An intrusion prevention system (IPS) includes all the features of an intrusion detection system but also has the ability to act upon malicious traffic. Since the IPS usually sits in line with network traffic it can shut down attacks, typically by blocking access from the attacker or blocking access to the target. In some cases, the IPS can talk to the firewall to block an attack.
Palo Alto Networks founder and CTO Nir Zuk took to the stage to deliver the closing keynote address at the company's first-ever user conference here by trumpeting his company's success in firewall innovation and what he described as his competitors' weak attempts to follow.
Palo Alto Networks wants its next-generation firewall to be the center of enterprise security, giving it a malware-detection and analysis capability called WildFire that's intended to inspect all traffic passing through the firewall to detect targeted attacks within 30 minutes.
Palo Alto Networks Tuesday unveiled the first virtualized version of its next-generation firewall, server-based software intended to run on the VMware platform to allow security managers to set up firewall application-layer controls in virtual machines (VM).
<a href="http://www.networkworld.com/supp/2011/enterprise6/120511-cloud-computing-juniper-253313.html">Juniper Networks</a> says that <a href="http://www.networkworld.com/news/2011/112911-security-theinfopro-253538.html">Palo Alto Networks</a> is infringing on its next-generation firewall technology, which was invented by Palo Alto's founders but for which Juniper holds the patents.