Learning Center - Next-generation firewall (NGFW) vs. firewall-as-a-service (FWaaS)

A next-generation firewall (NGFW) is a firewall with advanced features, while firewall-as-a-service (FWaaS) is a cloud-delivered firewall for protecting networks and cloud infrastructure. These terms describe two different aspects of a firewall — what it can do (NGFW) versus where and how it is deployed (FWaaS). A next-generation firewall (NGFW) has a specific set of security capabilities. Firewall-as-a-service (FWaaS) describes a firewall that is hosted in the cloud and offered as a service (such a firewall can also be called a “cloud firewall”).

FWaaS can have next-gen capabilities, and an NGFW can be hosted in the cloud. The type of firewall an organization needs depends on their infrastructure. If all of their networking infrastructure and applications are on-premise, a hardware-based NGFW may be sufficient. But most modern organizations run some workloads in the cloud, making FWaaS a necessity (ideally, a FWaaS solution with next-gen capabilities). Learn more in the Cloudflare Learning Center.

Knowledge in Action
Sign up for Cloudflare today and put your knowledge to use.

Screen Shot 2021-12-20 at 2.04.37 PM


This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.