Which two advanced security capabilities do next-generation firewalls provide that standard firewalls did not?

Next-generation firewalls (NGFWs) evolved from traditional firewalls by adding deeper inspection capabilities. Intrusion Prevention Systems (IPS) functionality allows NGFWs to detect and prevent known threats and exploits by analyzing traffic against signature databases and behavioral patterns. Application control enables NGFWs to identify and manage applications regardless of port or protocol, allowing granular policies based on application identity rather than just port numbers. Standard firewalls primarily offered stateful traffic inspection, which tracks the state of active connections to allow or deny traffic based on source/destination IP, port, and protocol. Remote access VPNs are a common feature across various security devices, including traditional firewalls, but are not unique to NGFWs' advanced inspection capabilities. Network telemetry involves collecting data for analysis but isn't a direct security enforcement capability like IPS or application control.