Problem Statement
Which type of firewall filters traffic at the application layer?
Explanation
A next-generation firewall (NGFW) adds application-layer inspection (layer 7) in addition to traditional packet-filtering (layer 3) and stateful inspection (layer 4). It can identify applications (e.g., Facebook, Dropbox), enforce policies per application, detect intrusions, and block advanced threats. Understanding different firewall types helps you design security architecture appropriate to an organisation’s threat profile.
