Unified threat management (UTM)

Unified threat management is an approach that combines several network security functions, such as firewall, intrusion prevention, web filtering and antivirus, into a single appliance or service.

A UTM device sits at the edge of a network and provides multiple layers of protection from one management console. Typical features include firewalling, VPN, intrusion detection and prevention, content and web filtering, spam filtering and gateway malware scanning. The terms UTM and next-generation firewall now overlap considerably, and many products are marketed as both.

For a small Alberta office or branch location, a UTM offers solid protection without needing separate products from several vendors. It is simpler to manage and usually more affordable, which suits organizations without dedicated security staff.

Practical tip: size the device for your internet connection with all security features turned on, since inspection can slow throughput significantly. Keep the security subscriptions current, because many protection features stop updating when a licence lapses. Remember that a UTM protects traffic passing through the office, so remote workers and cloud services need their own protections.