Skip to content
English - United States
Schedule Consultation
  • There are no suggestions because the search field is empty.

What Is a Firewall and Do I Need a Managed One?

What a next-generation firewall does at the edge, and why it needs someone managing it.

A firewall is the device (or service) at the edge of your network that inspects traffic between your business and the internet, blocks threats, and enforces policy about what can connect to what. A managed firewall adds a provider who configures, monitors, updates and reviews it continuously. A firewall nobody manages is a false sense of security.

What a next-generation firewall does

  • Traffic filtering by address, port and application, not just port numbers.
  • Intrusion prevention that recognizes and blocks known attack patterns.
  • Content and web filtering to block malicious and inappropriate sites.
  • Malware inspection of downloads, including encrypted traffic where configured.
  • VPN for remote users and site-to-site connections between offices.
  • Segmentation between internal networks, such as guest Wi-Fi, cameras and servers.
  • Logging that feeds security monitoring.

Why "managed" matters

Firewalls are frequent attack targets precisely because they face the internet, and unpatched firewall and VPN appliances have been the entry point in many ransomware incidents. A managed firewall means:

  • Firmware updates applied promptly.
  • Rules reviewed so old exceptions and open ports are closed.
  • Configuration aligned to a written standard and backed up.
  • Logs monitored and alerts acted on.
  • Subscriptions for security services kept current.
  • Replacement planned before end of support.

Firewall as a service

Some providers deliver the firewall on a monthly subscription that includes the hardware, licensing and management, which converts a capital purchase into an operating cost and guarantees it is never out of support.

The firewall is one layer

It does not protect laptops at home, cloud accounts or email. Those need endpoint protection, identity controls and email security. The firewall's own job is done best when paired with network segmentation and DNS filtering, and checked periodically through a network security audit.

Firewall management is included in Mentis Group's Fully Managed IT program. We work with SonicWall and Cisco Meraki security appliances and provide network security consulting and auditing across Dallas-Fort Worth as part of Enhanced Cybersecurity.

Have a question about your own environment? Schedule a consultation with Mentis Group or call (866) 901-7808.