PRESS RELEASE
Austin, TX – April 3, 2024 – CyberRatings.org (CyberRatings), the non-profit entity devoted to offering confidence in cybersecurity services and products by means of its analysis and testing applications, has accomplished an impartial check of 11 market main Cloud Community Firewall distributors. Six merchandise had been Beneficial, one product acquired a Impartial ranking, and 4 acquired a Warning ranking.
Cloud community firewalls are thought of to be the primary line of protection when deployed in public cloud suppliers equivalent to Amazon Internet Companies, Google Cloud Platform and Microsoft Azure. However implementing safety within the cloud will be complicated, with a number of elements influencing effectiveness.
CyberRatings examined the cloud firewall merchandise to find out how they dealt with TLS/SSL (authentication) 1.2 and 1.3 cipher suites (algorithms), how they defended towards 984 exploits (assaults that make the most of a software program flaw or set up malware), and whether or not any of 1,645 evasions may bypass safety. Always the units wanted to stay steady beneath hostile circumstances. To supply a extra life like ranking based mostly on trendy community visitors, each clear textual content (HTTP) and encrypted visitors (HTTPS) had been measured. Amazon Internet Companies (AWS) was the general public cloud service chosen to run the check.
The mix of Safety Effectiveness and Worth dictated the place merchandise landed on the Safety Worth Map™ (SVM). Six out of the eleven merchandise had been Beneficial for his or her Safety Effectiveness with scores starting from 99.70% to 100%. Beneficial scores are based mostly on risk prevention (what number of exploits and evasions had been blocked?), TLS/SSL performance, routing and coverage enforcement, and stability and reliability to attain a ultimate Safety Effectiveness rating. These identical merchandise additionally demonstrated aggressive pricing within the Complete Value per Protected Mbps (Worth). The product rated Impartial acquired a 48.44% Safety Effectiveness rating. 4 merchandise rated Warning had Safety Effectiveness scores starting from 5.39% to 48.37%.
“We now have been testing firewalls for years, and extra not too long ago cloud community firewalls,” stated Vikram Phatak, CEO of CyberRatings.org. “All the merchandise chosen had been market leaders and the vary of scores clearly exhibits that constructing a product for the cloud is completely different than constructing a product on an equipment the place you management the atmosphere,” stated Phatak. “We advocate that enterprises test with their service suppliers or IT groups to see which cloud firewall merchandise are presently deployed of their networks.”
As a part of the cloud firewall check, CyberRatings additionally checked to see if merchandise had been safe by default. It was found that some firewall evasion defenses aren’t on by default, probably leaving prospects at important threat. In response, CyberRatings is offering a coverage and configuration information to assist enterprises be sure that their firewalls are configured correctly.
Encryption issues: roughly 80% of internet visitors is encrypted. The highest 4 cipher suites account for over 95% of HTTPS visitors. In some merchandise, decryption was not on by default. Firewalls is not going to see assaults delivered by way of HTTPS except configured to take action. Efficiency is considerably completely different when TLS/SSL is turned on. Excluding one vendor that did not deal with TLS 1.3 regardless of claiming help, all different distributors supported encryption.
Enterprises ought to monitor safety and efficiency capabilities, and replace firewalls usually. With the everchanging cloud platform and agile growth, one thing can go incorrect even when the safety vendor doesn’t make a change.
The next merchandise had been evaluated:
|
Amazon Internet Companies (AWS) Community Firewall |
||||
|
Barracuda CloudGen Firewall |
||||
|
Cisco Safe Firewall Menace Protection Digital |
||||
|
Palo Alto Networks VM-Collection Subsequent-Era Firewall w/ Superior Menace Prevention |
||||
Extra Sources:
Cloud Community Firewall Comparative Report and Take a look at Experiences
2024 Finest Practices for Cloud Community Firewall Deployment
Exploring the Panorama of Cloud Community Firewalls Accessible on AWS
Why Firewalls Needs to be Safe by Default
About CyberRatings.org
CyberRatings.org is a 501(c)6 non-profit group devoted to offering confidence in cybersecurity services and products by means of our analysis and testing applications. We offer enterprises with impartial, goal scores of safety product efficacy to make knowledgeable choices. To grow to be a member, go to www.cyberratings.org and observe us on LinkedIn.
