Which features must a next-generation firewall include? (Choose two.)

A next-generation firewall is designed to provide advanced security features that go beyond traditional firewalls. One critical feature is application visibility and control. This capability allows administrators to see which applications are traversing the network, enabling more precise traffic management and policy enforcement. By having visibility into application-level traffic, security teams can better identify malicious activities, enforce usage policies, and prioritize legitimate business applications, ultimately enhancing the overall security posture of the organization.

Features like intrusion detection systems are also significant in a next-generation firewall as they help identify and respond to potential threats by monitoring network traffic for suspicious activities. However, application visibility and control is particularly vital as it directly addresses the growing complexity and prevalence of application-layer threats, making it essential for modern cybersecurity strategies.