Security Value Map™

Next Generation Intrusion Prevention System (NGIPS)

Forcepoint Palo Alto Networks
100%
Fortinet 3000D
Fortinet 500E
Trend Micro

90%

80%

Average
70%

Avera
ge
60%

Security Effectiveness
50%

40%

30%

Juniper Networks IBM

20%

10%
LEGEND Cisco McAfee
NSS was unable to measure the effectiveness and determine the suitability of
No observed evasions
next generation intrusion prevention system products from these vendors and
Observed evasions therefore cautions against their deployment without a comprehensive evaluation.

0%
$200 $180 $160 $140 $120 $100 $80 $60 $40 $20 $0

TCO per Protected Mbps

PRODUCTS TESTED
• Forcepoint Forcepoint NGFW v6.3.6 • Juniper Networks SRX4200 v15.1X49-D140.2
• Fortinet FortiGate 3000D v5.6.4GA build 7892 • Palo Alto Networks PA-5220 PAN-OS 8.1.2
• Fortinet FortiGate 500E v5.6.4GA build 7892 • Trend Micro TippingPoint 8400TX v5.1.0.4965
• IBM QRadar XGS5200 v5.4.0.4

SEPTEMBER 2018

www.nsslabs.com