Select ALL capabilities identified as possible features of a next-generation firewall (NGFW).

### Why this is right - **Application identification** is correct because a next-generation firewall can identify applications beyond basic port and protocol information. - **User identification** is correct because it can associate traffic with users. - **Threat detection** is correct because it is an additional security capability listed for this firewall type. ### The concept A traditional firewall mainly uses addresses, ports, protocols, and connection state. A next-generation firewall adds awareness and inspection functions, including application and user identification, threat detection, URL or content inspection, and intrusion prevention. These capabilities do not mean that translated traffic is automatically permitted. ### The other options - **D. Automatic permission for every translated connection**: NAT changes addresses; a security policy is still required to allow traffic. ### Terms - **NGFW**: Next-Generation Firewall. A firewall with additional application, user, and threat inspection capabilities. - **URL**: Uniform Resource Locator. The address used to identify a resource on a network such as the web. ### Remember More inspection capability does not remove the need for an allow policy.