Sophos XG firewall: real-time data lets us tune performance
Your firewall is the electronic security frontier of your business. Like any frontier, it checks traffic coming and going, looking for things which shouldn't be allowed through.
Deep-packet-inspection was once the preserve of spies and national security services, but now is available to the rest of us. Data flowing through the firewall is checked, not just for what it is, but to confirm it's going where it ought to be. Anything out of the ordinary, for example, company data implausibly going to YouTube, will be detected and stopped. The same applies to incoming data, too.
This technology makes it far harder to hide malicious behaviour as something legal and normal. It's available in the Cyberoam and Sophos products which we recommend.