Next-Generation Firewall NGFW

The main gate between the corporate network and the internet. Beyond port/IP filtering, it provides application awareness, intrusion prevention (IPS), URL filtering and branch connectivity (SD-WAN).

When you need it

• If you have servers in your office or data center
• If you connect multiple locations
• If you have internal services published to the internet
• If you offer guest internet access under Turkish Law No. 5651 (logging)

When you do not need it

• If you have no servers, everything is SaaS and employees are mostly remote: cloud-based SSE/SASE makes more sense than a box. For the office, a basic UTM behind the modem is enough.

At the internet edge, as a high-availability (HA) pair. Can also be used as an internal firewall to segment the internal network.