It is interesting to look at the firewall market in one of the planes: what does antivirus engines look like?
Antivirus is not just a certain set of signatures, but also an attached laboratory - after all, you need to find a new malicious code, create signatures and distribute them to your customers. The situation is interesting: Check Point does not have its own antivirus, it includes the Kaspersky Lab engine (Kaspersky Lab) engine in the OEM, with which they have difficulties due to the sanctions and they built in some other engine, but this is not documented. In the Russian office, they say that this is BitDefender. In Cisco (FTD) included in the delivery ClamAV - free antivirus. Fortinet (FortiGate) and Palo Alto Networks (NGFW) have their own antivirus engine and their own anti-virus labs that supply signatures. The Russian vendor Entensys (UserGate) is the engines from LC, Panda, Avira. The company Ideco (UTM) and Altell (NEO) is Kaspersky and ClamAV. Other Russian firewalls of companies Security Code (Continent), Amykon (FPSU-IP), Infotex (ViPNet), Factor-TS (Dionis) do not have antivirus software at all.