Cybercon PF Firewall

Firewall features:

• Filtering by source and destination IP, IP protocol, source and destination port for TCP and UDP traffic;
• Able to limit simultaneous connections on a per-rule basis;
• Option to log or not log traffic matching each rule;
• Transparent layer 2 firewalling capable - can bridge interfaces and filter traffic between them, even allowing for an IP-less firewall;
• Statefull firewall that performs stateful packet inspection (SPI) or stateful inspection. It keeps track of the state of network connections (such as TCP streams, UDP communication) traveling across it. The firewall is programmed to distinguish legitimate packets for different types of connections. Only packets matching a known connection state will be allowed by the firewall, others will be rejected;
• Network Address Translation (NAT) support;
• VPN support: IPsec, OpenVPN, and PPTP;

Juniper Firewall

Firewall features:

• Complete set of Unified Threat Management (UTM) security features including stateful firewall, intrusion prevention, antivirus (instant message scanning, anti-spyware, anti- adware, and anti-phishing), anti-spam, and Web filtering stops worms, spyware, Trojans, malware, and other emerging attacks. (Note that not all UTM features are available on all platforms.)
• Centralized, policy-based management minimizes the chance of overlooking security holes by simplifying rollout and network-wide updates.
• Virtualization technologies make it easy for administrators to divide the network into secure segments for additional protection.
• Various high-availability options offer the best redundant capabilties for any given network.
• Rapid-deployment features, including Auto Connect VPN, help minimize repetitive tasks and the administrative burden associated with widespread deployments.

Cisco Firewall

• Most trusted and deployed firewall technology-Building upon the market-proven capabilities of the Cisco PIX Family of security appliances, the Cisco ASA 5500 Series provides a wide range of services to secure modern network environments. Flexible policy capabilities prevent unauthorized access to network resources or vital corporate information. Advanced application control capabilities help businesses effectively control the use of peer-to-peer file sharing, instant messaging, and other non-corporate applications-thus improving employee productivity and reducing wasted Internet bandwidth.
• Threat-protected VPN-Building upon the market-proven VPN capabilities of the Cisco VPN 3000 Series Concentrator, the Cisco ASA 5500 Series Firewall Edition provides secure site-to-site and remote-user access to corporate networks and services. This solution offers businesses maximum flexibility for secure connectivity by combining support for Secure Sockets Layer (SSL) and IP Security (IPsec) VPN capabilities into a single, best-in-class solution. Using the services offered by the Cisco ASA 5500 Series Firewall Edition, businesses can enforce identity-based security and networking policies to all network traffic, thus enabling businesses to tailor-fit access privileges for every group of employees, contractors, and business partners.
• Adaptive design provides superior investment protection and extensibility to address future threats-The Cisco ASA 5500 Series Firewall Edition can adapt as businesses needs change through its unique, modular design. Businesses can easily expand the number of security services offered by adding a high-performance, purpose-built Cisco ASA 5500 Series security services module, such as the Advanced Inspection and Prevention Security Services Module (AIP SSM) for advanced intrusion prevention services, or the Content Security and Control Security Services Module (CSC SSM) for advanced antivirus, antispam, and other content security services.
• Intelligent network integration and enterprise-class resiliency-Building on more than 20 years of Cisco networking leadership and innovation, the Cisco ASA 5500 Series Firewall Edition delivers a wide range of intelligent networking services for seamless integration into today's diverse network environments. Businesses can maximize network uptime and throughput by taking advantage of the many resiliency and scalability services this solution has to offer, such Active/Active high availability, "zero-downtime software upgrades," and integrated VPN clustering and load balancing.
• Easy deployment and management-The Cisco management and monitoring suite enables large-scale deployment and operation of the Cisco ASA 5500 Series Firewall Edition. Cisco provides a complete solution, covering management and monitoring. Also included with the solution is Cisco Adaptive Security Device Manager (ASDM), which provides a powerful, yet easy-to-use browser-based management and monitoring interface for individual security appliances.