NGFWs include typical functions of traditional firewalls such as packet filtering, NETWORK and port address translation (NAT), stateful monitoring, with virtual private network (VPN) support. The aim of next-generation firewalls is to include more layers of the OSI MODEL, IMPROVING filtering of network traffic that is dependent on the packet contents. NGFWs perform deeper inspection compared to stateful inspection executed by the first and second-generation firewalls. NGFWs use a more THOROUGH inspection approach, checking packet payloads and matching the signatures for harmful ACTIVITIES such as exploitable attacks and malware.

NGFWs include typical functions of traditional firewalls such as packet filtering, network and port address translation (NAT), stateful monitoring, with virtual private network (VPN) support. The aim of next-generation firewalls is to include more layers of the OSI model, improving filtering of network traffic that is dependent on the packet contents. NGFWs perform deeper inspection compared to stateful inspection executed by the first and second-generation firewalls. NGFWs use a more thorough inspection approach, checking packet payloads and matching the signatures for harmful activities such as exploitable attacks and malware.