Russian market of new generation firewalls (NGFW, Next-Generation Firewall)

Next-Generation Firewall (NGFW) is an integrated network security platform that combines traditional firewalls with other network-based traffic filtering solutions such as Deep Packet Inspection (DPI), Intrusion Prevention System (IPS), and more.

Differences from traditional firewalls

The next generation firewalls contain many of the functions inherent in traditional firewalls: packet filtering, built-in virtual private network (VPN), network address and port translation, traffic inspection with storing the state of a data packet, etc.

At the same time, NGFW solutions filter not just at the port and protocol level, but at the layer of application protocols and functions of the applications themselves, thus looking deep into transactions and stopping malware activity and blocking the most complex attack methods.

According to the definition of Gartner analysts, next-generation firewalls should be guaranteed to provide the following:

• Protection against continuous attacks by infected systems
• standard capabilities for the first generation of firewalls;
• signatures for defining application types based on the IPS engine;
• Full-stage inspection of traffic, including applications, as well as detailed and configurable control at the application level
• The ability to include information outside the firewall (for example, integration with network directories, white and black application lists)
• A continuously updated database of application and threat definitions
• inspection of traffic encrypted using SSL.

Evolution of NGFW

As information system hacking techniques improved, firewalls evolved. The new generation of these products has become specialized and performs deep traffic analysis and application identification. The work of these solutions has noticeably accelerated compared to its predecessors, much more complex sets of rules and flexible security policy settings have appeared.

Migration to next-generation firewalls begins

That is why in 2015 the demand for new generation firewalls is growing from large companies (data center operators, large network providers and security services), medium-sized businesses and government agencies.

According to analysts Research and Markets, the global NGFW market size will increase by 12.1% annually between 2014 and 2019. Experts call Check Point, Cisco Systems, Fortinet, Juniper Networks, McAfee and Palo Alto Networks the key developers of these products.^[1]

Chronicle

2025

"It's a painful experience when the power supply burns down, the cluster falls apart." The head of the information security center "Sber Tech" - about the problems of Russian NGFW

In "Sber Tech," where they took up import substitution of NGFW back in 2022 and then they already chose a certain vendor, they are now re-looking at the market and looking closely. Vitaly But, head of the Sber Tech information security center, spoke about this in September at a conference organized by the general partnership of Jet Infosystems.

We look at who and how has matured since that time, changed what happened, whether we stay with the same vendor or someone catches up with him. This is a rather difficult story, because it is not clear who will survive. Now some are actively investing in firewalls, but whether these same vendors will also actively invest in 2-3 years is a question. They do not give guarantees, - the Vitaly But shared at the session "Import substitution of NGFW, a look from the consumer."

Read more here.

Kaspersky Lab launched its own NGFW on the market

On August 8, 2025, Kaspersky Lab announced the release of a commercial version of Kaspersky NGFW, a new generation firewall of its own design to protect organizations from cyber threats. It is intended for medium and large companies (1000 or more devices), including those falling under regulatory policy in the field of information security. Read more here.

Gardaí withdrew from the overheated NGFW market. Dozens of other players are next in line

As TAdviser discovered, a new generation firewall (Next-Generation Firewall, NGFW), which the company had previously begun to actively promote, has disappeared from the Garda product portfolio (part of ICS Holding). It is no longer on the company's website. By the time of the "disappearance," the Garda NGFW product, declared as a ready-made development in January 2024, managed to get into the product catalogs of some partner companies, and the Securitylab industry portal in December 2024 even included it in the list of "best Russian solutions" in the NGFW^[2] segment^[3]

Garda Technologies announced plans to develop NGFW after Western manufacturers of this class of products left Russia. She then replenished the pool of new Russian players trying to bite off a piece of the vacated market. And in mid-2023, Garda Technology, together with a number of other developers of information security systems, such as TechArgos, Weblock, Makves and Bastion, merged into Garda Holding as part of ICS Holding^[4].

