A next-generation firewall (NGFW) is a device that offers additional capabilities beyond traditional firewall functionality. Traditional firewalls may offer stateful packet inspection while a NGFW may provide integrated IDS/IPS functionality, for example.

The ability of a single device to perform multiple functions can be cost effective and may not require additional in-house expertise to support the technology. A drawback of using an NGFW is that it could become a single point of failure.

Assume you are in charge of deciding which types of firewalls to acquire and implement for an organization.

Answer the following question(s):

Would you choose an NGFW for a small business? Why or why not?

Would you choose an NGFW for a large organization? Why or why not?