Which two features are available only in next-generation firewalls?

Application awareness and deep packet inspection (DPI) are hallmarks of next-generation firewalls (NGFWs). Application awareness allows the firewall to identify and control applications regardless of port or protocol, providing granular control beyond traditional port-based rules. DPI enables the firewall to inspect the actual content of packets, not just headers, to identify and mitigate threats like malware or intrusions that might otherwise bypass simpler checks. Packet filtering and stateful inspection are fundamental features of traditional firewalls. Packet filtering examines network and transport layer headers to allow or deny traffic, while stateful inspection tracks the state of active connections to make more intelligent filtering decisions. Virtual private networks (VPNs) are a security service that can be implemented on various devices, including traditional and next-generation firewalls, but are not exclusive to NGFWs.