Regarding the disposal of Garda NGFW from the product portfolio, Deputy General Director of Garda Group Rustem Khayretdinov explained to TAdviser in early June that TechArgos was developing NGFW. The latter has continued its development beyond the perimeter of the Garda Group of Companies since February 2025. Under an agreement with TechArgos, Garda was engaged in marketing the solution, so the product used to be on the Garda website, says Rustem Khayretdinov.

At the time of the withdrawal of TechArgos from the structure of its assets in February 2025, Garda Group reported that "the group will focus on the development and implementation of software for data protection and network security of business and government agencies, while it was decided to abandon the development of narrow-profile projects"^[5].

𝓲

Фото: Icomaker/Freepik

Investments in development were also carried out by TechArgos: "Garda has been engaged in software development since its inception and has not invested in NGFW development," the company says.

Earlier, the details of the development of NGFW as part of the Garda Group of Companies were not disclosed. After parting with this product, the company plans to expand its portfolio with other solutions.

Garda focuses on developing and implementing data protection and network security software and does plan to expand its product portfolio. The company plans to announce new products as they are ready to go to market, - said Rustem Khayretdinov in a conversation with TAdviser.

At the same time, as of the beginning of June, there is no NGFW product on the website of TechArgos itself, and customers are offered the classic Argos FW firewall. But, apparently, this is only so far: in the current vacancies posted on recruiting sites, TechArgos calls the creation of NGFW its flagship project. In mid-May, the company published a vacancy for the NGFW software architect. The employee in this position will have to "study the existing software architecture of the project, develop a plan for the development of the software architecture of the project based on the principles of building high-performance, scalable and fault-tolerant solutions in the field of telecommunications and information security"^[6]

I must say that recently rumors have been circulating on the market about the departure from the NGFW market of another large company - Red Security (formerly MTS RED), which is part of MTS. Its NGFW is still at the prototype level, judging by the information in the public field. It is impossible to buy it, you can only conduct a pilot. Red Security itself told TAdviser that the company did not close the product, but its response does not indicate that NGFW is now a priority.

The company did not close the product. However, our focus now is the development of cybersecurity services so that they occupy one of the leading positions both in terms of the volume of offered technologies for protection against cyber threats and in the quality of expert customer support, the company told TAdviser.

One of the Russian developers of NGFW, Positive Technologies, notes that at some point the number of vendors developing NGFW in the Russian market has exceeded 50, but now they are confidently continuing to talk about the development of about 25 companies. This was pointed out, in particular, by the managing director of Positive Technologies Denis Korablev, speaking at the investor's day on May 23. He believes that in a year such vendors will remain on the market of only 3-4 companies^[7].

Denis Korablev also noted that some competitors of Positive Technologies are "closing": "There is one large red telecom operator who curtailed product development, starting it two years ago, realizing that they would not. And there will be more and more of them, I am sure of that. "

Earlier, the fact that the domestic NGFW market will return to a state where there will be only a few vendors on it was also discussed in another Russian NGFW developer, UserGate.

Why Russian NGFWs do not reach the level of imported: 23 functions that customers may lack

The number of offers of Russian NGFW has recently grown significantly. But do many of them meet the requirements and expectations of customers? And what are these requirements? Artem Kulichkin shared his vision of the situation on the Russian NGFW market in an article prepared specifically for TAdviser, and. about. Director for information security subsidiaries of affiliates of one of the largest. insurance companies Russia Read more here.

Bank of Russia tested domestic firewalls

Testing of the next generation domestic firewalls (NGFW) has been completed, and its results have been satisfactory. This was announced on March 3, 2025 by Andrei Vybornov, Deputy Director of the Information Security Department of the Bank of Russia. According to him, "the situation turned out to be uncritical," and the regulator received "normal test results."

According to Vedomosti, several Russian banks participated in the tests, providing their infrastructure to test the capabilities of domestic means of protection. On the part of the developers, four companies that create firewalls took part in the testing. According to the representative of the Central Bank, there were no restrictions on accepting applications, all interested vendors were included in the work.

