Skip to content
SPECIFICTION
Get listed

Forcepoint Next Generation Firewall

forcepoint.com

WindowsmacOSLinuxAndroidAPISelf-hosted
Visit forcepoint.com
Spec score 7.5 #5 of 18 in Next Generation Firewall Software

What it is

Forcepoint Next Generation Firewall provides network security and SD-WAN connectivity for enterprise networks spanning physical, virtual, and cloud systems. Its Secure Management Center centralizes policy management, log analysis, monitoring, and reporting. Protection features include deep packet inspection, anti-evasion defenses, intrusion prevention, vulnerability exploit detection, and DoS/DDoS protection. Clustering supports active-active or active-standby arrangements with up to 16 nodes, and updates can be applied without interrupting service. Listed cloud infrastructure includes Amazon Web Services, Microsoft Azure, Google, Oracle, and IBM. Virtual appliances support x86 64-bit systems, VMware ESXi and NSX, Microsoft Hyper-V, KVM, and Nutanix AHV. Integrations include SASE/SSE, CASB, and Web Security; remote access supports the Forcepoint VPN client for Windows, Android, and Mac OS, as well as standard IPsec clients. URL filtering requires a separate subscription, and local anti-malware scanning is unavailable on 110/115 appliances. Pricing is on request, and there is no free plan.

Spec sheet

Purpose
Forcepoint NGFW provides network security and SD-WAN connectivity for enterprise networks across physical, virtual, and cloud systems.Read 12 Oct 2026 · forcepoint.com
Integrations
The product supports SASE/SSE integration, including web traffic forwarding to Forcepoint ONE, and CASB and Web Security integration.Read 12 Oct 2026 · forcepoint.com
Support
The product page directs prospective customers to talk to a Forcepoint network security expert; its pricing page is titled Request Pricing.Read 12 Oct 2026 · forcepoint.com
Headquarters
Austin, Texas, United StatesRead 4 Oct 2026 · forcepoint.com
Central management
The Secure Management Center provides centralized policy management, log analysis, monitoring, and reporting.Read 12 Oct 2026 · forcepoint.com
Cloud platforms
The datasheet lists Amazon Web Services, Microsoft Azure, Google, Oracle, and IBM cloud infrastructure.Read 12 Oct 2026 · forcepoint.com
High availability
Firewall clustering supports active-active or active-standby configurations with up to 16 nodes, and updates can be pushed without interrupting service.Read 12 Oct 2026 · forcepoint.com
Product limits
URL filtering requires a separate subscription, and local anti-malware scanning is unavailable on 110/115 appliances.Read 12 Oct 2026 · forcepoint.com
Remote access
The Forcepoint VPN client is listed for Microsoft Windows, Android, and Mac OS, with support for standard IPsec clients also stated.Read 12 Oct 2026 · forcepoint.com
Security certifications
Forcepoint says its NGFW has Common Criteria certification for Network Security Platform 7.3 and FIPS 140-3 Level 2 certification for its NGFW appliance.Read 12 Oct 2026 · forcepoint.com
Target customers
The product page positions its appliance models for large enterprises, campus networks, data centers, offices, branches, remote sites, and stores.Read 12 Oct 2026 · forcepoint.com
Threat protection
Features include deep packet inspection, anti-evasion defenses, intrusion prevention, vulnerability exploit detection, and DoS/DDoS protection.Read 12 Oct 2026 · forcepoint.com
Virtual platforms
Virtual appliances support x86 64-bit systems, VMware ESXi and NSX, Microsoft Hyper-V, KVM, and Nutanix AHV.Read 12 Oct 2026 · forcepoint.com

Plans and prices

Forcepoint Next Generation Firewall Priced on request Pricing by request · physical, virtual, and cloud deployments Read 12 Oct 2026 · forcepoint.com

Every Forcepoint Next Generation Firewall plan and price →

Strong points and limits

Strong points

  • Centralized policy management and log analysis
  • Clustering supports up to 16 nodes
  • Supports physical, virtual, and cloud deployments
  • Includes intrusion prevention and DoS/DDoS protection
  • Supports standard IPsec clients

Limits

  • Pricing is available on request
  • No free plan
  • URL filtering requires a separate subscription
  • Local anti-malware scanning is unavailable on 110/115 appliances

Who it suits

It is aimed at large enterprises, campus networks, data centers, offices, branches, remote sites, and stores. It may suit organizations managing physical, virtual, and cloud deployments that need centralized policy controls and VPN connectivity.

Verdict

The product combines centralized management, threat protection, and site connectivity across several deployment environments. Buyers should account for the separate URL-filtering subscription and appliance-specific scanning limit, and request pricing from Forcepoint.

Where Specifiction places it

Alternatives to Forcepoint Next Generation FirewallAll alternatives →