Next Generation Firewall Implementation

Progress update: July 2025 -- 100% complete

The Next-Generation Firewall (NGFW) project was completed June 30, 2025. Effective July 1, 2025, three new Unified Threat Management (UTM) features were introduced as part of the enterprise cost allocation for existing customers.

Check out the Secure Connections | Managed Firewall Service Page for details about adding UTM features. 

WaTech is strengthening cybersecurity by rolling out the Next Generation Firewall project. This upgrade ensures our network is protected with the latest security technologies, helping safeguard state operations and services. 

Vision

WaTech’s vendor supported Unified Threat Management (UTM) firewalls ensure the network is protected from security threats while reducing complexity and costs. By consolidating redundant security tools, we improve efficiency and create a coordinated security approach for the state.

Project Goals

• Increase WaTech’s capability to safeguard state government from security threats.
• Expand WaTech’s firewall capabilities to include Unified Threat Management (UTM) capabilities.
• Enhance state government network (SGN) security in the State’s Data Centers.
• Improve performance of Security Operations (SOC) edge security capabilities.

Phase 1 Deliverables (Complete)

• Established Edge Firewall IPS Support Process (RACI).
• Migrated core traffic to new core firewalls.
• UTM features implementation decisions.
• Core IPS service offers processes and procedures.

Phase 2 Deliverables (Complete)

Implemented the following UTM features that were decided in Phase 1:

• Web security/filtering.
• Spam detection.
• Forti Analyzer indicator of compromise (IOC).

Conducted proof of concept for future prioritization and funding:

• FortiSandbox advanced malware protection (Core).

Business Sponsors

• Cesar Rivera: cesar.rivera@watech.wa.gov
• Matt Stevens: Matt.stevens@watech.wa.gov