𝓲

Фото: Freepik

Next-generation firewalls (NGFWs) are network security hardware that filters inbound and outbound traffic, preventing unauthorized data access. Vadim Uvarov, Director of the Information Security Department of the Bank of Russia, announced the start of testing this equipment in November 2024 at the SOC forum, indicating that four leaders among manufacturers were determined in the testing process.

The test results were sent to the Ministry of Digital Development to assess the need for improvements in solutions. These tests are of high importance in the context of import substitution, since according to presidential decree No. 250 of March 30, 2022, all software and hardware complexes at critical information infrastructure (CII) facilities should have been imported by January 1, 2025.

The representative of VTB confirmed the bank's participation in testing, noting that the bank, together with other members of the working group under the auspices of the Central Bank, participated in the development of technical requirements for laboratory testing of NGFW. At the same time, he admitted that "testing Russian NGFWs was not easy, there is still something to work on."^[8]

2024

TAdviser guide for Russian NGFW

firewall The Next Generation (NGFW) concept Firewall was formulated by Gartner in 2008. Foreign developers of protective equipment sold it in their products and almost completely seized the Russian market. It was possible to compete with them only in very narrow niches, for example, when protecting critical infrastructure or classified information. However, after their departure from Russia customers, there was a huge need to buy sanctioned NGFWs, that is, domestic production. Therefore, the number of manufacturers who decided to try their luck in this market has increased greatly. In mid-2024, TAdviser collected an NGFW guide from the most notable domestic developers of this class of protective equipment. More. here

The Russian NGFW solutions market grew by 30% over the year and reached ₽52,2 billion

The volume of the Russian market for new generation firewalls (NGFW) in 2024 reached ₽52,2 billion, an increase of 30.1% compared to the previous 2023. Such data are contained in a study by the Center for Strategic Research (CSR), published in early April 2025. According to the report, the growth rate in Russia is 18% ahead of the dynamics of the global market.

According to the CSR, by 2030 the market volume of NGFW solutions in Russia may reach ₽146,3 billion with an average annual growth of 18.3%, which is 6.2% higher than the global pace in this segment. Such dynamic growth is primarily due to a sharp change in the market structure in favor of domestic developers.

𝓲

Фото: Freepik

Deputy General Director of the CSR Ekaterina Kvasha noted that the study was based on data from open sources, the results of company questionnaires and a survey of key industry participants. According to the center's estimates, 76.8% of companies continue to use foreign solutions, but their share in new sales has significantly decreased - from 72% in 2021 to 31.6% in 2024.

CSR experts predict a further increase in the share of Russian companies in this market, with the peak of the import substitution process expected in 2025-2026. The key growth factors are not only a change in the supplier landscape, but also the increasing intensity of cyber attacks on the IT infrastructure of Russian companies, government support measures, as well as tightening cybersecurity legislation.

Pavel Korostelev, head of the Security Code product promotion department, characterizes the NGFW segment as the most controversial in terms of interaction between the state, market and vendors. He believes that due to the variety of requirements and the specifics of customer IT infrastructures, significant opportunities have opened up for manufacturers, but the stage of explosive growth is nearing completion, and the market is entering a maturity phase, followed by increased competition and consolidation.

The researchers also identified factors that restrain the development of the NGFW market in Russia. Among them are the high cost of upgrading the network infrastructure and introducing new solutions, as well as the labor intensity of restructuring the processes of operating NGFW systems. Nevertheless, domestic solutions in this segment demonstrate noticeable progress.

Almaz Mazitov, NGFW Business Development Manager at Innostage, points out that problems with technical support and the complexity of introducing new solutions are inevitable stages in the development of the NGFW domestic market. He is confident that in the coming years Russian companies will be able to offer competitive products that provide a high degree of protection against cyber threats, which is facilitated by positive market dynamics and state support.

