Evaluation and comparison of the IDS/IPS function of the two firewalls: Palo Alto with PAN-OS 8.0 and PFSense with the add-on Snort package

Abstract

A firewall is the most important part of a network security system. It acts as a wall between internal and external networks. The main purpose of a firewall is to stop intruders like viruses, Trojan attackers and hackers. It keeps monitoring the incoming and outgoing network traffic to block any kind of cracking, snooping, DDO attacks, etc. Most companies nowadays merely think that they only need a firewall between their local network and the Internet. Although, the firewall is a network's bouncer, only allowing certain people in or out. The companies should concern both of it and an IDS/IPS in their system. The statistics have shown that the firewall cannot substitute for IDS/IPS; it detects fewer attacks than a full-fledged IDS/IPS. We have a lot of choice for firewalls. With small and medium-sized enterprises, we do not have too many budgets which will pay for a firewall. That must be considered to choose which can be suitable for our company.