Zero Overview
Firewall-based solutions have had mixed success over the years. What is called a next-generation firewall today is simply a suite of security applications running on a system that was designed to block network traffic. Each time you read the words block network traffic, it should become more painful and confusing. Blocking network traffic implies layer three communications or, more specifically traffic, on just one layer, the network. The issue with blocking network traffic is the fact that our attack surface is across all layers of the Open Systems Interconnection (OSI) model, across every protocol. For this reason, firewalls are not effective protection against almost any threat. The effectiveness of firewall services on the market is based on the additional services or features they build into or around the actual firewall service.
A new model had to be created. Previous attempts to solve security issues have had limited traction on the market, due to skill, cost...