Next-generation firewalls (NGFWs) are at the core of an enterprise security strategy, and the best ones incorporate policy enforcement for applications and user control, intrusion prevention, deep packet inspection, sandboxing, and threat intelligence feeds.

Where they differ from one another is in pricing, performance, ease of installation and use, effectiveness at blocking threats, and advanced features such as cloud protection, application visibility, and integration with other security products.