How AI Powers NGFW Solutions in 2026: Russian Vendors and Global Approaches Compared
The original headline asked how AI is used inside NGFW solutions in 2026, comparing Russian products with international offerings. The text clarifies that simply claiming “AI inside” is meaningless because vendors implement very different capabilities.
Four practical AI scenarios in NGFW
The article compares four concrete scenarios and lists what customers should verify for each:
- ML threat detection – evaluates files, connections or DNS queries for malicious indicators; buyers must check detection quality, false-positive rates, latency and cloud dependency.
- AI-driven operations analytics – explains events, validates configuration and offers recommendations; verification points include traceability to raw data and accuracy of advice.
- Administrator assistant or agent – answers configuration questions and can execute permitted actions; key controls are privilege scope, change approval workflow and full audit logging.
- Protection of AI usage – discovers AI services and enforces access policies; advanced gateways can also inspect prompts and agent-to-agent traffic.
The final scenario does not always require an LLM; URL categories or application signatures suffice for basic visibility, as implemented by UserGate and Ideco.
Global vendor landscape
Palo Alto Networks combines on-box deep learning with cloud analysis inside Advanced Threat Prevention to detect unknown C2 channels. Juniper offers both cloud and on-premises Advanced Threat Prevention for SRX devices. Generative assistants appear in management planes: Cisco AI Assistant inside Secure Firewall Management Center, Check Point AI Assist in SmartConsole R82, and Juniper Security Director Copilot (beta, July 2026). Fortinet adds Shadow AI visibility, AI-aware Application Control and MCP/A2A agent monitoring in FortiOS 8.0, while Palo Alto Networks introduced the separate Prisma AIRS AI Gateway in July 2026 for prompt inspection.
Russian market offerings
Kaspersky NGFW uses machine learning for heuristic file analysis and integrates with Kaspersky Security Network. UserGate applies the URL category “Chat-bot AI” for content-filtering rules. Ideco stands out by combining 83 recognized AI protocols in the Application Control module of Ideco NGFW Novum v23, a dedicated AI dashboard, and two read-only AI services available through technical support: IPS/DNS Security log analysis and firewall rule auditing. Both services run via REST API in read-only mode and never alter configuration. Planned v24 features include an LLM Proxy for logging and filtering LLM requests.
The article concludes that AI in NGFW is becoming essential because autonomous agents now access corporate data and attackers increasingly automate reconnaissance and exploitation. Effective solutions must accelerate detection and response while keeping final control with human administrators.
Related articles
AI in Vulnerability Management: Assistant, Weapon, and Emerging Target
Artificial intelligence now plays three simultaneous roles in vulnerability management: it assists defenders with prioritization and analysis, arms attackers with faster discovery tools, and introduces entirely new classes of assets and vulnerabilities that must be managed. Mature applications include ML-driven risk scoring in platforms such as Tenable VPR, Qualys TruRisk and Rapid7 Active Risk, which cut priority lists by 40-50 percent, and Google’s Big Sleep project that discovered a real-world SQLite flaw (CVE-2025-6965) before exploitation occurred. On the offensive side, systems like XBOW completed 104 test scenarios in 28 minutes versus 40 hours for human testers, shrinking the average time-to-exploit window to negative seven days according to Mandiant M-Trends 2025. New AI-specific attack surfaces are documented in the OWASP Top 10 for LLM applications and the emerging MCP Top 10, covering prompt injection, tool poisoning, and command injection against Model Context Protocol servers. Real incidents already include Air Canada’s chatbot inventing a refund policy and New York City’s MyCity bot dispensing illegal advice for nearly two years. Researchers have also demonstrated sandbox escapes in coding agents from Cursor, OpenAI Codex and Claude Code through classic file-write-and-execute patterns rather than any sentient behavior.
Solar Unveils AI Firewall to Protect Against Dangerous Actions by AI Agents
At SOC Forum 2026, Russian cybersecurity firm Solar presented its new Solar AI Firewall solution designed to filter requests to external AI models and block prompt injections. The product sits between users and AI systems, applying multi-layer protection that responds in milliseconds and counters 200 types of attacks. Special emphasis is placed on autonomous AI agents capable of performing actions in corporate systems, where the firewall inspects operations and blocks potentially harmful ones. Integrations with DLP, SIEM, and IDM tools are supported, and the solution is available both as a cloud service and for on-premises deployment. Solar has been testing the product internally and observed significant shadow AI usage outside corporate controls. The company plans further development of comprehensive AI risk management capabilities.
TenetBench Benchmark Tests LLMs for Compliance with Professional Ethical Codes
Researchers from the Institute of Information Security Issues at ISP RAS and the Institute of Cybersecurity and Information Protection at RANEPA have developed TenetBench, a benchmark designed to evaluate how well large language models adhere to specific norms in professional codes of ethics. The benchmark generates realistic work-related prompts that may conflict with rules from documents such as the Code of Professional Ethics for Advocates or journalistic standards on undisclosed advertising. Each test case pairs a conflicting request with a neutral counterpart to measure whether models refuse, warn, or still provide prohibited content. Evaluation separates task completion, norm violation detection, and presence of explicit refusals using an LLM-as-a-Judge approach validated against human annotators. The full dataset contains 3,433 prompt pairs derived from 15 professional codes, with a public subset of 2,235 pairs from 10 documents. Human validation confirmed 99.5% of generated examples as fully plausible work scenarios.
Solar to Showcase Solar AI Firewall for Business Protection Against AI Risks at SOC Forum 2026
GK Solar will present its new Solar AI Firewall solution at SOC Forum 2026 to help organizations control interactions with AI services and prevent confidential data leaks through employee prompts. The product addresses growing risks from staff sending corporate data to neural networks and AI agents gaining access to internal systems. The forum takes place on 27-28 October in Moscow's Lomonosov cluster, with the official launch of Solar AI Firewall scheduled during the event. Solar will also highlight practical risks of AI adoption, including data transmission to external services, use of public models by employees, and new attack surfaces in corporate infrastructure. The solution will be demonstrated as part of an integrated ecosystem for access, network, and data protection. In addition, the company plans to introduce JSOC ONE, a new line of Solar JSOC services tailored for mid-sized businesses that require 24/7 monitoring without building their own SOC.