This talk will look at next generation firewalls; what they try to solve, and why network level monitoring and interception are doomed to fail. We’ll explore the issues cryptography create for passive monitoring, infiltration/exfiltration methods including DNS tunneling and steganography, and the difficulties of reputation analysis in an increasingly cloud and CDN based world. When combined, these issues create significant challenges for the indefinite efficacy of network security appliances.