Enterprise Firewall Comparative Test Results Show That Encryption … – PR Newswire

Six out of the eight products are Recommended with one in Neutral and the other in Caution.Firewalls will not see attacks delivered via HTTPS unless configured to do so.

AUSTIN, Texas, April 25, 2023 /PRNewswire/ -- RSAC 2023 --CyberRatings.org, the non-profit entity dedicated to providing transparency on cybersecurity product efficacy, has completed an independent test of eight market leading security vendors in its Enterprise Firewall comparative evaluation. Six products received Recommended ratings with high security effectiveness scores ranging from 94.05% to 99.94%.

Security Effectiveness tests measured how well the enterprise firewall controlled network access/applications and prevented exploits/evasions, all while remaining resistant to false positives. Products were subjected to thorough testing to determine their support for TLS/SSL 1.2 and 1.3 cipher suites, how they defended against 1,724 exploits, whether protection could be bypassed by any of 1,482 evasions, and if the devices would remain stable under adverse conditions.

Six products received Recommended ratings with high security effectiveness scores ranging from 94.05% to 99.94%.

Performance was measured using both clear text and encrypted traffic in order to provide more realistic ratings that are based on modern network traffic. Performance was measured with security enabled, and security effectiveness was measured while under moderate performance load. This was to ensure vendors did not take security shortcuts to improve performance nor enable overly aggressive security protections that would adversely impact performance. Connection rates and throughput of TLS 1.2 and TLS 1.3 encrypted traffic were significantly lower. Average connection rates of encrypted traffic were between 65% to 86.5% lower than unencrypted traffic.

Evasions were measured by taking several previously blocked attacks and then applying evasion techniques to those baseline samples. This ensured that any misses were due to the evasions, not the baseline samples. Several vendors missed evasions, with one vendor missing 72 evasions.

Key Findings:

"Firewalls are the keystone of most network security programs," said Vikram Phatak, CEO of CyberRatings.org. "It is concerning that some market share leaders are falling behind. CISOs should put pressure on those vendors to improve and look at alternatives in case they don't."

The following products were evaluated:

To read the CyberRatings reports go to CyberRatings.org.

Additional Resources

About CyberRatings.org

CyberRatings.org is a 501(c)6 non-profit organization dedicated to providing confidence in cybersecurity products and services through our research and testing programs. We provide enterprises with independent, objective ratings of security product efficacy. To become a member,visit http://www.cyberratings.org

SOURCE CyberRatings.org

Read more from the original source:
Enterprise Firewall Comparative Test Results Show That Encryption ... - PR Newswire

Related Posts

Comments are closed.