Prevention Comparative Report
SecureIQLab tested the ability of next-generation firewalls to block the command-and-control capabilities using two different attack suites, Cobalt Strike and Empire, and validated their Threat Mitigation Efficiency. Six On-Prem firewalls were tested: The Checkpoint Quantum 6200P, Cisco Firepower 1140, FortiGate 600F, Palo Alto Networks
PA-460, Juniper SRX340* and Versa Networks CSG2500**.
Note:
• The Juniper SRX 340* test results were not published due to significant product issues encountered during testing, despite adhering to
their best practice guide for setup, deployment, and configuration. These issues manifested as unexpected blocking behavior,
widespread timeouts, and ultimately resulting in the product entering a non-functional state and preventing any meaningful evaluation.
• Versa Networks CSG2500** test results were not published due to licensing-related issues encountered during testing. Attempts to
resolve these issues to ensure product quality and compliance before any testing result publication were not successful.
Download Now
