{"id":2877,"date":"2024-04-03T16:16:19","date_gmt":"2024-04-03T21:16:19","guid":{"rendered":"https:\/\/www.darkreading.com\/cloud-security\/cyberratings-org-announces-test-results-for-cloud-network-firewall"},"modified":"2024-04-03T16:16:19","modified_gmt":"2024-04-03T21:16:19","slug":"cyberratings-org-announces-test-results-for-cloud-network-firewall","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/04\/03\/cyberratings-org-announces-test-results-for-cloud-network-firewall\/","title":{"rendered":"CyberRatings.org Announces Test Results for Cloud Network Firewall"},"content":{"rendered":"
<\/a><\/div>\n
<\/div>\n

PRESS RELEASE<\/span><\/span><\/p>\n

Austin, TX \u2013 April 3, 2024 <\/span><\/span>\u2013 CyberRatings.org (CyberRatings), the non-profit entity dedicated to providing confidence in cybersecurity products and services through its research and testing programs, has completed an independent test of eleven market leading Cloud Network Firewall vendors. Six products were Recommended, one product received a Neutral rating, and four received a Caution rating.<\/span><\/p>\n

Cloud network firewalls are considered to be the first line of defense when deployed in public cloud providers such as Amazon Web Services, Google Cloud Platform and Microsoft Azure. But implementing security in the cloud can be complex, with multiple factors influencing effectiveness. <\/span><\/p>\n

CyberRatings tested the cloud firewall products to determine how they handled TLS\/SSL (authentication) 1.2 and 1.3 cipher suites (algorithms), how they defended against 984 exploits (attacks that take advantage of a software flaw or install malware), and whether any of 1,645 evasions could bypass protection. At all times the devices needed to remain stable under adverse conditions. To provide a more realistic rating based on modern network traffic, both clear text (HTTP) and encrypted traffic (HTTPS) were measured. Amazon Web Services (AWS) was the public cloud service chosen to run the test.<\/span><\/p>\n

The combination of Security Effectiveness and Value dictated where products landed on the Security Value Map\u2122 (SVM). Six out of the eleven products were Recommended for their Security Effectiveness with scores ranging from 99.70% to 100%. Recommended ratings are based on threat prevention (how many exploits and evasions were blocked?), TLS\/SSL functionality, routing and policy enforcement, and stability and reliability to achieve a final Security Effectiveness score. These same products also demonstrated competitive pricing in the Total Cost per Protected Mbps (Value). The product rated Neutral received a 48.44% Security Effectiveness score. Four products rated Caution had Security Effectiveness scores ranging from 5.39% to 48.37%. <\/span><\/p>\n

\u201cWe have been testing firewalls for years, and more recently cloud network firewalls,\u201d said Vikram Phatak, CEO of CyberRatings.org. \u201cAll of the products chosen were market leaders and the range of scores clearly shows that building a product for the cloud is different than building a product on an appliance where you control the environment,\u201d said Phatak. \u201cWe recommend that enterprises check with their service providers or IT teams to see which cloud firewall products are currently deployed in their networks.\u201d<\/span><\/p>\n

As part of the cloud firewall test, CyberRatings also checked to see if products were secure by default. It was discovered that some firewall evasion defenses are not on by default, potentially leaving customers at significant risk. In response, CyberRatings is providing a policy and configuration guide to help enterprises ensure that their firewalls are configured properly.<\/span><\/p>\n

Encryption matters: roughly 80% of web traffic is encrypted. The top four cipher suites account for over 95% of HTTPS traffic. In some products, decryption was not on by default. Firewalls will not see attacks delivered via HTTPS unless configured to do so. Performance is significantly different when TLS\/SSL is turned on. With the exception of one vendor that failed to handle TLS 1.3 despite claiming support, all other vendors supported encryption. <\/span><\/p>\n

Enterprises should monitor security and performance capabilities, and update firewalls regularly. With the everchanging cloud platform and agile development, something can go wrong even when the security vendor does not make a change. <\/span><\/p>\n

