A network administrator needs a solution to match traffic and allow or deny the traffic based on the type of application, not just the source or destination address and port used. Which kind of…

A next-generation firewall (NGFW) combines traditional firewall capabilities with advanced features like application awareness, intrusion prevention system (IPS) functionality, and deep packet inspection. This allows it to identify and control traffic based on the application generating it, regardless of the port or protocol used, providing granular control and enhanced security.

A web application firewall (WAF) specifically protects web applications from common web-based attacks (e.g., SQL injection, XSS) but focuses on HTTP/HTTPS traffic at the application layer, not general application identification across all protocols.

A next-generation intrusion prevention system (NGIPS) is designed for threat detection and prevention based on signatures and behavioral analysis, but while it can be application-aware, it's typically a component or feature *within* an NGFW, or focused on IPS functions rather than primary traffic filtering by application type.

An intrusion detection system (IDS) primarily monitors network or system activities for malicious policies and alerts on them, but does not actively block or allow traffic based on application type in a filtering capacity.