have any problems, but manufacturers have problems. Firewall technology has matured, for the majority of users recognized, but the firewall problems are exposed, but also very serious. Users are now looking at firewall vendors to see what they do. One of the information Center's boss in a security meeting to challenge, said, I have bought a lot of firewalls, do not follow me to empty, and I said something new things. Now there is no shortage of funds, there is nothing useful.

What is the problem with firewall technology now? What does the user really want?

1. Look down, don't look up.

The industry's popular view is that high-performance firewalls are the future trend of the firewall. The high performance firewall is simply the firewall hardware structure without X86. And for high-end firewall technology implementation, nothing more than based on NP technology or ASIC chip technology. NP forwards and processes data at the bottom of the network and can be developed two times, but the performance is almost the same as ASIC. ASIC technology is difficult and difficult to develop, but the performance is better. NP and ASIC have not finished arguing, some smart manufacturers have found the know-how, the introduction of Np+asic integrated solutions, finally found the "best" collocation scheme. As for the industrial computer architecture, a discerning eye to see, to engage in NP and ASIC people together, said it performance is not good, say more let it out.

What is the real situation? What is the user's security or speed? Security and speed are a pair of contradictions. In the event of a safety accident, it is safer to be slow than fast. In the event of a collision, it is safer to ride a bicycle than to ride a bicycle than to drive a car, and to drive a car is better than to take a plane. There is no safety accident, of course, the higher the efficiency the better, can take the rockets of course not to fly. In this sense, if you choose a router, of course, speed and efficiency, if you are a safety device, if you are a security officer, choose Slow, do not choose fast. Security always takes time to deal with, the faster and more efficient, the more hopeless the accident occurs. When the space shuttle came down, he was unable to find the figure, and the plane crashed, and there was a figure, which was incomplete; two of people walk collided, angry return to angry, but basically will not be a problem.