Despite the fact that domestic solutions have not yet reached the maturity level of their foreign counterparts, over the past two years, leading Russian companies, including User Gate, Security Code, Positive Technologies and Solar Group of Companies, have significantly strengthened their positions in the market.

The head of the Solar NGFW product of Solar Group Albert Mannanov emphasizes that the departure of Western NGFW vendors created a powerful incentive for the development of Russian developments of this class of solutions starting in 2022. At the same time, over the past two years, the growing maturity of Russian solutions has become an additional factor in the development of the industry, given the key role of NGFW in protecting the network infrastructure.

By the end of 2024, there were already more than 30 participants in the NGFW market in Russia with products of varying degrees of readiness. Key leaders have been identified, and the consolidation of the proposal has begun, the end of which experts expect by 2026.^[9]

2023

FSTEC approves NGFW requirements

In July 2023, FSTEC approved the requirements for NGFW, which were expected by many on the market^[10]. The requirements are intended for organizations developing and (or) manufacturing multifunctional network-level firewalls, applicants for certification, as well as for testing laboratories and certification bodies performing work on certification of information protection tools for compliance with mandatory information security requirements.

The document includes the minimum necessary information security requirements for the NGFW trust level, access control, user identification and authentication, network traffic filtering, detection and blocking of computer attacks, detection and blocking of malware, trusted download, testing and integrity control, hardware platform and operating modes, as well as recording security events and ensuring the uninterrupted operation and recovery of NGFW, interaction with other means of information protection, as well as to centralized and remote control of the software and hardware complex.

"Weak link" of the information security market: FSTEC and Ministry of Digital Development pedal the development of the segment of Russian firewalls of a new generation

FSTEC, together with the expert community, have developed requirements for new generation firewalls. Now they are going through various legal procedures, comments have already been received from the lawyers of the Ministry of Justice, Vitaly Lyutikov, deputy director of FSTEC, told PHDays on May 19, 2023. When this process is completed, the requirements will take effect. And Ministry of Digital Development actively interacts with developers in order to synchronize them with customers: to make sure that several products in the NGFW segment appear in Russia that would satisfy a larger number of customers. Read more here.

Rostelecom, VTB and Positive Technologies invest 3.5 billion rubles in the creation of new generation firewalls

Rostelecom, VTB and Positive Technologies are investing 3.5 billion rubles in the creation of new generation firewalls (NGFW). This became known in mid-April 2023.

As CNews writes with reference to the roadmap "New system-wide software" prepared by VK, Rostelecom, Kaspersky Lab and 1C within the framework of an agreement with the Government of the Russian Federation, VTB will implement two projects in the field of NGFW. The first of these is the "100 gb NGFW Encoder." This product is intended for cryptographic protection of information transmitted over high-speed communication channels at a speed of 100 Gbps.

Rostelecom, VTB and Positive Technologies intend to invest a total of 3.5 billion rubles. in the development of their own new generation firewalls (NGFW)

The second product is "Modern NGFW 100 gb." The product will filter network traffic to protect organizations from internal and external threats. The product will support stateful firewall features such as packet filtering, IpSec and SSL VPM support, network monitoring, and IP address mapping features, and will include deeper content validation. The documents talk about VTB's plans to spend 1.6 billion rubles to create two products based on NGFW.

Solar Dozor NGFW, a product of RTK-Solar (a subsidiary of Rostelecom), is also included in the New System-Wide Software roadmap. The general director of the company Igor Lyapunov estimated investments in the development of this solution at 1.2 billion rubles for a 5-year period. By April 2023, Solar Dozor NGFW supports a speed of 20 Gbps, by 2024 it will reach a speed of 100 Gbps.

Positive Technologies is also going to enter the NGFW market. Its managing director Denis Korablev linked the vendor's solution with the departure of foreign NGFW solution developers from Russia, after which Positive Technologies customers were left without protection. Investments in the company's project will amount to 750 million rubles.^[11]

See also

Information security (Russian market)

Notes