What's the difference between the next generation firewall and ordinary firewall?

The differences between the next generation firewall and ordinary firewall are as follows:

First, the difference between functions.

The next generation firewall can collect all kinds of information outside the firewall, which can be used to improve the blocking decision or as the basis for optimizing the blocking rules. Examples include using directory integration to enforce user identity-based blocking, or address-based blacklisting and whitelisting.

Traditional firewall has the functions of packet filtering, network address translation (NAT), protocol state checking and VPN.

Second, the difference between data detection

The next generation firewall provides deep packet inspection function, which goes beyond simple port and protocol inspection by inspecting the data carried in network packets.

Ordinary firewalls do not have the function of deep packet detection.

Third, the difference between dealing with threats.

The next generation firewall enhances the ability of application-level inspection, intrusion prevention and taking action on the data provided by threat intelligence services.

In addition, the next generation firewall extends the traditional firewall functions supported by NAT, PAT and VPN, so that it can run in routing mode (firewall acts as a router) and transparent mode (firewall acts as a line buffer). At the same time, it can scan data packets and integrate new threat management technologies.

These technologies are not available in ordinary firewalls.