What are two Features of NGFW:

Data mining is a big data analytics discipline used to discover patterns in large datasets and is not a security control feature of an NGFW.

Host-based antivirus is an endpoint security control that runs on individual hosts, not a network-based NGFW function.

Application visibility and control is a defining NGFW feature that allows the firewall to identify and control specific applications regardless of port or protocol, using deep packet inspection and application signatures. This goes beyond what traditional stateful firewalls can do. It enables policy enforcement at the application layer (Layer 7).

SIEM (Security Information and Event Management) is a separate platform used for log aggregation, correlation, and alerting across the environment and is not a built-in NGFW feature.

IDS (Intrusion Detection System) capability is integrated into NGFW platforms, allowing them to inspect traffic for known attack signatures and anomalies inline. This consolidates threat detection into the firewall itself rather than requiring a separate appliance.