![Abstract digital artwork with a flowing wave-like pattern comprised of small green dots that gradually fade into the white background. The wavy design, reminiscent of an SD-WAN backbone, creates a sense of movement and fluidity.](https://i0.wp.com/www.open-systems.com/wp-content/uploads/2021/05/hero_wave01-BG-green-grey.jpg?fit=2560%2C1440&ssl=1)
Firewall
Simplify and Enhance Network Security
To protect your WAN from external threats such as web threats, cyberattacks, or unauthorized access, a state-of-the-art firewall is still essential in perimeter security. Threats not only come from the outside but increasingly from inside your WAN.
Our next-gen firewall protects your organization‘s network servers and end-user machines not just by filtering traffic, but by leveraging multiple security zones within the network itself.
![Diagram of a global policy network. At the center is a globe icon with a leaf and drop of liquid, representing a global policy. Connected to it are four rectangular envelopes, each containing the same icon, indicating dissemination of the policy.](https://i0.wp.com/www.open-systems.com/wp-content/uploads/2021/03/Overview-960x480-1.png?fit=775%2C388&ssl=1)
Deliver Powerful Protection
Advanced Filtering of Network Traffic
Multi-Zone Approach to Security
Global and Local Policy Flexibility
How We Protect Your Network
Our multi-zone network firewall policies strike the right balance between security and operability.
- Global IT defines a global corporate security policy by defining general zone transitions
- Local IT maintains and updates local firewall objects. In addition, exceptions or new zones can be defined in collaboration with global IT.
Policy
>Through smart layer 7 packet inspection, applications can be detected automatically on the network and used for filtering by the firewall. This helps to simplify the firewall policy – instead of implementing several firewall rules to allow SaaS application traffic with different protocols, ports, and destination IPs, logic can be summarized to one application rule.
Security
>Assets from different security zones can only communicate via certain applications or protocols, as defined by individual firewall rules, and security zones can be shielded from each other by restricting or blocking their zone transitions. For more granular filtering, individual site-specific firewall rules can be implemented to allow access on certain protocols for assets from different zones.
Operability
>Through the zoning concept, a lot of different network segments or interfaces can be summarized to one zone of a certain security level. Consequently, one simple zone transition policy can be defined instead of implementing several different access rules for each one-to-one communication.
Management
>From a policy management perspective, we offer a hybrid administration model that allows an organization’s global IT to enforce a security policy while providing flexibility for local IT to customize the policy where needed.
![A diagram showing the integration of Skype for Business between various users and servers with firewall rules. The left side depicts multiple user devices connecting through a firewall. The right side focuses on Skype for Business services with specified firewall rules.](https://i0.wp.com/www.open-systems.com/wp-content/uploads/2021/03/How-Policy-600x270-1.png?fit=470%2C212&ssl=1)
Through smart layer 7 packet inspection, applications can be detected automatically on the network and used for filtering by the firewall. This helps to simplify the firewall policy – instead of implementing several firewall rules to allow SaaS application traffic with different protocols, ports, and destination IPs, logic can be summarized to one application rule.
![A diagram showing network traffic flow. A large rectangle represents a network device. A red line labeled LAN enters from the left, indicating blocked traffic with a red circle and a white minus sign. A green line labeled WAN exits to the right, indicating allowed traffic. Labeled areas are Production, Internet, and LAN.](https://i0.wp.com/www.open-systems.com/wp-content/uploads/2021/03/How-Security-600x270-1.png?fit=470%2C212&ssl=1)
Assets from different security zones can only communicate via certain applications or protocols, as defined by individual firewall rules, and security zones can be shielded from each other by restricting or blocking their zone transitions. For more granular filtering, individual site-specific firewall rules can be implemented to allow access on certain protocols for assets from different zones.
![A diagram displays a device with symbols indicating connectivity. The device has arrows pointing outwards labeled Production (top), WAN (right), Internet (bottom), and LAN (left). It suggests different network connections associated with the device.](https://i0.wp.com/www.open-systems.com/wp-content/uploads/2021/03/Operability-600x270-1.png?fit=470%2C212&ssl=1)
Through the zoning concept, a lot of different network segments or interfaces can be summarized to one zone of a certain security level. Consequently, one simple zone transition policy can be defined instead of implementing several different access rules for each one-to-one communication.
![Diagram illustrating a global policy for deployment managed by Global IT, connecting with four different local deployments managed by Local IT. Each local deployment has a computer icon and is linked to the central policy represented by a globe and firewall icon.](https://i0.wp.com/www.open-systems.com/wp-content/uploads/2021/03/How-Management-600x270-1.png?fit=470%2C212&ssl=1)
From a policy management perspective, we offer a hybrid administration model that allows an organization’s global IT to enforce a security policy while providing flexibility for local IT to customize the policy where needed.
- Global IT defines a global corporate security policy by defining general zone transitions
- Local IT maintains and updates local firewall objects. In addition, exceptions or new zones can be defined in collaboration with global IT.
A Multi-Zone Approach Ensures Security and Trust
Open Systems’ firewall architecture introduces distinct security zones. These zones segment the global network into different zones of security and trust and enable communication between zones to be properly controlled.
With this feature, we can filter traffic at transitions between different security zones and maintain security within each zone. Thus, the overall integrity of the SD-WAN can be shielded not only from internet threats but also from doubtful internal sources in untrusted security zones.
![Diagram illustrating a decentralized network with offices, production sites, and internet users across a world map, connected by green lines. The lower part of the image shows a simplified version of the network with fewer connections. Red icons denote issue points.](https://i0.wp.com/www.open-systems.com/wp-content/uploads/2021/03/Multi-Zone-Approach-600x270-1.png?fit=600%2C270&ssl=1)
How To Buy
Firewall is available in our Enterprise and Enterprise+ SASE service plans. Our plans combine 24×7 expertise focused on connecting and protecting users, apps, sites and clouds – all unified on an intelligent platform.
![Two individuals are working at computers in a dimly lit room with large glass panels. One is standing and the other is seated, as they focus intently on their screens. A world map is visible on a large monitor in the background, suggesting a tech or security setting for a Line Operations Service Provider.](https://i0.wp.com/www.open-systems.com/wp-content/uploads/2021/03/Mission-Control-23.jpg?fit=775%2C581&ssl=1)
Leave Complexity
Behind
To learn how Open Systems SASE Experience can benefit your organization, talk to a specialist today.
Contact Us![](https://i0.wp.com/www.open-systems.com/wp-content/uploads/2024/04/Home-Page_IMG-6.jpg?fit=1600%2C1067&ssl=1)