The firewall application control on all the appliances in the range allows you to automatically identify applications thanks to an effective and dynamic connection content scan, which is based on more than just static elements (e.g. the destination port). You will therefore be able to create your security policy by taking into account the applications you wish to allow or block. Gartner’s analysts consider this feature the foundation of what they call the "Next-Generation Firewall”.

NETASQ firewalls allow you to very easily insert users or user groups directly into an authorization rule. As such, you can quickly create an application policy that reflects the organization of your company.

NETASQ is the only security solution that offers much more than just the simple detection of applications. NETASQ Vulnerability Manager informs you in real time of risks involved in running a certain application. In a few clicks, you can define customized alerts according to the risk level and type of application. You can therefore spread out the task of monitoring your applications more efficiently.

Web browsers have become complex applications that are able to interpret JavaScript code in cloud-hosted applications. This complexity comes at a price. Every year, the major browsers on the market fall prey to security flaws that can allow the execution of malicious code on targeted workstations.

Thanks to its expertise in application recognition technology, NETASQ’s Next-Generation firewalls do not only allow or block applications. NETASQ’s technology also protects you from attacks encapsulated in these complex application traffic packets.

For example, JavaScript code in web-based applications is inspected in real time by the application intrusion prevention engine. Many attack and escape techniques are recognized and the detection of attacks is not restricted to known attacks. Abnormal application behavior is isolated and malicious code is deleted without disrupting legitimate browsing . And thanks to SSL traffic inspection, your network perimeter will be fully protected.

NETASQ’s application inspection is part of the application-based intrusion prevention engine and is carried out in real time without the need to turn to the costly use of proxy technology. Highly advanced techniques for temporarily desynchronizing the traffic guarantee that all traffic is analyzed without affecting user experience.