There is a new wave of enterprise firewall on the market, dubbed next-generation firewall (NGFW). A traditional firewall is usually defined as a device that is able to control the flow of traffic in and out of the network. These typically can only track traffic on layers 2-4. A NGFW can do far more than this. Although specific vendor offerings do differ, there are a selection of features which are generally seen as standard.