A next-generation firewall (NGFW) provides additional awareness beyond the basic Internet Protocol addresses and ports used by a traditional firewall.

### Why this is right The lesson describes next-generation firewalls as adding features such as application and user identification, threat detection, URL or content inspection, and intrusion prevention. These capabilities extend beyond basic address and port decisions. ### The concept Traditional firewalls primarily use source and destination addresses, port, protocol, and connection state. A next-generation firewall adds inspection and identification features that can provide more context about traffic. This does not mean that traditional firewall functions disappear; the newer capabilities add to them. ### The other options - **False**: this would be correct only if next-generation firewalls used no additional inspection capability beyond addresses and ports. ### Terms - **NGFW**: Next-Generation Firewall. A firewall with additional application, user, and threat inspection capabilities. - **URL**: Uniform Resource Locator. An address identifying a resource on a network such as the web. ### Remember Traditional firewalls focus on network details; next-generation firewalls can add application and threat context.