NGFW

An NGFW goes beyond traditional port and IP filtering by inspecting traffic at the application layer. It can identify specific applications, enforce user-based policies, and often bundles intrusion prevention and malware inspection. It typically sits at the network perimeter or between internal segments as the main traffic gatekeeper.