Among firewall capabilities, which feature is found only in Cisco next-generation firewalls?

Malware protection is a distinguishing feature of Cisco next-generation firewalls (NGFWs). While traditional firewalls focus on packet filtering and stateful inspection, NGFWs integrate advanced security functions like intrusion prevention systems (IPS), application visibility and control, and robust malware protection, often through sandboxing and threat intelligence feeds. Stateful inspection, traffic filtering, and active/standby high availability are common features found in both traditional and next-generation firewalls, as they are fundamental to network security and resilience. Malware protection, however, represents a significant leap in defensive capabilities, moving beyond basic access control to actively identify and block sophisticated threats.