high-speed searching of already aggregated security log files

high-speed aggregation and viewing of security log files

multiple physical machines to be configured into a high-performance cluster

multiple guest operating systems to run on a single physical machine

It cannot identify command-and-control traffic.

It cannot monitor all potential network ports.

It assumes that all internal devices are untrusted.

It assumes that every internal endpoint can be trusted.

unified threat management

stateless firewalls

next-generation firewall

PoS-based firewall