It’s Time to Cut Costs on Network Security Equipment

Written by: Francesco Trama | Published on: January 4th, 2016

About The Author

Francesco Trama
As Chief Executive Officer and Founder, Francesco is responsible for the overall operating performance, leading the strategic direction of the company’s products and solutions internally while building technical and business credibility externally as a market-facing thought leader.

The last major innovation in firewall protection was from (what was then) a small company called Palo Alto, around 10 years ago. Cybersecurity hasn’t changed much since then. Cyberattacks, however, are becoming more relentless and more sophisticated. How can you keep them at bay, without breaking the bank on network security? Advanced-IP filtering can keep your network safe, while greatly saving you on usage costs.

Reducing Usage with Advanced-IP Filtering

Many cybersecurity vendors charge based on usage. Much of network security is based on protecting against a certain volume of threats and dealing with a high volume of traffic. Therefore, vendors simply keep adding more usage capacity and charging for it. The more threats and potential attacks your network faces, the more your usage goes up, and the more you have to pay. So if you have a 100MB Gateway, and are using fifty thousand connections, or a certain amount of bandwidth, you have to buy a certain model for x amount.

However, if you have a Geo-Location filter, it cuts the volume of threats that your firewall has to deal with considerably, thus cutting overall traffic. So, say your cybersecurity needs call for a Palo Alto 7080. Out of the box, it costs around $450,000. However, with an Advanced-IP filter in place, you can filter out 50% of your traffic before it gets to the firewall. This takes you out of the Palo Alto 7080 bracket and puts you in a place where you can buy a Palo Alto 7020 instead, at around $113,000. You’ve saved over $200,000, not to mention $2,000 on the initial purchase price, and at least $100,000 annually in upgrade fees.

For another example, let’s take a look at Splunk. Splunk charges for usage by the Gigabyte. You can pay for anywhere between one and twenty Gigabytes per day, based on logging. Say you’re using 15GB per day, at a cost of $795.00 per month. With an Advanced-Ip layer to cut your logging by 50%, you’re now well under 10GB, cutting the cost dramatically, saving thousands per year.

There are a variety of different cybersecurity vendors out there, with all different scales of products, and the amount of traffic to your server dictates the product that you need. The hardware is all the same no matter what your usage level. The only difference is in the restrictions that your vendor decides to impose. And the only way to get around these restrictions is to reduce your total usage.

Cybersecurity is very important. But why should you have to pay extra because an attacker bombarded your network with 10,000 bots? Many people choose to use Advanced-IP filtering that’s built into their firewall. Not only is this a less effective method of protection, it doesn’t really reduce your usage. However, if you use a separate Advenced-IP filter, it can get rid of a significant amount of traffic before it reaches your firewall. Therefore, the more bogus traffic the filter can eliminate, the less you’ll have to pay for cybersecurity usage, and the more secure your network will be overall.