The ______ software blade package uses CPU-level and OS-level sandboxing in order to detect and block malware.

Next Generation Threat Prevention is the umbrella package name encompassing multiple blades including Threat Emulation and Threat Extraction, not a sandboxing-specific technology.

Check Point Threat Emulation (part of the SandBlast solution) runs suspicious files in isolated CPU-level and OS-level sandbox environments to observe behavior and detect zero-day and unknown malware. This is distinct from Threat Extraction, which sanitizes files rather than sandboxing them, and Threat Prevention, which is the overarching package name rather than a specific sandboxing engine.

Next Generation Threat Extraction (CDR) removes potentially malicious active content from files and delivers clean reconstructed versions, rather than using sandboxing to detect malware.

Next Generation Firewall is a blade package providing application awareness, identity-based policy enforcement, and IPS, not CPU/OS-level sandboxing.