The following products were evaluated:<\/span><\/p>\n

\n\n<\/thead>\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n
\n

Cloud Network Firewall<\/span><\/p>\n<\/div>\n<\/td>\n

<\/td>\n\n
\n

Security<\/span><\/p>\n

Effectiveness<\/span><\/p>\n<\/div>\n<\/td>\n

\n
\n

Rated Throughput<\/span><\/p>\n

(Mbps)<\/span><\/p>\n<\/div>\n<\/td>\n

\n
\n

Price per Protected Mbps<\/span><\/p>\n<\/div>\n<\/td>\n<\/tr>\n

\n
\n

Amazon Web Services (AWS) Network Firewall<\/span><\/p>\n<\/div>\n<\/td>\n

<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
\n
\n

Barracuda CloudGen Firewall<\/span><\/p>\n<\/div>\n<\/td>\n

<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
\n
\n

Check Point CloudGuard<\/span><\/p>\n<\/div>\n<\/td>\n

\n
\n

Recommended<\/span><\/p>\n<\/div>\n<\/td>\n

<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
\n
\n

Cisco Secure Firewall Threat Defense Virtual <\/span><\/p>\n<\/div>\n<\/td>\n

<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
\n
\n

Forcepoint NGFW<\/span><\/p>\n<\/div>\n<\/td>\n

\n
\n

Recommended<\/span><\/p>\n<\/div>\n<\/td>\n

<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
\n
\n

Fortinet FortiGate-VM<\/span><\/p>\n<\/div>\n<\/td>\n

\n
\n

Recommended<\/span><\/p>\n<\/div>\n<\/td>\n

<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
\n
\n

Juniper Networks vSRX<\/span><\/p>\n<\/div>\n<\/td>\n

\n
\n

Recommended<\/span><\/p>\n<\/div>\n<\/td>\n

<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
\n
\n

Palo Alto Networks VM-Series Next-Generation Firewall w\/ Advanced Threat Prevention<\/span><\/p>\n<\/div>\n<\/td>\n

\n
\n

Recommended<\/span><\/p>\n<\/div>\n<\/td>\n

<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
\n
\n

Sophos Firewall<\/span><\/p>\n<\/div>\n<\/td>\n

<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
\n
\n

Versa Networks NGFW<\/span><\/p>\n<\/div>\n<\/td>\n

\n
\n

Recommended<\/span><\/p>\n<\/div>\n<\/td>\n

<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
\n
\n

WatchGuard Firebox Cloud<\/span><\/p>\n<\/div>\n<\/td>\n

<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

Additional Resources:<\/span><\/span><\/p>\n

Cloud Network Firewall Comparative Report and Test Reports<\/a><\/span><\/p>\n

2024 Best Practices for Cloud Network Firewall Deployment<\/a><\/span><\/p>\n

Exploring the Landscape of Cloud Network Firewalls Available on AWS<\/a><\/span><\/p>\n

Why Firewalls Should be Secure by Default<\/a><\/span><\/p>\n

About CyberRatings.org<\/span><\/span>\u202f<\/span><\/p>\n

CyberRatings.org is a 501(c)6 non-profit organization dedicated to providing confidence in cybersecurity products and services through our research and testing programs. We provide enterprises with independent, objective ratings of security product efficacy to make informed decisions. To become a member,\u202fvisit\u202f<\/span>www.cyberratings.org<\/a><\/span> and follow us on LinkedIn.<\/span><\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

PRESS RELEASE Austin, TX \u2013 April 3, 2024 \u2013 CyberRatings.org (CyberRatings),<\/p>\n","protected":false},"author":12,"featured_media":2878,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[809],"class_list":["post-2877","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-dark-reading"],"featured_image_urls":{"full":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/cyberratings-org-announces-test-results-for-cloud-network-firewall.png?fit=3840%2C2160&ssl=1",3840,2160,false],"thumbnail":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/cyberratings-org-announces-test-results-for-cloud-network-firewall.png?resize=150%2C150&ssl=1",150,150,true],"medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/cyberratings-org-announces-test-results-for-cloud-network-firewall.png?fit=300%2C169&ssl=1",300,169,true],"medium_large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/cyberratings-org-announces-test-results-for-cloud-network-firewall.png?fit=640%2C360&ssl=1",640,360,true],"large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/cyberratings-org-announces-test-results-for-cloud-network-firewall.png?fit=640%2C360&ssl=1",640,360,true],"1536x1536":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/cyberratings-org-announces-test-results-for-cloud-network-firewall.png?fit=1536%2C864&ssl=1",1536,864,true],"2048x2048":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/cyberratings-org-announces-test-results-for-cloud-network-firewall.png?fit=2048%2C1152&ssl=1",2048,1152,true],"chromenews-featured":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/cyberratings-org-announces-test-results-for-cloud-network-firewall.png?fit=1024%2C576&ssl=1",1024,576,true],"chromenews-large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/cyberratings-org-announces-test-results-for-cloud-network-firewall.png?resize=825%2C575&ssl=1",825,575,true],"chromenews-medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/cyberratings-org-announces-test-results-for-cloud-network-firewall.png?resize=590%2C410&ssl=1",590,410,true]},"author_info":{"display_name":"Dark Reading","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/darkreading\/"},"category_info":"Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","jetpack_featured_media_url":"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/cyberratings-org-announces-test-results-for-cloud-network-firewall.png?fit=3840%2C2160&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/2877","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=2877"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/2877\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media\/2878"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=2877"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=2877"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=2877"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}